CVEs published November 2, 2026
474 CVEs were published on November 2, 2026: 26 critical, 150 high. 10 early warnings were posted.
- Published
- 474
- Critical
- 26
- High
- 150
- Medium
- 149
- Low
- 10
- Unrated
- 139
- Now in CISA KEV
- 0
- Fix available
- 137
- Early warnings
- 10
Most affected products
- Google Android
- 138
- MediaTek chipset
- 56
- Linux
- 26
- Huawei HarmonyOS
- 13
- PostgreSQL psqlODBC
- 11
- Control Web Panel
- 10
- Dell Alienware Command Center
- 10
- Dell OpenManage Enterprise
- 10
- Netpbm
- 7
- Eclipse Foundation Eclipse ThreadX
- 6
Early warnings 10
- SZB-dffcdbc311Germany says lawmakers' iPhones may have been hacked with spywareApple · iPhone
- SZB-b728804dc9Abrigo takes Sageworks risk app offline after irregular activityAbrigo · Sageworks
- SZB-7a8b5fe3b6Google says Videostrong backdoored Android TV boxes in 1.3M-device botnetVideostrong · Android TV set-top boxes
- SZB-c7aa11a23fBTCPay Server maintainer warns of hot wallet thefts on outdated instancesBTCPay Server · BTCPay Server
- SZB-9ad81aaa3bMicrosoft fixes bug that blocked Smart App Control activation after October updateMicrosoft · Windows 11 Smart App Control
- SZB-0bed561f10IBM discloses two critical Langflow flaws allowing unauthenticated code executionLangflow · Langflow
- SZB-ca48ede9d9BleepingComputer reports over 1,000 exposed GitLab servers unpatched against an exploited RCE flawGitLab · GitLab CI/CD
- SZB-7b2beadb7bMalicious Claude Code extension distributed in Cursor supply chain attackCursor · Claude Code-branded extension
- SZB-3a668ff545DebugBear says DNS records were hijacked via its domain registrarDebugBear
- SZB-407cb1f14cIvanti patches two more Connect Secure zero-days chained in attacksIvanti · Ivanti Connect Secure
Critical 26
- CVE-2026-86596s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameterclavaque s2Member – Excellent for All Kinds of Memberships,…
- CVE-2026-116769Authentication bypass in Secure Access ServersAbsolute Security Secure Access
- CVE-2026-97718CSRF in Secure Access Server v14.60Absolute Security Secure Access
- CVE-2026-102435Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Fieldthemefic Ultra Addons for Contact Form
- CVE-2026-105606Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8joomlaboat.com Custom Tables extension for Joomla
- CVE-2026-105604Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-105603Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-105769kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostschainguard kaniko
- CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxySUSE Rancher
- CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerSUSE Rancher
- CVE-2026-77876Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryControl Web Panel
- CVE-2026-73696Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndexControl Web Panel
- CVE-2026-120459python-jose through 3.5.0 Authentication Bypass via Empty HMAC Keympdavis python-jose
- CVE-2026-120447HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Codebufanyun HotGo
- CVE-2026-120442ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypassxianhc ape-volo-admin
- CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayBarracuda Networks Barracuda Email Security Gateway
- CVE-2026-120213@fastify/http-proxy vulnerable to prefix escape via decoded route parameters@fastify/http-proxy
- CVE-2025-11969Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative ActionsWSO2 API Manager · WSO2 Identity Server as Key Manager +7
- CVE-2026-120345WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injectionWAVLINK WN551X3-A
- CVE-2026-120344WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injectionWAVLINK WN551X3-A
- CVE-2026-120322Termix-SSH Termix transferToHost path traversalTermix-SSH Termix
- CVE-2026-120283Linksys E8450 portal.cgi strcpy stack-based overflowLinksys E8450
- CVE-2026-120282WAVLINK WN536AX6-A protocol.csp host_black os command injectionWAVLINK WN536AX6-A
- CVE-2026-120281WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowWAVLINK WN536AX6-A
- CVE-2026-120280WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionWAVLINK WN536AX6-A
- CVE-2026-120279WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionWAVLINK WN536AX6-A
High 150
- CVE-2026-71450Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows…Johnson Controls EasyIO Neo EC and CW Edge Controller
- CVE-2026-120752PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() CalloutPyMuPDF
- CVE-2026-115215NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams…Eclipse Foundation Eclipse ThreadX
- CVE-2026-115403NULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullEclipse Foundation Eclipse ThreadX
- CVE-2026-120091Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the…Temporal Technologies Temporal Server
- CVE-2026-105476Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate…WebPros cPanel
- CVE-2026-105475Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.WebPros cPanel
- CVE-2026-58873In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check.Google Android XR
- CVE-2026-116768Missing length validation in Absolute Secure AccessAbsolute Software Secure Access
- CVE-2026-29508ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF ParserReadyMedia
- CVE-2026-116767Improper input handling in Secure Access serversAbsolute Software Secure Access
- CVE-2026-116766Improper input handling in Secure Access serverAbsolute Software Secure Access
- CVE-2026-91895Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability.Dell Alienware Command Center
- CVE-2026-59044In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-59028In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-91898Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature…Dell Alienware Command Center
- CVE-2026-59000In multiple locations, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58984In multiple locations, there is a possible memory corruption due to a use-after-free.Google Android
- CVE-2026-58970In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-58965In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-119740Nexbox A95X Amlogic S905X UART Unauthenticated Console AccessNexbox A95X
- CVE-2026-58957In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-58946In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58944In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a…Google Android
- CVE-2026-58943In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.Google Android
Show all 150 entriesShow fewer entries
- CVE-2026-58942In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-58934In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58885In multiple locations, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58884In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58866In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing…Google Android
- CVE-2026-58853In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check.Google Android
- CVE-2026-58837In multiple locations, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2026-58836In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that…Google Android
- CVE-2026-58829In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2026-58828In multiple functions of base.c, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58827In multiple functions of dma-buf.c, there is a possible use after free due to a race condition.Google Android
- CVE-2026-58826In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2026-58825In multiple functions of fork.c, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-55289In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy.Google Android
- CVE-2026-55287In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to…Google Android
- CVE-2026-55283In multiple locations, there is a possible memory safety issue due to a use-after-free.Google Android
- CVE-2026-55275In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-55271In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy.Google Android
- CVE-2026-55262In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization…Google Android
- CVE-2026-55257In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI.Google Android
- CVE-2026-49931In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy.Google Android
- CVE-2026-49923In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code.Google Android
- CVE-2026-49922In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-45514In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code.Google Android
- CVE-2026-28597In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation.Google Android
- CVE-2026-28588In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in…Google Android
- CVE-2026-91893Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability.Dell Alienware Command Center
- CVE-2026-119737Amlogic pppoe_wrapper Command Injection via AF_UNIX SocketNexbox A95X · Amlogic Android SDK
- CVE-2026-120065psqlODBC does not escape a server-supplied column name in its updatable-cursor queriesPostgreSQL psqlODBC
- CVE-2026-120064psqlODBC does not validate column numbers and row indexes in binding and descriptor functionsPostgreSQL psqlODBC
- CVE-2026-120062psqlODBC SQL injection through SQLSpecialColumns table and schema namesPostgreSQL psqlODBC
- CVE-2026-120061psqlODBC ODBC escape parser stack buffer overflowPostgreSQL psqlODBC
- CVE-2026-120058psqlODBC row cache overflow when a later FETCH changes the column countPostgreSQL psqlODBC
- CVE-2026-120057psqlODBC large-object read overflows the application bufferPostgreSQL psqlODBC
- CVE-2026-119736Attendo Admin Android 3.0.13 Hard-coded MQTT Broker CredentialsPetpooja Munshi
- CVE-2026-119734Munshi IDOR via Purchase Inquiry Thread EndpointPetpooja Munshi
- CVE-2026-119733Munshi Missing Authorization in Company Deletion APIPetpooja Munshi
- CVE-2026-119732Munshi Broken Object Level Authorization via Invoice Deletion APIPetpooja Munshi
- CVE-2026-119731Munshi Payment Bypass via Unauthenticated Webhook EndpointPetpooja Munshi
- CVE-2026-81938Arbitrary file read via Alertmanager receiver configuration in Grafana MimirGrafana Enterprise Metrics · Grafana Mimir
- CVE-2026-111048FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notesFOSSBilling
- CVE-2026-119085Template injection in the publishing component of awslabs Virtual Engineering WorkbenchAWS virtual-engineering-workbench
- CVE-2026-120596CVE-2026-120596Ethernut / egnite Nut/Net TCP/IP Stack
- CVE-2026-119301Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandasaws-sdk-pandas
- CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRulesSUSE Rancher
- CVE-2026-99239Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux
- CVE-2026-99238tracing: Hold trace_types_lock when updating modules in persistent instancesLinux
- CVE-2026-99237tracing: Hold trace_types_lock when resetting last boot data from readersLinux
- CVE-2026-99236tracing: Reject incomplete event filter expressionsLinux
- CVE-2026-99235tracing: Save the event file instead of the compatible histogramLinux
- CVE-2026-99233tracing/histograms: Verify event_call identity when updating synth_event refcountLinux
- CVE-2026-99231io_uring/waitid: own the request before clearing ->headLinux
- CVE-2026-99227io_uring/waitid: prevent cancel reference wrapLinux
- CVE-2026-99224keys: Protect the type name while describing a keyLinux
- CVE-2026-99218coredump: hold RCU while releasing parked threadsLinux
- CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgerySUSE Rancher
- CVE-2026-109142Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same serverNLnet Labs Krill
- CVE-2026-109141Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk importNLnet Labs Krill
- CVE-2026-109140Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" tokenNLnet Labs Krill
- CVE-2026-104080Control Web Panel (CWP) < 1.30 OS Command Injection via valid_tokenControl Web Panel
- CVE-2026-77880Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/Control Web Panel
- CVE-2026-77879Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIControl Web Panel
- CVE-2026-77878Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase APIControl Web Panel
- CVE-2026-77877Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root AccessControl Web Panel
- CVE-2026-115653Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modeEclipse Foundation Eclipse ThreadX
- CVE-2026-114408NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullEclipse Foundation Eclipse ThreadX
- CVE-2026-73697Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorControl Web Panel
- CVE-2026-73695Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpControl Web Panel
- CVE-2026-120487LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core UpgradesLaraDashboard
- CVE-2026-120461Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batchdromara Jpom
- CVE-2026-120460Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllersdromara Jpom
- CVE-2026-120451libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driverlibgphoto2
- CVE-2026-120448DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpointdoramart DoraCMS
- CVE-2026-120446madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management APImadong-code madong-admin-saas
- CVE-2026-120445madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddlewaremadong-code madong-admin-saas
- CVE-2026-120444GoFound through 1.4.1 Path Traversal via database parameter in /api/db/dropsea-team GoFound
- CVE-2026-120439QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sortQuickJS-NG
- CVE-2026-120438QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys EnumerationQuickJS-NG
- CVE-2026-120436Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnmNetpbm
- CVE-2026-120435Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppmNetpbm
- CVE-2026-120434Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPolyNetpbm
- CVE-2026-120433Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPolyNetpbm
- CVE-2026-120432Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopamNetpbm
- CVE-2026-120431Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer OverflowNetpbm
- CVE-2026-120429Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaControllerowen2345 Camaleon CMS
- CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve RouteOpenCSG CSGHub
- CVE-2026-120425Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpointmunafio Chatify
- CVE-2026-120318Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAXCodeixer Product Gallery Slider & Additional Variation Imag…
- CVE-2026-74993SQL Injection in Starnet Computer Systems' Inventory Tracking ApplicationStarnet Computer and Network Systems Inventory Tracking App…
- CVE-2026-102802Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension…regularlabs.com Sourcerer Free extension for Joomla · re… +1
- CVE-2026-103419Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-103420Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5php-web-design.com StageIt extension for Joomla
- CVE-2026-105600Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5php-web-design.com StageIt extension for Joomla
- CVE-2026-105602Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.joomshaper.com Helix Ultimate extension for Joomla
- CVE-2026-111560OS Command Injection in Barracuda AppliancesBarracuda Networks Barracuda Email Security Gateway · Ba… +4
- CVE-2026-92886Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-registerTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-94349Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-117518@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape@fastify/reply-from
- CVE-2026-8923Remote Code ExecutionZohocorp ManageEngine Eventlog Analyzer · Zohocorp ManageEn…
- CVE-2026-2613SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service DisruptionWSO2 API Manager · WSO2 Traffic Manager +3
- CVE-2026-18199Remote Code Execution VulnerabilityZohocorp ManageEngine Password Manager Pro · Zohocorp Manag…
- CVE-2026-101176Permission control vulnerability in the event notification management module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101186DoS vulnerability in the window module.Huawei HarmonyOS
- CVE-2026-20591In GPU pdma, there is a possible escalation of privilege due to a missing permission check.MediaTek chipset
- CVE-2026-20585In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20565In Modem, there is a possible out of bounds write due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20559In GPU pdma, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20558In GPU pdma, there is a possible escalation of privilege due to use after free.MediaTek chipset
- CVE-2026-20557In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20556In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20554In Modem, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20549In Modem, there is a possible out of bounds write due to improper input validation.MediaTek chipset
- CVE-2026-20548In Modem, there is a possible out of bounds write due to an integer overflow.MediaTek chipset
- CVE-2026-20547In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20546In Modem, there is a possible out of bounds write due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20545In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20499In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-120317http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrityhttp4k
- CVE-2026-120316http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolutionhttp4k
- CVE-2026-120315LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFilelobehub chat
- CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePathJovancoding Network-AI
- CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette NameJovancoding Network-AI
- CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job IDJovancoding Network-AI
- CVE-2026-106804A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module.
- CVE-2026-106808OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication…
Medium, low and unrated 298
- CVE-2026-120597Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scriptingWelcart e-Commerce Plugin
- CVE-2026-120740Hivex: hivex: denial of service via out-of-bounds read in big-data block processingRed Hat Enterprise Linux
- CVE-2026-116635Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Serveraws-serverless-mcp-server
- CVE-2026-116958Konflux-ci: unquoted variable expansion in shell command executionkonflux-ci
- CVE-2026-120503EchoHS GeekezBrowser Public API status information disclosureEchoHS GeekezBrowser
- CVE-2026-58977In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58930An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a…Google Android
- CVE-2026-58927The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within…Google Android
- CVE-2026-58926A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer…Google Android
- CVE-2026-58925The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming…Google Android
- CVE-2026-58924The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method.Google Android
- CVE-2026-58915A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up…Google Android
- CVE-2026-49906An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the…Google Android
- CVE-2026-49903The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…Google Android
- CVE-2026-16305CVE-2026-16305INFINITT Healthcare System Manager
- CVE-2026-91901Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme…Dell Alienware Command Center
- CVE-2026-91896Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability.Dell Alienware Command Center
- CVE-2026-86365Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability.Dell Alienware Command Center
- CVE-2026-91900Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler…Dell Alienware Command Center
- CVE-2026-91899Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature…Dell Alienware Command Center
- CVE-2026-91897Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability.Dell Alienware Command Center
- CVE-2026-91894Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability.Dell Alienware Command Center
- CVE-2026-59048In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check.Google Android
- CVE-2026-59047In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-59046In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation.Google Android
Show all 298 entriesShow fewer entries
- CVE-2026-59045In multiple locations, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-59043In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-59042In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-59031In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-59022In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-59021In multiple locations, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-59020In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition.Google Android
- CVE-2026-59016In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal.Google Android
- CVE-2026-59015In multiple locations, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-59014In multiple locations, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-59012In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission…Google Android
- CVE-2026-59011In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-59010In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check.Google Android
- CVE-2026-59008In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion.Google Android
- CVE-2026-59007In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code.Google Android
- CVE-2026-59006In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Google Android
- CVE-2026-59005In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check.Google Android
- CVE-2026-59004In multiple locations, there is a possible permission bypass due to an uncaught exception.Google Android
- CVE-2026-59003In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check.Google Android
- CVE-2026-59002In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code.Google Android
- CVE-2026-59001In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58997In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure.Google Android
- CVE-2026-58995In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow.Google Android
- CVE-2026-58994In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58990In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow.Google Android
- CVE-2026-58989In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check.Google Android
- CVE-2026-58988In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2026-58986In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58985In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-58979In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58978In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58976In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code.Google Android
- CVE-2026-58975In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58974In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58971In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow.Google Android
- CVE-2026-58969In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58968In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free.Google Android
- CVE-2026-58966In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow.Google Android
- CVE-2026-58964In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation.Google Android
- CVE-2026-58963In multiple locations, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58962In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58961In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the…Google Android
- CVE-2026-58956In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code.Google Android
- CVE-2026-58955In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code.Google Android
- CVE-2026-58953In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow.Google Android
- CVE-2026-58951In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58949In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow.Google Android
- CVE-2026-58945In multiple locations, there is a possible side channel information leak due to improperly used crypto.Google Android
- CVE-2026-58938In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58937In multiple locations, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2026-58936In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free.Google Android
- CVE-2026-58933In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code.Google Android
- CVE-2026-58886In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.Google Android
- CVE-2026-58883In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-58882In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow.Google Android
- CVE-2026-58879In descramble of multiple files, there is a possible out-of-bounds write due to improper casting.Google Android
- CVE-2026-58877In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58876In multiple locations, there is a possible memory safety issue due to a use-after-free.Google Android
- CVE-2026-58875In multiple locations, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58871In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow.Google Android
- CVE-2026-58870In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58868In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58867In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58857In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58847In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code.Google Android
- CVE-2026-58845In multiple locations, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-58844In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check.Google Android
- CVE-2026-58838In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-58824In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-58821In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection.Google Android
- CVE-2026-58817In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation.Google Android
- CVE-2026-58814In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow.Google Android
- CVE-2026-55292In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow.Google Android
- CVE-2026-55288In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.Google Android
- CVE-2026-55272In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-55264In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy.Google Android
- CVE-2026-55263In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading…Google Android
- CVE-2026-55261In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check.Google Android
- CVE-2026-49935In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal.Google Android
- CVE-2026-49934In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation.Google Android
- CVE-2026-49924In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion.Google Android
- CVE-2026-49912In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error…Google Android
- CVE-2026-28665In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation.Google Android
- CVE-2026-28645In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the…Google Android
- CVE-2026-28643In multiple locations, there is a possible denial of service due to a missing permission check.Google Android
- CVE-2026-28632In multiple locations, there is a possible way to share files across profiles due to a logic error in the code.Google Android
- CVE-2026-28621In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check.Google Android
- CVE-2026-0053In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient…Google Android
- CVE-2025-26433In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.Google Android
- CVE-2025-22436In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack.Google Android
- CVE-2026-119739Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTRNexbox A95X · Amlogic Android SDK
- CVE-2026-119738Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()Nexbox A95X · Amlogic Android SDK
- CVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted FileThe HDF Group HDF5
- CVE-2026-120067psqlODBC stack buffer overflow copying ctid and oid values for updatable cursorsPostgreSQL psqlODBC
- CVE-2026-120066psqlODBC log files are created with default permissions at a predictable path and follow symbolic linksPostgreSQL psqlODBC
- CVE-2026-120063psqlODBC stack buffer overflow when quoting long schema and table namesPostgreSQL psqlODBC
- CVE-2026-120060psqlODBC does not validate server-supplied counts and lengthsPostgreSQL psqlODBC
- CVE-2026-120059psqlODBC uses a server-supplied column name as a format stringPostgreSQL psqlODBC
- CVE-2026-120497Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsAWS aidlc-traceability
- CVE-2026-119735Munshi XSS via Purchase Inquiry Thread RenderingPetpooja Munshi
- CVE-2026-120656CVE-2026-120656OpenKruise kruise-manager
- CVE-2026-105605Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-120416AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgeryAndyFactory newspaper4k
- CVE-2026-120630CVE-2026-120630CrewAI
- CVE-2024-12139Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering AttacksWSO2 API Manager · WSO2 Identity Server
- CVE-2026-120627CVE-2026-120627Private Internet Access Firefox extension
- CVE-2026-65059Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responsesFurl
- CVE-2026-99242ntfs: fix race between fallocate and mmap readsLinux
- CVE-2026-99241ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux
- CVE-2026-99240mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux
- CVE-2026-99234tracing: Unregister field variable histograms when the command failsLinux
- CVE-2026-99232tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux
- CVE-2026-99230io_uring/cmd: don't leave list poison in ->hash_nodeLinux
- CVE-2026-99229io_uring/wait: don't spin on a stuck overflow listLinux
- CVE-2026-99228io_uring/io-wq: don't lose the signal that ends workLinux
- CVE-2026-99226keys: Avoid the owner account dereference in named keyring lookupLinux
- CVE-2026-99225keys: Check the authorization payload in process keyring searchesLinux
- CVE-2026-99223keys: make keyring indexes independent of kernel addressesLinux
- CVE-2026-99222keys: Protect the read method check against type removalLinux
- CVE-2026-99221keys/trusted_keys: return immediately after TPM unseal failureLinux
- CVE-2026-99220asymmetric_keys: reject trust keys without IDsLinux
- CVE-2026-99219ftrace: Initialize modname and offset in print_rec()Linux
- CVE-2026-99217fork: release the files of a failed fork after sched_cancel_fork()Linux
- CVE-2026-16306CVE-2026-16306INFINITT Healthcare System Manager
- CVE-2026-120501An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable srcredimp otterwiki
- CVE-2026-120500An Otter Wiki before 2.26.2 Stored XSS via Math Code Blockredimp otterwiki
- CVE-2026-2102XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameterWren Security wrensec-commons
- CVE-2026-77881Control Web Panel (CWP) < 1.30 Blind SQL Injection via user ParameterControl Web Panel
- CVE-2026-115654User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not ownEclipse Foundation Eclipse ThreadX
- CVE-2026-118052Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationEclipse Foundation Eclipse ThreadX
- CVE-2026-120492Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urlsChainlit
- CVE-2026-120491Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity PageWing FTP Software Wing FTP Server
- CVE-2026-120489Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached DraftOutline
- CVE-2026-120488LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block ContentLaraDashboard
- CVE-2026-120458Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header ParserUltra Video Group Kvazaar
- CVE-2026-120457libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension DecoderDeutsches Klimarechenzentrum libaec
- CVE-2026-120456L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url BoxesL-SMASH
- CVE-2026-120455rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()biojppm rapidyaml
- CVE-2026-120454The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN DecompressionThe Sleuth Kit
- CVE-2026-120453The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs HeaderThe Sleuth Kit
- CVE-2026-120452libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversionlibgphoto2
- CVE-2026-120450LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email ToolLaraDashboard
- CVE-2026-120449Outline before 1.12.0 Improper Access Control via Public Document SharesOutline
- CVE-2026-120443GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Resultssea-team GoFound
- CVE-2026-120441OwnTone Server through 29.3 SQL Injection via MPD sticker find CommandOwnTone Server
- CVE-2026-120440QuickJS-NG before 0.16.0 Memory Leak via Atomics.storeQuickJS-NG
- CVE-2026-120437Netpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppmNetpbm
- CVE-2026-120430Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesControllerowen2345 Camaleon CMS
- CVE-2026-120428PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String BypassChaitin PandaWiki
- CVE-2026-120427MrDoc through 1.1.1 Missing Authorization via get_doctemp Template Readzmister2016 MrDoc
- CVE-2025-71450inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loopbenhoyt inih
- CVE-2026-111959Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds readsApache Software Foundation Apache Arrow Rust
- CVE-2026-105601Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5php-web-design.com StageIt extension for Joomla
- CVE-2026-102801Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1regularlabs.com Users Anywhere (Free, Pro) extension for Jo…
- CVE-2026-114364Apache Syncope: SQL injection via unsanitized opEvent in Audit Events searchApache Software Foundation Apache Syncope
- CVE-2026-113687Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassApache Software Foundation Apache Syncope
- CVE-2026-113511Apache Syncope: Delegated administration boundaries can be bypassed for Realm updateApache Software Foundation Apache Syncope
- CVE-2026-120463Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linkingsassanix Warracker
- CVE-2026-110535Apache Syncope: AuthProfile value escalation via self-service updateApache Software Foundation Apache Syncope
- CVE-2026-109083Apache Syncope: Remote Code Execution via Flowable JUEL expressionApache Software Foundation Apache Syncope
- CVE-2026-91903Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-91904Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-91905Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.Dell OpenManage Enterprise
- CVE-2026-91906Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-91907Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site…Dell OpenManage Enterprise
- CVE-2024-12141Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing AttacksWSO2 Identity Server
- CVE-2026-91908Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.Dell OpenManage Enterprise
- CVE-2026-91909Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument…Dell OpenManage Enterprise
- CVE-2026-91910Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-91911Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-100140Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qtqt
- CVE-2024-9517Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked AccountsWSO2 API Manager · WSO2 Universal Gateway +7
- CVE-2026-120216fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responsesfastify
- CVE-2024-2372Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing AttacksWSO2 Open Banking AM · WSO2 API Manager +5
- CVE-2026-117531@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers@fastify/multipart
- CVE-2026-117549@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal@fastify/secure-session
- CVE-2025-12544Stored Cross-Site Scripting in Multiple WSO2 ProductsWSO2 API Manager · WSO2 Carbon API Manager Publisher REST A…
- CVE-2026-120215@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook@fastify/cors
- CVE-2026-120214@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments@fastify/http-proxy
- CVE-2026-18800Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive DataWSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2026-118871SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI productZTE ElasticNet RNIA R18 NGI
- CVE-2025-13647Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File PathsWSO2 Identity Server · WSO2 Open Banking IAM
- CVE-2024-7075Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 ProductsWSO2 Enterprise Integrator · WSO2 API Manager +2
- CVE-2026-107457Memory corruption vulnerability in QMqttClient impacts Qt MQTTQt
- CVE-2026-101184Permission control vulnerability in the Bluetooth module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101178Permission control vulnerability in the autofill service module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-103310PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment NotificationPayHere Payment Gateway
- CVE-2026-101177Permission control vulnerability in the Optimizer module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101174DoS vulnerability in the DSoftBus module.Huawei HarmonyOS
- CVE-2026-101173DoS vulnerability in the DSoftBus module.Huawei HarmonyOS
- CVE-2026-101185OOB read vulnerability in the peripheral module.Huawei HarmonyOS
- CVE-2026-101183UAF vulnerability in the location service module.Huawei HarmonyOS
- CVE-2026-101182Race condition vulnerability in the location service module.Huawei HarmonyOS
- CVE-2026-101181Permission control vulnerability in the WLAN module.Huawei HarmonyOS
- CVE-2026-101180DoS vulnerability in the file parsing module.Huawei HarmonyOS
- CVE-2026-101179Buffer overflow vulnerability in the file preview module.Huawei HarmonyOS
- CVE-2026-101175Null pointer dereference vulnerability in the ArkWeb module.Huawei HarmonyOS
- CVE-2026-101171Permission control vulnerability in the background task management module.Huawei HarmonyOS
- CVE-2026-101170DoS vulnerability in the file parsing module.Huawei HarmonyOS
- CVE-2026-101172Permission control vulnerability in the graphics module.Huawei HarmonyOS
- CVE-2026-120349dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injectiondayrui XunRuiCMS
- CVE-2024-5617Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force AttacksWSO2 API Manager · WSO2 Identity Server +2
- CVE-2026-120348dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injectiondayrui XunRuiCMS
- CVE-2026-120347dayrui XunRuiCMS Member View.php View sql injectiondayrui XunRuiCMS
- CVE-2026-120343mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scriptingmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120342mathurvishal CloudClassroom-PHP-Project viewquery.php sql injectionmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120341mathurvishal CloudClassroom-PHP-Project studentdetails.php redirectmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120340mathurvishal CloudClassroom-PHP-Project Global Session session expirationmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120339mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scriptingmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120337VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after freeVStarcam O-KAM SuperIPCam
- CVE-2026-120336VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflowVStarcam O-KAM Client
- CVE-2026-120335deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversaldeepset-ai farm
- CVE-2026-120334deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversaldeepset-ai farm
- CVE-2026-68591In Modem, there is a possible escalation of privilege due to a permissions bypass.MediaTek chipset
- CVE-2026-68590In ip_stack, there is a possible out of bounds read due to improper input validation.MediaTek chipset
- CVE-2026-68589In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-68588In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow.MediaTek chipset
- CVE-2026-20600In Modem, there is a possible application crash due to a logic error.MediaTek chipset
- CVE-2026-20599In Modem, there is a possible escalation of privilege due to a missing permission check.MediaTek chipset
- CVE-2026-20598In Modem, there is a possible out of bounds read due to an integer overflow.MediaTek chipset
- CVE-2026-20597In Modem, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20596In Modem, there is a possible out of bounds read due to improper input validation.MediaTek chipset
- CVE-2026-20595In neuropilot, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20594In Modem, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20593In Modem, there is a possible application crash due to improper input validation.MediaTek chipset
- CVE-2026-20592In Modem, there is a possible information disclosure due to side channel information disclosure.MediaTek chipset
- CVE-2026-20590In display, there is a possible system crash due to a logic error.MediaTek chipset
- CVE-2026-20584In usb, there is a possible memory corruption due to a missing bounds check.MediaTek chipset
- CVE-2026-20583In usb, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20582In usb, there is a possible memory corruption due to double free.MediaTek chipset
- CVE-2026-20581In usb, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20580In usb, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20578In Modem, there is a possible information disclosure due to side channel information disclosure.MediaTek chipset
- CVE-2026-20577In Modem, there is a possible permission bypass due to a permissions bypass.MediaTek chipset
- CVE-2026-20576In afe, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20575In afe, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20574In afe, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20573In afe, there is a possible memory corruption due to double free.MediaTek chipset
- CVE-2026-20572In adsp, there is a possible out of bounds write due to an integer overflow.MediaTek chipset
- CVE-2026-20571In afe, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20570In adsp, there is a possible escalation of privilege due to use after free.MediaTek chipset
- CVE-2026-20569In adsp, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20568In afe, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20567In afe, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20566In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20564In Modem, there is a possible out of bounds write due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20563In Modem, there is a possible out of bounds write due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20562In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20561In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20560In Modem, there is a possible system crash due to improper input validation.MediaTek chipset
- CVE-2026-20555In Modem, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20553In DA, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20552In ccci, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20551In gnss, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20550In gnss, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-120325Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversalWebpro-nl Knip
- CVE-2026-120324Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversalAklivity Zilla
- CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task OperationsJovancoding Network-AI
- CVE-2026-120310Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Responseparse-community parse-server
- CVE-2026-120309Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParamnuxt
- CVE-2026-120323samanhappy MCPHub passthroughHeaders.ts information disclosuresamanhappy MCPHub
- CVE-2026-120320jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserializationjxxghp MoviePilot
- CVE-2026-120319Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorizationSanluan PublicCMS
- CVE-2025-62819Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration…
- CVE-2026-106803A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module.
- CVE-2026-106805A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling.
- CVE-2026-106806A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server.
- CVE-2026-106807A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path.
- CVE-2026-117067An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated…
- CVE-2026-117068An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker…
- CVE-2026-117069An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker…
- CVE-2026-117082An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU…
- CVE-2026-117127Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve…