# CVEs published 2026-11-03

785 CVEs were published on November 3, 2026: 58 critical, 268 high. 1 is now in CISA KEV. 15 early warnings were posted. Days are UTC.
## Early warnings

- [SZB-b191afc8db](https://cve.now/SZB-b191afc8db): WorkOS says attacker accessed contact records and customer communication summaries
- [SZB-e57f3ab75f](https://cve.now/SZB-e57f3ab75f): CISA adds WordPress Core race-condition flaw CVE-2026-119977 to KEV catalog
- [SZB-6f72a161a5](https://cve.now/SZB-6f72a161a5): Xsolis reports phishing-linked breach affecting nine health systems
- [SZB-49acf98068](https://cve.now/SZB-49acf98068): Chainstack reports unauthorized access to parts of its infrastructure
- [SZB-230ae8d1bb](https://cve.now/SZB-230ae8d1bb): cPGuard says its update system was hacked to distribute malware
- [SZB-cd29ee2e79](https://cve.now/SZB-cd29ee2e79): DreamHost says hackers accessed its systems and customer session data for three months
- [SZB-626b3ee2d0](https://cve.now/SZB-626b3ee2d0): CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM Center
- [SZB-61849a44e4](https://cve.now/SZB-61849a44e4): OPSSHIELD says attacker hijacked cPGuard update channel to backdoor Linux servers
- [SZB-1ac4bc8960](https://cve.now/SZB-1ac4bc8960): Barracuda warns customers to patch two flaws enabling root command execution
- [SZB-f01d9b6350](https://cve.now/SZB-f01d9b6350): Frontline Education data breach reportedly affects over 1.3 million people
- [SZB-9dcda68ffb](https://cve.now/SZB-9dcda68ffb): ESET reports Gorbag hackers exploit WinRAR flaw to deploy info-stealing malware
- [SZB-ea53f56723](https://cve.now/SZB-ea53f56723): Red Hat ships fixes for 9.8-rated Linux TCP flaw CVE-2026-98432; Ubuntu fixes still in testing
- [SZB-e9daeb8936](https://cve.now/SZB-e9daeb8936): BTCPay Server says attacks on version 2.4.1 and earlier stole Bitcoin and Litecoin
- [SZB-b9ba4e436f](https://cve.now/SZB-b9ba4e436f): Siemens IoT2050 Advanced flaw CVE-2026-58115 reportedly exploited in the wild
- [SZB-d80473442c](https://cve.now/SZB-d80473442c): Attackers reportedly target unpatched CryptoPayment Gateway plugin flaw CVE-2026-81648

## CVEs

- [CVE-2026-92196](https://cve.now/CVE-2026-92196.md): Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability (CVSS 7.2, Quest Foglight for Databases)
- [CVE-2026-92200](https://cve.now/CVE-2026-92200.md): Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8, Quest Foglight for Databases)
- [CVE-2026-92198](https://cve.now/CVE-2026-92198.md): Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability (CVSS 8.2, Quest Foglight for Databases)
- [CVE-2026-92199](https://cve.now/CVE-2026-92199.md): Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability (CVSS 7.8, Quest Foglight for Databases)
- [CVE-2026-92185](https://cve.now/CVE-2026-92185.md): Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability (CVSS 7.2, Quest Foglight for Databases)
- [CVE-2026-92189](https://cve.now/CVE-2026-92189.md): Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability (CVSS 9.8, Quest Foglight for Databases)
- [CVE-2026-92197](https://cve.now/CVE-2026-92197.md): Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92191](https://cve.now/CVE-2026-92191.md): Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92186](https://cve.now/CVE-2026-92186.md): Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92194](https://cve.now/CVE-2026-92194.md): Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92195](https://cve.now/CVE-2026-92195.md): Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92192](https://cve.now/CVE-2026-92192.md): Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92188](https://cve.now/CVE-2026-92188.md): Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability (CVSS 9.8, Quest Foglight for Databases)
- [CVE-2026-92193](https://cve.now/CVE-2026-92193.md): Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability (CVSS 6.5, Quest Foglight for Databases)
- [CVE-2026-92187](https://cve.now/CVE-2026-92187.md): Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, Quest Foglight for Databases)
- [CVE-2026-92190](https://cve.now/CVE-2026-92190.md): Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, Quest Foglight for Databases)
- [CVE-2026-92211](https://cve.now/CVE-2026-92211.md): Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability (CVSS 7.8, Pixar Animation Studio OpenUSD)
- [CVE-2026-114552](https://cve.now/CVE-2026-114552.md): MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability (CVSS 6.5, MailEnable)
- [CVE-2026-114551](https://cve.now/CVE-2026-114551.md): MailEnable Auth Cleartext Storage Information Disclosure Vulnerability (CVSS 5.9, MailEnable)
- [CVE-2026-114550](https://cve.now/CVE-2026-114550.md): libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.1, libwebsockets)
- [CVE-2026-114549](https://cve.now/CVE-2026-114549.md): NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8, NoMachine)
- [CVE-2026-118628](https://cve.now/CVE-2026-118628.md): MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 8.2, MLflow)
- [CVE-2026-118627](https://cve.now/CVE-2026-118627.md): MLflow SHAP load\_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, MLflow)
- [CVE-2026-118626](https://cve.now/CVE-2026-118626.md): MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability (CVSS 5.4, MLflow)
- [CVE-2026-118625](https://cve.now/CVE-2026-118625.md): MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability (CVSS 6.3, MLflow)
- [CVE-2026-118624](https://cve.now/CVE-2026-118624.md): MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability (CVSS 5.4, MLflow)
- [CVE-2026-118623](https://cve.now/CVE-2026-118623.md): MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8, MLflow)
- [CVE-2026-121589](https://cve.now/CVE-2026-121589.md): spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion (CVSS 6.9, spatie url-signer)
- [CVE-2026-120651](https://cve.now/CVE-2026-120651.md): CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE\_UPLOADS is set (no CVSS, CGI)
- [CVE-2026-120650](https://cve.now/CVE-2026-120650.md): CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits (no CVSS, CGI)
- [CVE-2026-120648](https://cve.now/CVE-2026-120648.md): CGI versions before 5.00 for Perl allow HTML injection via text containing --\> in comment (no CVSS, CGI)
- [CVE-2026-120647](https://cve.now/CVE-2026-120647.md): CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment… (no CVSS, CGI)
- [CVE-2026-120646](https://cve.now/CVE-2026-120646.md): CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo (no CVSS, CGI)
- [CVE-2026-120645](https://cve.now/CVE-2026-120645.md): CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling\_list (no CVSS, CGI)
- [CVE-2026-120644](https://cve.now/CVE-2026-120644.md): CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values (no CVSS, CGI)
- [CVE-2026-120643](https://cve.now/CVE-2026-120643.md): CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and self\_url (no CVSS, CGI)
- [CVE-2026-120642](https://cve.now/CVE-2026-120642.md): CGI versions before 5.00 for Perl return request-derived values untainted under taint mode (no CVSS, CGI)
- [CVE-2026-120641](https://cve.now/CVE-2026-120641.md): CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths (no CVSS, CGI)
- [CVE-2026-120640](https://cve.now/CVE-2026-120640.md): CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or… (no CVSS, CGI)
- [CVE-2026-120639](https://cve.now/CVE-2026-120639.md): CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values… (no CVSS, CGI)
- [CVE-2026-120638](https://cve.now/CVE-2026-120638.md): CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect (no CVSS, CGI)
- [CVE-2026-120637](https://cve.now/CVE-2026-120637.md): CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST\_METHOD (no CVSS, CGI)
- [CVE-2026-120636](https://cve.now/CVE-2026-120636.md): CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST\_URI in url and start\_form (no CVSS, CGI)
- [CVE-2026-120635](https://cve.now/CVE-2026-120635.md): CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs (no CVSS, CGI)
- [CVE-2026-120634](https://cve.now/CVE-2026-120634.md): CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer (no CVSS, CGI)
- [CVE-2026-120633](https://cve.now/CVE-2026-120633.md): CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self\_url, virtual\_host and virtual\_port (no CVSS, CGI)
- [CVE-2026-120632](https://cve.now/CVE-2026-120632.md): CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type (no CVSS, CGI)
- [CVE-2026-120631](https://cve.now/CVE-2026-120631.md): CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse (no CVSS, CGI)
- [CVE-2026-121585](https://cve.now/CVE-2026-121585.md): InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorization (CVSS 5.3, InfiniFlow RAGFlow)
- [CVE-2026-121583](https://cve.now/CVE-2026-121583.md): Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2022-30267](https://cve.now/CVE-2022-30267.md): Emerson Ovation Insufficient Verification of Data Authenticity (CVSS 7.5, Emerson Ovation)
- [CVE-2022-29966](https://cve.now/CVE-2022-29966.md): Emerson Ovation Missing Authentication for Critical Functionality (CVSS 9.8, Emerson Ovation)
- [CVE-2026-121582](https://cve.now/CVE-2026-121582.md): Umami Record API Endpoint route.ts authorization (CVSS 6.9, Umami)
- [CVE-2026-121736](https://cve.now/CVE-2026-121736.md): NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation (CVSS 6.9, nocodb)
- [CVE-2026-121735](https://cve.now/CVE-2026-121735.md): blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens (CVSS 6.3, blueprintue-self-hosted-edition)
- [CVE-2026-121734](https://cve.now/CVE-2026-121734.md): ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView (CVSS 6.0, zane-ops)
- [CVE-2026-121733](https://cve.now/CVE-2026-121733.md): Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment Upload (CVSS 2.1, Webkul Bagisto)
- [CVE-2026-121732](https://cve.now/CVE-2026-121732.md): RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment (CVSS 2.1, francoisjacquet RosarioSIS)
- [CVE-2026-121731](https://cve.now/CVE-2026-121731.md): RosarioSIS before 12.9 SQL Injection via period\_id in Attendance Absence Report (CVSS 8.7, francoisjacquet RosarioSIS)
- [CVE-2026-121730](https://cve.now/CVE-2026-121730.md): emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint (CVSS 7.1, 0xdps emailflare)
- [CVE-2026-121729](https://cve.now/CVE-2026-121729.md): emailflare before commit cf31f33 Missing Authorization via /api/keys Routes (CVSS 7.2, 0xdps emailflare)
- [CVE-2026-121728](https://cve.now/CVE-2026-121728.md): SourceHut meta.sr.ht 0.56.11 before 0.89.0 Registration Authorization Bypass via /register/step2 (CVSS 6.9, SourceHut meta.sr.ht)
- [CVE-2026-121727](https://cve.now/CVE-2026-121727.md): Kore before 4.3.0 Integer Underflow Memory Exhaustion via http\_header\_recv() (CVSS 8.7, jorisvink kore)
- [CVE-2026-109836](https://cve.now/CVE-2026-109836.md): The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical… (CVSS 6.7, ALCPU Core Temp)
- [CVE-2026-118237](https://cve.now/CVE-2026-118237.md): Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-110288](https://cve.now/CVE-2026-110288.md): Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the… (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2026-104608](https://cve.now/CVE-2026-104608.md): Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service (CVSS 7.7, GitHub Enterprise Server)
- [CVE-2026-121581](https://cve.now/CVE-2026-121581.md): ArcReel Provider Test-Connection Endpoint test server-side request forgery (CVSS 5.3, ArcReel)
- [CVE-2026-121539](https://cve.now/CVE-2026-121539.md): miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control (CVSS 5.3, miroslavpejic85 MiroTalk P2P)
- [CVE-2026-116661](https://cve.now/CVE-2026-116661.md): Tanium addressed an improper access controls vulnerability in Enforce. (CVSS 6.5, Tanium Enforce)
- [CVE-2026-116650](https://cve.now/CVE-2026-116650.md): Tanium addressed an unauthorized code execution vulnerability in Threat Response. (CVSS 7.5, Tanium Threat Response)
- [CVE-2026-116668](https://cve.now/CVE-2026-116668.md): Tanium addressed an uncontrolled resource consumption vulnerability in Discover. (CVSS 4.3, Tanium Discover)
- [CVE-2026-116666](https://cve.now/CVE-2026-116666.md): Tanium addressed an information disclosure vulnerability in Discover. (CVSS 4.3, Tanium Discover)
- [CVE-2026-120775](https://cve.now/CVE-2026-120775.md): Tanium addressed a heap-based buffer overflow vulnerability in Deploy. (CVSS 7.2, Tanium Deploy)
- [CVE-2026-116667](https://cve.now/CVE-2026-116667.md): Tanium addressed an improper access controls vulnerability in Discover. (CVSS 4.2, Tanium Discover)
- [CVE-2026-116664](https://cve.now/CVE-2026-116664.md): Tanium addressed an improper access controls vulnerability in Discover. (CVSS 3.1, Tanium Discover)
- [CVE-2026-116663](https://cve.now/CVE-2026-116663.md): Tanium addressed an improper access controls vulnerability in Enforce. (CVSS 6.5, Tanium Enforce)
- [CVE-2026-116648](https://cve.now/CVE-2026-116648.md): Tanium addressed an improper output sanitization vulnerability in Discover. (CVSS 4.1, Tanium Discover)
- [CVE-2026-116665](https://cve.now/CVE-2026-116665.md): Tanium addressed an information disclosure vulnerability in Discover. (CVSS 4.3, Tanium Discover)
- [CVE-2026-108327](https://cve.now/CVE-2026-108327.md): Tanium addressed a path traversal vulnerability in Tanium Data Service. (CVSS 5.0, Tanium Data Service · Tanium Interact)
- [CVE-2026-121565](https://cve.now/CVE-2026-121565.md): Tanium addressed an improper certificate validation vulnerability in multiple products (CVSS 7.4, Tanium TanOS · Tanium Asset +11)
- [CVE-2026-116654](https://cve.now/CVE-2026-116654.md): Tanium addressed an improper input validation vulnerability in Threat Response. (CVSS 6.5, Tanium Threat Response)
- [CVE-2026-116651](https://cve.now/CVE-2026-116651.md): Tanium addressed an unauthorized code execution vulnerability in Threat Response. (CVSS 7.5, Tanium Threat Response)
- [CVE-2026-116653](https://cve.now/CVE-2026-116653.md): Tanium addressed an improper input validation vulnerability in Threat Response. (CVSS 4.3, Tanium Threat Response)
- [CVE-2026-116652](https://cve.now/CVE-2026-116652.md): Tanium addressed a business logic error in Threat Response. (CVSS 4.3, Tanium Threat Response)
- [CVE-2026-121535](https://cve.now/CVE-2026-121535.md): miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication (CVSS 6.3, miroslavpejic85 MiroTalk P2P)
- [CVE-2026-116669](https://cve.now/CVE-2026-116669.md): Tanium addressed an improper access controls vulnerability in Discover. (CVSS 6.5, Tanium Discover)
- [CVE-2026-108324](https://cve.now/CVE-2026-108324.md): Tanium addressed a denial of service vulnerability in Tanium Client. (CVSS 6.5, Tanium Client)
- [CVE-2026-116646](https://cve.now/CVE-2026-116646.md): Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response. (CVSS 4.3, Tanium Threat Response)
- [CVE-2026-121520](https://cve.now/CVE-2026-121520.md): Malicious client could set xattr value outside of BuildKit state directory (CVSS 4.5, Moby BuildKit)
- [CVE-2026-121522](https://cve.now/CVE-2026-121522.md): Possible panic from Git source resolver (CVSS 6.7, moby BuildKit)
- [CVE-2026-121541](https://cve.now/CVE-2026-121541.md): Bake filesystem path entitlements approval can be skipped in some multi-target builds (CVSS 5.6, Docker Buildx)
- [CVE-2026-115541](https://cve.now/CVE-2026-115541.md): HumHub 1.19.0 - Stored cross-site scripting in friendship confirmation (CVSS 7.2, HumHub Community Edition)
- [CVE-2026-121542](https://cve.now/CVE-2026-121542.md): Bake filesystem path entitlements approval can be skipped for path using basename prefix (CVSS 1.8, Docker Buildx)
- [CVE-2026-118865](https://cve.now/CVE-2026-118865.md): Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component (CVSS 7.3, TP-Link Systems Archer AX3000)
- [CVE-2026-121614](https://cve.now/CVE-2026-121614.md): Docker Sandboxes host Git executes repository-controlled programs (CVSS 7.1, Docker Sandboxes)
- [CVE-2026-22060](https://cve.now/CVE-2026-22060.md): CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 6.9, NETAPP StorageGRID)
- [CVE-2026-121531](https://cve.now/CVE-2026-121531.md): Umami 2FA Policy route.ts single-factor authentication (CVSS 5.3, Umami)
- [CVE-2026-22058](https://cve.now/CVE-2026-22058.md): CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 9.1, NETAPP StorageGRID)
- [CVE-2026-121524](https://cve.now/CVE-2026-121524.md): sumiie24 School-Management-System Public Search Feature parent\_Login.php sql injection (CVSS 6.9, sumiie24 School-Management-System)
- [CVE-2026-120930](https://cve.now/CVE-2026-120930.md): Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a… (high (no CVSS), Google Chrome)
- [CVE-2026-120931](https://cve.now/CVE-2026-120931.md): Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… (CVSS 9.6, Google Chrome)
- [CVE-2026-119084](https://cve.now/CVE-2026-119084.md): Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters (CVSS 8.1, AWS amazon-redshift-jdbc-driver)
- [CVE-2026-112354](https://cve.now/CVE-2026-112354.md): Etrel INCH AC Charging Station Hard-coded Default Credentials (CVSS 9.3, Etrel d.o.o. Etrel INCH)
- [CVE-2026-121621](https://cve.now/CVE-2026-121621.md): Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy… (CVSS 8.8, Red Hat OpenShift GitOps)
- [CVE-2026-121517](https://cve.now/CVE-2026-121517.md): IrfanView TIFF Wang Annotation heap-based overflow (CVSS 2.3, IrfanView)
- [CVE-2026-111751](https://cve.now/CVE-2026-111751.md): Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR) (CVSS 8.2, angular)
- [CVE-2026-82160](https://cve.now/CVE-2026-82160.md): Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation… (CVSS 3.3, Dell Wyse Management Suite)
- [CVE-2026-111754](https://cve.now/CVE-2026-111754.md): Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR) (CVSS 5.1, angular)
- [CVE-2026-82161](https://cve.now/CVE-2026-82161.md): Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation… (CVSS 6.8, Dell Wyse Management Suite)
- [CVE-2026-82158](https://cve.now/CVE-2026-82158.md): Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation… (CVSS 9.0, Dell Wyse Management Suite)
- [CVE-2026-111752](https://cve.now/CVE-2026-111752.md): Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) (CVSS 8.2, angular)
- [CVE-2026-82159](https://cve.now/CVE-2026-82159.md): Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation… (CVSS 8.8, Dell Wyse Management Suite)
- [CVE-2026-55186](https://cve.now/CVE-2026-55186.md): Silverstripe MFA: Can bypass MFA during password reset flow (CVSS 4.2, silverstripe-mfa · silverstripe/mfa)
- [CVE-2026-121514](https://cve.now/CVE-2026-121514.md): EasySoft ZenTao PMS User model.php checkGroupChange privileges management (CVSS 5.3, EasySoft ZenTao PMS)
- [CVE-2026-64672](https://cve.now/CVE-2026-64672.md): Terragrunt catalog predictable temp symlink clobber (CVSS 4.4, gruntwork-io terragrunt)
- [CVE-2026-121141](https://cve.now/CVE-2026-121141.md): Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121195](https://cve.now/CVE-2026-121195.md): Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via… (low (no CVSS), Google Chrome)
- [CVE-2026-121064](https://cve.now/CVE-2026-121064.md): Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary… (low (no CVSS), Google Chrome)
- [CVE-2026-121169](https://cve.now/CVE-2026-121169.md): Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121069](https://cve.now/CVE-2026-121069.md): Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via… (CVSS 8.8, Google Chrome)
- [CVE-2026-121142](https://cve.now/CVE-2026-121142.md): Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121232](https://cve.now/CVE-2026-121232.md): Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain… (low (no CVSS), Google Chrome)
- [CVE-2026-121041](https://cve.now/CVE-2026-121041.md): Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121093](https://cve.now/CVE-2026-121093.md): Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the… (low (no CVSS), Google Chrome)
- [CVE-2026-121230](https://cve.now/CVE-2026-121230.md): Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… (CVSS 8.3, Google Chrome)
- [CVE-2026-121073](https://cve.now/CVE-2026-121073.md): Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… (low (no CVSS), Google Chrome)
- [CVE-2026-121092](https://cve.now/CVE-2026-121092.md): Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code… (CVSS 8.8, Google Chrome)
- [CVE-2026-121175](https://cve.now/CVE-2026-121175.md): Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121054](https://cve.now/CVE-2026-121054.md): Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121029](https://cve.now/CVE-2026-121029.md): Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121045](https://cve.now/CVE-2026-121045.md): UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… (low (no CVSS), Google Chrome)
- [CVE-2026-121162](https://cve.now/CVE-2026-121162.md): UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social… (low (no CVSS), Google Chrome)
- [CVE-2026-121225](https://cve.now/CVE-2026-121225.md): Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121198](https://cve.now/CVE-2026-121198.md): Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web… (low (no CVSS), Google Chrome)
- [CVE-2026-121240](https://cve.now/CVE-2026-121240.md): Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access… (low (no CVSS), Google Chrome)
- [CVE-2026-121081](https://cve.now/CVE-2026-121081.md): UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121050](https://cve.now/CVE-2026-121050.md): Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121205](https://cve.now/CVE-2026-121205.md): Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass… (low (no CVSS), Google Chrome)
- [CVE-2026-121204](https://cve.now/CVE-2026-121204.md): Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121159](https://cve.now/CVE-2026-121159.md): Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121085](https://cve.now/CVE-2026-121085.md): Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions… (low (no CVSS), Google Chrome)
- [CVE-2026-121251](https://cve.now/CVE-2026-121251.md): Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121130](https://cve.now/CVE-2026-121130.md): Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121121](https://cve.now/CVE-2026-121121.md): UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML… (low (no CVSS), Google Chrome)
- [CVE-2026-121189](https://cve.now/CVE-2026-121189.md): Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 9.6, Google Chrome)
- [CVE-2026-121206](https://cve.now/CVE-2026-121206.md): UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof… (low (no CVSS), Google Chrome)
- [CVE-2026-121172](https://cve.now/CVE-2026-121172.md): Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121253](https://cve.now/CVE-2026-121253.md): Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121165](https://cve.now/CVE-2026-121165.md): UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social… (low (no CVSS), Google Chrome)
- [CVE-2026-121236](https://cve.now/CVE-2026-121236.md): Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121101](https://cve.now/CVE-2026-121101.md): Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121055](https://cve.now/CVE-2026-121055.md): Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via… (low (no CVSS), Google Chrome)
- [CVE-2026-121138](https://cve.now/CVE-2026-121138.md): Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121111](https://cve.now/CVE-2026-121111.md): Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via… (low (no CVSS), Google Chrome)
- [CVE-2026-121043](https://cve.now/CVE-2026-121043.md): UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof… (low (no CVSS), Google Chrome)
- [CVE-2026-121168](https://cve.now/CVE-2026-121168.md): Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 8.8, Google Chrome)
- [CVE-2026-121252](https://cve.now/CVE-2026-121252.md): Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121235](https://cve.now/CVE-2026-121235.md): Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121157](https://cve.now/CVE-2026-121157.md): Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access… (low (no CVSS), Google Chrome)
- [CVE-2026-121222](https://cve.now/CVE-2026-121222.md): Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121046](https://cve.now/CVE-2026-121046.md): Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… (low (no CVSS), Google Chrome)
- [CVE-2026-121125](https://cve.now/CVE-2026-121125.md): Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (low (no CVSS), Google Chrome)
- [CVE-2026-121190](https://cve.now/CVE-2026-121190.md): UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (low (no CVSS), Google Chrome)
- [CVE-2026-121053](https://cve.now/CVE-2026-121053.md): UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging… (low (no CVSS), Google Chrome)
- [CVE-2026-121243](https://cve.now/CVE-2026-121243.md): Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted… (low (no CVSS), Google Chrome)
- [CVE-2026-121109](https://cve.now/CVE-2026-121109.md): Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin… (low (no CVSS), Google Chrome)
- [CVE-2026-121217](https://cve.now/CVE-2026-121217.md): Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the… (low (no CVSS), Google Chrome)
- [CVE-2026-121134](https://cve.now/CVE-2026-121134.md): Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (low (no CVSS), Google Chrome)
- [CVE-2026-121209](https://cve.now/CVE-2026-121209.md): UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML… (low (no CVSS), Google Chrome)
- [CVE-2026-121135](https://cve.now/CVE-2026-121135.md): Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121167](https://cve.now/CVE-2026-121167.md): Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121091](https://cve.now/CVE-2026-121091.md): Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121049](https://cve.now/CVE-2026-121049.md): Out of bounds read in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a crafted file. (medium (no CVSS), Google Chrome)
- [CVE-2026-121245](https://cve.now/CVE-2026-121245.md): Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information… (medium (no CVSS), Google Chrome)
- [CVE-2026-121077](https://cve.now/CVE-2026-121077.md): Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially… (CVSS 9.6, Google Chrome)
- [CVE-2026-121238](https://cve.now/CVE-2026-121238.md): Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121042](https://cve.now/CVE-2026-121042.md): Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system… (medium (no CVSS), Google Chrome)
- [CVE-2026-121110](https://cve.now/CVE-2026-121110.md): UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via… (medium (no CVSS), Google Chrome)
- [CVE-2026-121158](https://cve.now/CVE-2026-121158.md): Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121216](https://cve.now/CVE-2026-121216.md): UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI… (medium (no CVSS), Google Chrome)
- [CVE-2026-121128](https://cve.now/CVE-2026-121128.md): Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121176](https://cve.now/CVE-2026-121176.md): Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121186](https://cve.now/CVE-2026-121186.md): UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social… (medium (no CVSS), Google Chrome)
- [CVE-2026-121223](https://cve.now/CVE-2026-121223.md): Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121164](https://cve.now/CVE-2026-121164.md): Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… (medium (no CVSS), Google Chrome)
- [CVE-2026-121218](https://cve.now/CVE-2026-121218.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121257](https://cve.now/CVE-2026-121257.md): Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… (medium (no CVSS), Google Chrome)
- [CVE-2026-121070](https://cve.now/CVE-2026-121070.md): Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121048](https://cve.now/CVE-2026-121048.md): Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121202](https://cve.now/CVE-2026-121202.md): Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially… (CVSS 9.6, Google Chrome)
- [CVE-2026-121194](https://cve.now/CVE-2026-121194.md): Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121212](https://cve.now/CVE-2026-121212.md): Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121215](https://cve.now/CVE-2026-121215.md): UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121184](https://cve.now/CVE-2026-121184.md): Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside… (CVSS 8.8, Google Chrome)
- [CVE-2026-121096](https://cve.now/CVE-2026-121096.md): Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (medium (no CVSS), Google Chrome)
- [CVE-2026-121067](https://cve.now/CVE-2026-121067.md): UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… (medium (no CVSS), Google Chrome)
- [CVE-2026-121132](https://cve.now/CVE-2026-121132.md): Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML… (medium (no CVSS), Google Chrome)
- [CVE-2026-121187](https://cve.now/CVE-2026-121187.md): Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121239](https://cve.now/CVE-2026-121239.md): Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML… (medium (no CVSS), Google Chrome)
- [CVE-2026-121116](https://cve.now/CVE-2026-121116.md): Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the… (medium (no CVSS), Google Chrome)
- [CVE-2026-121171](https://cve.now/CVE-2026-121171.md): Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web… (medium (no CVSS), Google Chrome)
- [CVE-2026-121065](https://cve.now/CVE-2026-121065.md): Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (medium (no CVSS), Google Chrome)
- [CVE-2026-121254](https://cve.now/CVE-2026-121254.md): Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121033](https://cve.now/CVE-2026-121033.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the… (medium (no CVSS), Google Chrome)
- [CVE-2026-121088](https://cve.now/CVE-2026-121088.md): Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via… (medium (no CVSS), Google Chrome)
- [CVE-2026-121163](https://cve.now/CVE-2026-121163.md): Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121059](https://cve.now/CVE-2026-121059.md): Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML… (medium (no CVSS), Google Chrome)
- [CVE-2026-121170](https://cve.now/CVE-2026-121170.md): Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121220](https://cve.now/CVE-2026-121220.md): Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (medium (no CVSS), Google Chrome)
- [CVE-2026-121075](https://cve.now/CVE-2026-121075.md): Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (medium (no CVSS), Google Chrome)
- [CVE-2026-121030](https://cve.now/CVE-2026-121030.md): Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121040](https://cve.now/CVE-2026-121040.md): Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (medium (no CVSS), Google Chrome)
- [CVE-2026-121136](https://cve.now/CVE-2026-121136.md): Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (medium (no CVSS), Google Chrome)
- [CVE-2026-121103](https://cve.now/CVE-2026-121103.md): Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121072](https://cve.now/CVE-2026-121072.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121183](https://cve.now/CVE-2026-121183.md): Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (CVSS 8.3, Google Chrome)
- [CVE-2026-121231](https://cve.now/CVE-2026-121231.md): Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions… (medium (no CVSS), Google Chrome)
- [CVE-2026-121255](https://cve.now/CVE-2026-121255.md): Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121219](https://cve.now/CVE-2026-121219.md): Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to… (CVSS 8.3, Google Chrome)
- [CVE-2026-121122](https://cve.now/CVE-2026-121122.md): UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof… (medium (no CVSS), Google Chrome)
- [CVE-2026-121039](https://cve.now/CVE-2026-121039.md): Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information… (medium (no CVSS), Google Chrome)
- [CVE-2026-121200](https://cve.now/CVE-2026-121200.md): Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… (CVSS 9.6, Google Chrome)
- [CVE-2026-121106](https://cve.now/CVE-2026-121106.md): Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information… (medium (no CVSS), Google Chrome)
- [CVE-2026-121248](https://cve.now/CVE-2026-121248.md): Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via… (medium (no CVSS), Google Chrome)
- [CVE-2026-121193](https://cve.now/CVE-2026-121193.md): Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access… (medium (no CVSS), Google Chrome)
- [CVE-2026-121177](https://cve.now/CVE-2026-121177.md): UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121234](https://cve.now/CVE-2026-121234.md): Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute… (CVSS 9.6, Google Chrome)
- [CVE-2026-121115](https://cve.now/CVE-2026-121115.md): Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access… (medium (no CVSS), Google Chrome)
- [CVE-2026-121256](https://cve.now/CVE-2026-121256.md): Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (CVSS 8.3, Google Chrome)
- [CVE-2026-121066](https://cve.now/CVE-2026-121066.md): Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (medium (no CVSS), Google Chrome)
- [CVE-2026-121196](https://cve.now/CVE-2026-121196.md): Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access… (medium (no CVSS), Google Chrome)
- [CVE-2026-121099](https://cve.now/CVE-2026-121099.md): Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121199](https://cve.now/CVE-2026-121199.md): Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive… (medium (no CVSS), Google Chrome)
- [CVE-2026-121108](https://cve.now/CVE-2026-121108.md): Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin… (medium (no CVSS), Google Chrome)
- [CVE-2026-121063](https://cve.now/CVE-2026-121063.md): Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121031](https://cve.now/CVE-2026-121031.md): Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121062](https://cve.now/CVE-2026-121062.md): Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (medium (no CVSS), Google Chrome)
- [CVE-2026-121161](https://cve.now/CVE-2026-121161.md): Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a… (medium (no CVSS), Google Chrome)
- [CVE-2026-121120](https://cve.now/CVE-2026-121120.md): Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (medium (no CVSS), Google Chrome)
- [CVE-2026-121102](https://cve.now/CVE-2026-121102.md): Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via… (medium (no CVSS), Google Chrome)
- [CVE-2026-121237](https://cve.now/CVE-2026-121237.md): Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (medium (no CVSS), Google Chrome)
- [CVE-2026-121105](https://cve.now/CVE-2026-121105.md): Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted… (medium (no CVSS), Google Chrome)
- [CVE-2026-121242](https://cve.now/CVE-2026-121242.md): Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy… (medium (no CVSS), Google Chrome)
- [CVE-2026-121244](https://cve.now/CVE-2026-121244.md): UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof… (medium (no CVSS), Google Chrome)
- [CVE-2026-121119](https://cve.now/CVE-2026-121119.md): Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121221](https://cve.now/CVE-2026-121221.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121076](https://cve.now/CVE-2026-121076.md): Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute… (CVSS 9.6, Google Chrome)
- [CVE-2026-121060](https://cve.now/CVE-2026-121060.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121078](https://cve.now/CVE-2026-121078.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121211](https://cve.now/CVE-2026-121211.md): Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-121129](https://cve.now/CVE-2026-121129.md): Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121208](https://cve.now/CVE-2026-121208.md): Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside… (CVSS 8.8, Google Chrome)
- [CVE-2026-121034](https://cve.now/CVE-2026-121034.md): Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121104](https://cve.now/CVE-2026-121104.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121036](https://cve.now/CVE-2026-121036.md): Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121160](https://cve.now/CVE-2026-121160.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121137](https://cve.now/CVE-2026-121137.md): Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute… (CVSS 8.8, Google Chrome)
- [CVE-2026-121068](https://cve.now/CVE-2026-121068.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121226](https://cve.now/CVE-2026-121226.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121227](https://cve.now/CVE-2026-121227.md): Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-121061](https://cve.now/CVE-2026-121061.md): Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121182](https://cve.now/CVE-2026-121182.md): Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121123](https://cve.now/CVE-2026-121123.md): Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121117](https://cve.now/CVE-2026-121117.md): Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via… (CVSS 8.8, Google Chrome)
- [CVE-2026-121224](https://cve.now/CVE-2026-121224.md): Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (high (no CVSS), Google Chrome)
- [CVE-2026-121241](https://cve.now/CVE-2026-121241.md): Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute… (CVSS 9.6, Google Chrome)
- [CVE-2026-121213](https://cve.now/CVE-2026-121213.md): Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121249](https://cve.now/CVE-2026-121249.md): Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 9.6, Google Chrome)
- [CVE-2026-121133](https://cve.now/CVE-2026-121133.md): Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised… (high (no CVSS), Google Chrome)
- [CVE-2026-121214](https://cve.now/CVE-2026-121214.md): Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code… (CVSS 9.6, Google Chrome)
- [CVE-2026-121097](https://cve.now/CVE-2026-121097.md): Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121143](https://cve.now/CVE-2026-121143.md): Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (high (no CVSS), Google Chrome)
- [CVE-2026-121079](https://cve.now/CVE-2026-121079.md): Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121094](https://cve.now/CVE-2026-121094.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121084](https://cve.now/CVE-2026-121084.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to… (CVSS 8.3, Google Chrome)
- [CVE-2026-121201](https://cve.now/CVE-2026-121201.md): Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121057](https://cve.now/CVE-2026-121057.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121210](https://cve.now/CVE-2026-121210.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121127](https://cve.now/CVE-2026-121127.md): Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121114](https://cve.now/CVE-2026-121114.md): Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 9.6, Google Chrome)
- [CVE-2026-121032](https://cve.now/CVE-2026-121032.md): Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121250](https://cve.now/CVE-2026-121250.md): Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (high (no CVSS), Google Chrome)
- [CVE-2026-121089](https://cve.now/CVE-2026-121089.md): Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… (CVSS 9.6, Google Chrome)
- [CVE-2026-121148](https://cve.now/CVE-2026-121148.md): Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 9.6, Google Chrome)
- [CVE-2026-121100](https://cve.now/CVE-2026-121100.md): Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121178](https://cve.now/CVE-2026-121178.md): Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to… (CVSS 8.3, Google Chrome)
- [CVE-2026-121087](https://cve.now/CVE-2026-121087.md): Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121131](https://cve.now/CVE-2026-121131.md): Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute… (high (no CVSS), Google Chrome)
- [CVE-2026-121086](https://cve.now/CVE-2026-121086.md): Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 9.6, Google Chrome)
- [CVE-2026-121037](https://cve.now/CVE-2026-121037.md): Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute… (CVSS 9.6, Google Chrome)
- [CVE-2026-121052](https://cve.now/CVE-2026-121052.md): Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121090](https://cve.now/CVE-2026-121090.md): Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had… (CVSS 8.3, Google Chrome)
- [CVE-2026-121038](https://cve.now/CVE-2026-121038.md): Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121051](https://cve.now/CVE-2026-121051.md): UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121044](https://cve.now/CVE-2026-121044.md): Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121080](https://cve.now/CVE-2026-121080.md): Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted… (high (no CVSS), Google Chrome)
- [CVE-2026-121228](https://cve.now/CVE-2026-121228.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121181](https://cve.now/CVE-2026-121181.md): Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121180](https://cve.now/CVE-2026-121180.md): Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121179](https://cve.now/CVE-2026-121179.md): Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121083](https://cve.now/CVE-2026-121083.md): Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121082](https://cve.now/CVE-2026-121082.md): Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121113](https://cve.now/CVE-2026-121113.md): Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-121188](https://cve.now/CVE-2026-121188.md): Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121118](https://cve.now/CVE-2026-121118.md): Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-121124](https://cve.now/CVE-2026-121124.md): Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… (CVSS 8.8, Google Chrome)
- [CVE-2026-121047](https://cve.now/CVE-2026-121047.md): Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121166](https://cve.now/CVE-2026-121166.md): Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-121185](https://cve.now/CVE-2026-121185.md): Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121207](https://cve.now/CVE-2026-121207.md): Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the… (high (no CVSS), Google Chrome)
- [CVE-2026-121071](https://cve.now/CVE-2026-121071.md): Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to… (CVSS 9.6, Google Chrome)
- [CVE-2026-121095](https://cve.now/CVE-2026-121095.md): Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121140](https://cve.now/CVE-2026-121140.md): Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process… (CVSS 8.3, Google Chrome)
- [CVE-2026-121233](https://cve.now/CVE-2026-121233.md): Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-121173](https://cve.now/CVE-2026-121173.md): Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a… (high (no CVSS), Google Chrome)
- [CVE-2026-121074](https://cve.now/CVE-2026-121074.md): Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary… (CVSS 9.6, Google Chrome)
- [CVE-2026-121098](https://cve.now/CVE-2026-121098.md): Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (CVSS 8.3, Google Chrome)
- [CVE-2026-121174](https://cve.now/CVE-2026-121174.md): Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via… (high (no CVSS), Google Chrome)
- [CVE-2026-121112](https://cve.now/CVE-2026-121112.md): Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer… (CVSS 8.3, Google Chrome)
- [CVE-2026-121197](https://cve.now/CVE-2026-121197.md): Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox… (high (no CVSS), Google Chrome)
- [CVE-2026-121107](https://cve.now/CVE-2026-121107.md): Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy… (high (no CVSS), Google Chrome)
- [CVE-2026-121126](https://cve.now/CVE-2026-121126.md): Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the… (CVSS 9.6, Google Chrome)
- [CVE-2026-121203](https://cve.now/CVE-2026-121203.md): Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-121247](https://cve.now/CVE-2026-121247.md): Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary… (CVSS 9.6, Google Chrome)
- [CVE-2026-121035](https://cve.now/CVE-2026-121035.md): Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the… (CVSS 9.6, Google Chrome)
- [CVE-2026-121246](https://cve.now/CVE-2026-121246.md): Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary… (CVSS 9.6, Google Chrome)
- [CVE-2026-121229](https://cve.now/CVE-2026-121229.md): Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute… (CVSS 9.6, Google Chrome)
- [CVE-2026-121156](https://cve.now/CVE-2026-121156.md): Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… (CVSS 9.6, Google Chrome)
- [CVE-2026-120716](https://cve.now/CVE-2026-120716.md): Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and… (no CVSS, Devolutions Server)
- [CVE-2026-115779](https://cve.now/CVE-2026-115779.md): Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie() (CVSS 6.3, Effect-TS effect · @effect platform)
- [CVE-2026-115731](https://cve.now/CVE-2026-115731.md): Report Deserialization Code Execution (CVSS 9.4, Perforce Puppet Enterprise)
- [CVE-2026-119636](https://cve.now/CVE-2026-119636.md): Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through… (no CVSS, Devolutions Server)
- [CVE-2026-115732](https://cve.now/CVE-2026-115732.md): Certificate Name Authorization Bypass (CVSS 9.0, Perforce Puppet Enterprise)
- [CVE-2026-120734](https://cve.now/CVE-2026-120734.md): Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an… (no CVSS, Devolutions Server)
- [CVE-2026-120715](https://cve.now/CVE-2026-120715.md): Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an… (no CVSS, Devolutions Server)
- [CVE-2026-76894](https://cve.now/CVE-2026-76894.md): CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "\*" (out) (CVSS 3.1, ondata ckan-mcp-server)
- [CVE-2026-120733](https://cve.now/CVE-2026-120733.md): Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with… (no CVSS, Devolutions Server)
- [CVE-2026-82155](https://cve.now/CVE-2026-82155.md): Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. (CVSS 7.8, Dell OS Recovery tool)
- [CVE-2026-82154](https://cve.now/CVE-2026-82154.md): Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. (CVSS 2.4, Dell OS Recovery tool)
- [CVE-2026-121509](https://cve.now/CVE-2026-121509.md): Headless CMS Plugin REST API post get\_required\_post\_data information disclosure (CVSS 6.9, Headless CMS Plugin)
- [CVE-2026-121580](https://cve.now/CVE-2026-121580.md): Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated… (no CVSS, Devolutions Server)
- [CVE-2026-115878](https://cve.now/CVE-2026-115878.md): Stanza: RCE via pickle deserialization in the lemmatizer (CVSS 7.8, stanfordnlp stanza · stanza)
- [CVE-2026-61497](https://cve.now/CVE-2026-61497.md): TinyUSB \< 0.20.1 Integer Underflow via HID Report Descriptor Parser (CVSS 5.2, hathach TinyUSB)
- [CVE-2026-120959](https://cve.now/CVE-2026-120959.md): MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes (CVSS 2.1, MongoDB Atlas SQL)
- [CVE-2026-120952](https://cve.now/CVE-2026-120952.md): MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL\_C\_GUID target, causing a 32-byte out-of-bounds write (CVSS 6.0, MongoDB Atlas SQL ODBC Driver)
- [CVE-2026-121502](https://cve.now/CVE-2026-121502.md): mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection (CVSS 6.9, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-61495](https://cve.now/CVE-2026-61495.md): TinyUSB 0.21.0 Out-of-Bounds Write via mtp\_container\_get\_string() (CVSS 7.0, hathach TinyUSB)
- [CVE-2026-95860](https://cve.now/CVE-2026-95860.md): node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound \`DefaultRolePermissions (CVSS 9.1, node-opcua)
- [CVE-2026-88968](https://cve.now/CVE-2026-88968.md): Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace (CVSS 7.7, anthropics claude-code)
- [CVE-2026-88066](https://cve.now/CVE-2026-88066.md): Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable (CVSS 7.5, anthropics claude-code)
- [CVE-2026-95730](https://cve.now/CVE-2026-95730.md): Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA (CVSS 6.5, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95729](https://cve.now/CVE-2026-95729.md): Authenticated Sensitive Information Disclosure in VIA (CVSS 6.5, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95728](https://cve.now/CVE-2026-95728.md): Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux (CVSS 7.1, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95727](https://cve.now/CVE-2026-95727.md): Authenticated Command Injection Vulnerability in HPE Networking VIA (CVSS 7.2, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95726](https://cve.now/CVE-2026-95726.md): Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA (CVSS 7.5, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95725](https://cve.now/CVE-2026-95725.md): Authenticated Local Command Injection Vulnerability in the VIA Client for Linux (CVSS 7.8, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95724](https://cve.now/CVE-2026-95724.md): Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA) (CVSS 8.1, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95723](https://cve.now/CVE-2026-95723.md): Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client (CVSS 8.4, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-95722](https://cve.now/CVE-2026-95722.md): Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client (CVSS 8.8, Hewlett Packard Enterprise (HPE) Virtual Intranet Access)
- [CVE-2026-54161](https://cve.now/CVE-2026-54161.md): upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution (CVSS 8.1, networkupstools nut)
- [CVE-2026-45146](https://cve.now/CVE-2026-45146.md): Chamilo LMS: Blind SQL Injection in model.ajax.php via filters\[groupOp\] authentificated (CVSS 7.2, chamilo-lms)
- [CVE-2026-121577](https://cve.now/CVE-2026-121577.md): Unescaped header separators in whatstk build a regular expression that backtracks exponentially (CVSS 6.7, lucasrodes whatstk)
- [CVE-2026-63433](https://cve.now/CVE-2026-63433.md): MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value (CVSS 6.8, franklioxygen MyTube)
- [CVE-2026-95777](https://cve.now/CVE-2026-95777.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface (CVSS 3.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95776](https://cve.now/CVE-2026-95776.md): Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read (CVSS 3.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95775](https://cve.now/CVE-2026-95775.md): Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer (CVSS 3.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95774](https://cve.now/CVE-2026-95774.md): Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 3.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95773](https://cve.now/CVE-2026-95773.md): Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer (CVSS 3.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95772](https://cve.now/CVE-2026-95772.md): Authenticated Race Condition in API of HPE Networking Fabric Composer (CVSS 4.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95771](https://cve.now/CVE-2026-95771.md): Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint (CVSS 4.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95770](https://cve.now/CVE-2026-95770.md): Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 4.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95769](https://cve.now/CVE-2026-95769.md): Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer (CVSS 5.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95768](https://cve.now/CVE-2026-95768.md): Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API (CVSS 5.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95767](https://cve.now/CVE-2026-95767.md): Unauthenticated Information Disclosure in HPE Networking Fabric Composer (CVSS 5.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95766](https://cve.now/CVE-2026-95766.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 5.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95765](https://cve.now/CVE-2026-95765.md): Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer (CVSS 5.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95764](https://cve.now/CVE-2026-95764.md): Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 5.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95763](https://cve.now/CVE-2026-95763.md): Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer (CVSS 5.9, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95762](https://cve.now/CVE-2026-95762.md): Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer (CVSS 5.9, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95761](https://cve.now/CVE-2026-95761.md): Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer (CVSS 5.9, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95760](https://cve.now/CVE-2026-95760.md): Privilege Escalation Vulnerability in HPE Networking Fabric Composer API (CVSS 6.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95759](https://cve.now/CVE-2026-95759.md): Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95758](https://cve.now/CVE-2026-95758.md): Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95757](https://cve.now/CVE-2026-95757.md): Authentication Bypass Vulnerability in HPE Networking Fabric Composer API (CVSS 6.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95756](https://cve.now/CVE-2026-95756.md): Authenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer (CVSS 6.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95755](https://cve.now/CVE-2026-95755.md): Unauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer (CVSS 6.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95753](https://cve.now/CVE-2026-95753.md): Privilege Escalation in HPE Networking Fabric Composer API (CVSS 7.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95752](https://cve.now/CVE-2026-95752.md): Local Privilege Escalation in HPE Networking Fabric Composer (CVSS 7.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95751](https://cve.now/CVE-2026-95751.md): Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer (CVSS 7.4, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95750](https://cve.now/CVE-2026-95750.md): Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95749](https://cve.now/CVE-2026-95749.md): Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95748](https://cve.now/CVE-2026-95748.md): Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-63434](https://cve.now/CVE-2026-63434.md): MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning (CVSS 4.3, franklioxygen MyTube)
- [CVE-2026-95747](https://cve.now/CVE-2026-95747.md): Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95746](https://cve.now/CVE-2026-95746.md): Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95745](https://cve.now/CVE-2026-95745.md): Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer (CVSS 7.5, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95744](https://cve.now/CVE-2026-95744.md): Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 7.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95743](https://cve.now/CVE-2026-95743.md): Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer (CVSS 7.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95742](https://cve.now/CVE-2026-95742.md): Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer (CVSS 7.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95741](https://cve.now/CVE-2026-95741.md): Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer (CVSS 8.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95740](https://cve.now/CVE-2026-95740.md): Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer (CVSS 8.0, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95739](https://cve.now/CVE-2026-95739.md): Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer (CVSS 8.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95738](https://cve.now/CVE-2026-95738.md): Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer (CVSS 8.1, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95737](https://cve.now/CVE-2026-95737.md): Local Privilege Escalation in HPE Networking Fabric Composer (CVSS 8.2, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95736](https://cve.now/CVE-2026-95736.md): Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer (CVSS 8.3, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95735](https://cve.now/CVE-2026-95735.md): Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 8.7, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95734](https://cve.now/CVE-2026-95734.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API (CVSS 8.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95733](https://cve.now/CVE-2026-95733.md): Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution (CVSS 9.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95732](https://cve.now/CVE-2026-95732.md): Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution (CVSS 9.6, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2026-95731](https://cve.now/CVE-2026-95731.md): Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized… (CVSS 9.8, Hewlett Packard Enterprise (HPE) Fabric Composer)
- [CVE-2025-71452](https://cve.now/CVE-2025-71452.md): Vembu BDRSuite \< 7.6.0 XSS via restoreprogress.sgp (CVSS 5.1, Vembu Technologies BDRSuite)
- [CVE-2026-63395](https://cve.now/CVE-2026-63395.md): isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE) (CVSS 8.8, isomorphic-git)
- [CVE-2025-71451](https://cve.now/CVE-2025-71451.md): Vembu BDRSuite \< 7.6.0 XSS via serverbackupprogress.sgp (CVSS 5.1, Vembu Technologies BDRSuite)
- [CVE-2026-63475](https://cve.now/CVE-2026-63475.md): isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS) (CVSS 4.3, isomorphic-git)
- [CVE-2026-63476](https://cve.now/CVE-2026-63476.md): isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS) (CVSS 4.3, isomorphic-git)
- [CVE-2026-105822](https://cve.now/CVE-2026-105822.md): Server-Side Request Forgery in Tapo Cloud MQTT Proxy (CVSS 8.3, TP-Link Systems Tapo Cloud Service)
- [CVE-2026-105821](https://cve.now/CVE-2026-105821.md): Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy (CVSS 8.3, TP-Link Systems Tapo Cloud Service)
- [CVE-2026-63478](https://cve.now/CVE-2026-63478.md): isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout (CVSS 5.3, isomorphic-git)
- [CVE-2026-63500](https://cve.now/CVE-2026-63500.md): Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export (CVSS 7.1, yeti-platform yeti)
- [CVE-2026-120567](https://cve.now/CVE-2026-120567.md): ExecuteUpdate may evaluate caller-supplied values as MongoDB expressions (CVSS 2.3, MongoDB Entity Framework Core Provider)
- [CVE-2026-63502](https://cve.now/CVE-2026-63502.md): Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write (CVSS 8.3, yeti-platform yeti)
- [CVE-2026-93325](https://cve.now/CVE-2026-93325.md): Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx (CVSS 7.3, Docker Buildx)
- [CVE-2026-63482](https://cve.now/CVE-2026-63482.md): Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data (CVSS 7.5, yeti-platform yeti)
- [CVE-2026-63489](https://cve.now/CVE-2026-63489.md): Yeti: Authenticated AQL injection via unvalidated search sorting and filter\_aliases parameters (CVSS 7.6, yeti-platform yeti)
- [CVE-2026-63501](https://cve.now/CVE-2026-63501.md): ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass) (CVSS 7.5, Agamnentzar ag-psd)
- [CVE-2026-110826](https://cve.now/CVE-2026-110826.md): AshAuthentication log\_out\_everywhere leaves sessions valid after a password reset or non-atomic password change (CVSS 6.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-63471](https://cve.now/CVE-2026-63471.md): fastapi-code-generator: Import-time RCE via route path -\> unescaped @app.get('...') decorator (CVSS 9.3, koxudaxi fastapi-code-generator)
- [CVE-2026-63469](https://cve.now/CVE-2026-63469.md): fastapi-code-generator: Import-time RCE via response status-code key -\> unescaped @app.get(..., responses={...}) dict (CVSS 9.3, koxudaxi fastapi-code-generator)
- [CVE-2026-63470](https://cve.now/CVE-2026-63470.md): fastapi-code-generator: Call-time RCE via operation summary -\> unescaped route-handler docstring (CVSS 9.3, koxudaxi fastapi-code-generator)
- [CVE-2026-112917](https://cve.now/CVE-2026-112917.md): Docker Desktop WSL2 AF\_VSOCK isolation bypass via 32-bit socketcall (CVSS 9.2, Docker Desktop)
- [CVE-2026-121501](https://cve.now/CVE-2026-121501.md): mathurvishal CloudClassroom-PHP-Project loginlinkadmin.php session\_regenerate\_id session fixiation (CVSS 5.3, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120953](https://cve.now/CVE-2026-120953.md): Atlas SQL JDBC Driver \<=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler (CVSS 5.1, MongoDB Atlas SQL JDBC Driver)
- [CVE-2026-39379](https://cve.now/CVE-2026-39379.md): GeoNetwork: Reflected XSS through client-side template injection (CVSS 7.1, core-geonetwork)
- [CVE-2026-120954](https://cve.now/CVE-2026-120954.md): Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views (CVSS 6.3, MongoDB C Driver)
- [CVE-2026-121382](https://cve.now/CVE-2026-121382.md): Netcore NBR100V2 auto\_ac msg\_aes\_dec integer overflow (CVSS 8.7, Netcore NBR100V2)
- [CVE-2026-46487](https://cve.now/CVE-2026-46487.md): GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field (CVSS 7.5, core-geonetwork)
- [CVE-2026-120955](https://cve.now/CVE-2026-120955.md): MongoDB C Driver Modern GridFS mongoc\_gridfs\_bucket\_download\_to\_stream() Aborts Application on Malformed GridFS Metadata (CVSS 8.7, MongoDB C Driver)
- [CVE-2026-121652](https://cve.now/CVE-2026-121652.md): Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering (CVSS 5.4, AWS maplibre-gl-js-amplify)
- [CVE-2026-120956](https://cve.now/CVE-2026-120956.md): remote abort and memory disclosure from a malformed cursor.ns (CVSS 7.1, MongoDB C Driver)
- [CVE-2026-120684](https://cve.now/CVE-2026-120684.md): MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password (CVSS 6.0, MongoDB C Driver)
- [CVE-2026-120678](https://cve.now/CVE-2026-120678.md): MongoDB C Driver leaks the decompressed reply buffer when an OP\_COMPRESSED reply fails to parse (denial of service) (CVSS 8.7, MongoDB C Driver)
- [CVE-2026-63198](https://cve.now/CVE-2026-63198.md): traQ: Privilege escalation by OAuth prompt=none request (CVSS 7.3, traPtitech traQ)
- [CVE-2026-82976](https://cve.now/CVE-2026-82976.md): Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster… (CVSS 7.1, Red Hat OpenShift Container Platform)
- [CVE-2026-120673](https://cve.now/CVE-2026-120673.md): Rust Driver 3.9.1 exports CSFLE plaintext in \`db.query.text\` before encrypting the command (CVSS 6.8, MongoDB Rust Driver)
- [CVE-2026-63197](https://cve.now/CVE-2026-63197.md): traQ: XSS in the User Uploaded File Retrieval API (CVSS 7.3, traPtitech traQ)
- [CVE-2026-63417](https://cve.now/CVE-2026-63417.md): Logging Redactor: PII data in str/repr of non primitive objects was not being redacted (CVSS 8.2, armurox loggingredactor)
- [CVE-2026-57154](https://cve.now/CVE-2026-57154.md): OPNsense: Configuration line injection via multiple GUI text fields (CVSS 8.1, opnsense core)
- [CVE-2026-119922](https://cve.now/CVE-2026-119922.md): Babelfish for PostgreSQL Privilege Escalation (CVSS 8.8, AWS babelfish-for-postgresql)
- [CVE-2026-63418](https://cve.now/CVE-2026-63418.md): Monitoring Plugins check\_icmp: -H argument count overflow leads in setuid-root binary (CVSS 7.0, monitoring-plugins)
- [CVE-2026-63499](https://cve.now/CVE-2026-63499.md): zt-zip: ZipUtil.unpack can change file permissions of output directory (CVSS 6.9, zeroturnaround zt-zip)
- [CVE-2026-63436](https://cve.now/CVE-2026-63436.md): zt-zip: Path traversal in fluent API unpack (CVSS 6.1, zeroturnaround zt-zip)
- [CVE-2026-44267](https://cve.now/CVE-2026-44267.md): Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered \`.constructor\` member access in Elo JavaScript emitter (CVSS 9.8, enspirit elo · @enspirit/elo)
- [CVE-2026-44266](https://cve.now/CVE-2026-44266.md): Elo: Remote Code Execution in Elo Ruby backend via unescaped \`#{...}\` interpolation in emitted string literals and subtype-constraint labels (CVSS 9.8, enspirit elo · @enspirit/elo)
- [CVE-2026-116845](https://cve.now/CVE-2026-116845.md): NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView (CVSS 5.3, netbox-community netbox)
- [CVE-2026-44265](https://cve.now/CVE-2026-44265.md): Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields (CVSS 7.4, enspirit elo · @enspirit/elo)
- [GHSA-P3JP-9V83-76W9](https://cve.now/GHSA-P3JP-9V83-76W9.md): Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability (high (no CVSS), Microsoft.DotNet.ILCompiler · Microsoft.NETCore.App.Run… +75)
- [CVE-2026-121263](https://cve.now/CVE-2026-121263.md): phpMyAdmin MoTranslator Loader.php getTranslator path traversal (CVSS 5.3, phpMyAdmin MoTranslator)
- [CVE-2026-121628](https://cve.now/CVE-2026-121628.md): Bagisto before 2.3.16 and 2.4.x before 2.4.1 Race Condition in Coupon Usage Accounting (CVSS 6.3, bagisto)
- [CVE-2026-121627](https://cve.now/CVE-2026-121627.md): buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL (CVSS 5.3, jarun buku)
- [CVE-2026-121626](https://cve.now/CVE-2026-121626.md): GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler (CVSS 6.3, willamowius gnugk)
- [CVE-2026-121625](https://cve.now/CVE-2026-121625.md): GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing (CVSS 6.3, willamowius gnugk)
- [CVE-2026-121624](https://cve.now/CVE-2026-121624.md): Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validation (CVSS 7.6, Nanosystems Supremo)
- [CVE-2026-121631](https://cve.now/CVE-2026-121631.md): Lightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpoints (CVSS 2.3, lightdash)
- [CVE-2026-119509](https://cve.now/CVE-2026-119509.md): WordPress ClickCease Click Fraud Protection plugin \<= 3.3.0 - Broken Access Control vulnerability (CVSS 5.3, eranfl ClickCease Click Fraud Protection)
- [CVE-2026-97072](https://cve.now/CVE-2026-97072.md): WordPress myCred plugin \<= 4.0.2 - Broken Access Control vulnerability (CVSS 4.3, myCred)
- [CVE-2026-114187](https://cve.now/CVE-2026-114187.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 5.3, WPVibes AnyWhere Elementor)
- [CVE-2026-121262](https://cve.now/CVE-2026-121262.md): phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion (CVSS 6.9, phpMyAdmin SQL-Parser)
- [CVE-2026-103077](https://cve.now/CVE-2026-103077.md): WordPress myCred plugin \<= 4.0.2 - Broken Access Control vulnerability (CVSS 4.3, myCred)
- [CVE-2026-114185](https://cve.now/CVE-2026-114185.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPVibes AnyWhere Elementor)
- [CVE-2026-119485](https://cve.now/CVE-2026-119485.md): WordPress Dokan plugin \<= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3, weDevs Dokan)
- [CVE-2026-39777](https://cve.now/CVE-2026-39777.md): WordPress WCFM Membership plugin \<= 2.12.0 - Broken Access Control vulnerability (CVSS 4.3, WC Lovers WCFM Membership)
- [CVE-2026-119487](https://cve.now/CVE-2026-119487.md): WordPress Dokan plugin \<= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3, weDevs Dokan)
- [CVE-2026-120843](https://cve.now/CVE-2026-120843.md): WordPress Posts Table with Search & Sort plugin \<= 1.4.14 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Barn2 Plugins Posts Table with Search & Sort)
- [CVE-2026-114183](https://cve.now/CVE-2026-114183.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - Sensitive Data Exposure vulnerability (CVSS 6.5, WPVibes AnyWhere Elementor)
- [GHSA-9PPR-WFW9-XVR2](https://cve.now/GHSA-9PPR-WFW9-XVR2.md): Netfoil doesn't decrement TTL (medium (no CVSS), github.com/tinfoil-factory/netfoil)
- [CVE-2026-116859](https://cve.now/CVE-2026-116859.md): WordPress Forminator plugin \<= 1.58.3 - Broken Access Control vulnerability (CVSS 5.3, WPMU DEV Forminator)
- [CVE-2026-116858](https://cve.now/CVE-2026-116858.md): WordPress Forminator plugin \<= 1.58.3 - Content Injection vulnerability (CVSS 4.3, WPMU DEV Forminator)
- [CVE-2026-39743](https://cve.now/CVE-2026-39743.md): WordPress WCFM Membership plugin \<= 2.12.0 - Broken Access Control vulnerability (CVSS 5.3, WC Lovers WCFM Membership)
- [CVE-2026-120846](https://cve.now/CVE-2026-120846.md): WordPress Uncanny Automator plugin \<= 7.7.1 - Broken Access Control vulnerability (CVSS 5.3, Uncanny Owl Uncanny Automator)
- [CVE-2026-115714](https://cve.now/CVE-2026-115714.md): Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections (CVSS 7.4, Elastic Docker images)
- [CVE-2026-115716](https://cve.now/CVE-2026-115716.md): Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service (CVSS 6.5, Elastic APM Server)
- [CVE-2026-115715](https://cve.now/CVE-2026-115715.md): Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-115710](https://cve.now/CVE-2026-115710.md): Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure (CVSS 4.2, Elasticsearch)
- [CVE-2026-115298](https://cve.now/CVE-2026-115298.md): Incorrect Authorization in Elasticsearch Leading to Information Disclosure (CVSS 4.3, Elasticsearch)
- [CVE-2026-115297](https://cve.now/CVE-2026-115297.md): NULL Pointer Dereference in Packetbeat Leading to Denial of Service (CVSS 6.5, Elastic Packetbeat)
- [CVE-2026-115295](https://cve.now/CVE-2026-115295.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-115294](https://cve.now/CVE-2026-115294.md): Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion (CVSS 7.3, Elastic Kibana)
- [CVE-2026-115293](https://cve.now/CVE-2026-115293.md): Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure (CVSS 6.5, Elastic Kibana)
- [CVE-2026-115292](https://cve.now/CVE-2026-115292.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-115290](https://cve.now/CVE-2026-115290.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 7.5, Elasticsearch)
- [CVE-2026-115289](https://cve.now/CVE-2026-115289.md): Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure (CVSS 4.3, Elastic APM Server)
- [CVE-2026-119521](https://cve.now/CVE-2026-119521.md): WordPress Paid Member Subscriptions plugin \<= 3.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Cozmoslabs Paid Member Subscriptions)
- [CVE-2026-119495](https://cve.now/CVE-2026-119495.md): WordPress Better Search plugin \<= 4.5.2 - Broken Access Control vulnerability (CVSS 5.3, WebberZone Better Search)
- [CVE-2026-121261](https://cve.now/CVE-2026-121261.md): phpMyAdmin ShapeFile SHP File loadFromFile infinite loop (CVSS 5.3, phpMyAdmin ShapeFile)
- [CVE-2026-121259](https://cve.now/CVE-2026-121259.md): Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator (CVSS 6.5, Red Hat Enterprise Linux)
- [GHSA-M3QR-FVP4-78XJ](https://cve.now/GHSA-M3QR-FVP4-78XJ.md): Arc has unauthenticated application log disclosure via \`/api/v1/logs\` (low (no CVSS), github.com/basekick-labs/arc)
- [CVE-2026-109594](https://cve.now/CVE-2026-109594.md): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified… (CVSS 6.8, SonicWall Global Management System)
- [CVE-2026-121604](https://cve.now/CVE-2026-121604.md): wlroots before 0.20.2 Out-of-Bounds Read via read\_surface\_class() in xwm.c (CVSS 4.8, wlroots)
- [CVE-2026-121603](https://cve.now/CVE-2026-121603.md): Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler (CVSS 8.5, solanum-ircd solanum)
- [CVE-2026-121602](https://cve.now/CVE-2026-121602.md): Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN (CVSS 8.5, solanum-ircd solanum)
- [CVE-2026-121588](https://cve.now/CVE-2026-121588.md): TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import (CVSS 5.3, texlyre)
- [CVE-2026-121587](https://cve.now/CVE-2026-121587.md): Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints (CVSS 6.9, coollabsio coolify)
- [CVE-2026-109593](https://cve.now/CVE-2026-109593.md): An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files… (CVSS 9.1, SonicWall Global Management System)
- [CVE-2026-28336](https://cve.now/CVE-2026-28336.md): SolarWinds Dameware Command Injection Vulnerability (CVSS 9.9, SolarWinds Dameware)
- [CVE-2026-28335](https://cve.now/CVE-2026-28335.md): SolarWinds Dameware Buffer Overflow Vulnerability (CVSS 8.4, SolarWinds Dameware)
- [CVE-2026-119674](https://cve.now/CVE-2026-119674.md): mongorestore may restore encoded collection names into an unintended collection (CVSS 2.1, MongoDB Database Tools)
- [CVE-2026-28327](https://cve.now/CVE-2026-28327.md): SolarWinds Dameware DLL Hijacking Vulnerability (CVSS 8.2, SolarWinds Dameware)
- [CVE-2026-103916](https://cve.now/CVE-2026-103916.md): Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory (CVSS 8.4, Docker Sandboxes)
- [CVE-2026-119673](https://cve.now/CVE-2026-119673.md): mongofiles may write outside the working directory through a symlink (CVSS 1.0, MongoDB Database Tools)
- [CVE-2026-119672](https://cve.now/CVE-2026-119672.md): mongofiles may disclose GridFS content to standard output through a stored filename (CVSS 5.9, MongoDB Database Tools)
- [CVE-2026-119675](https://cve.now/CVE-2026-119675.md): mongorestore may bypass collection guards through a system.buckets prefix (CVSS 5.2, MongoDB Database Tools)
- [CVE-2026-118505](https://cve.now/CVE-2026-118505.md): AshAuthentication brute\_force\_strategy does not limit sign-in and request actions defined on the resource (CVSS 6.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-119215](https://cve.now/CVE-2026-119215.md): AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account (CVSS 7.6, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-114582](https://cve.now/CVE-2026-114582.md): Server-side request forgery via SpatialReference string input (CVSS 5.3, djangoproject django)
- [CVE-2026-113733](https://cve.now/CVE-2026-113733.md): Password hash disclosure to "view only" admin users with custom user models (CVSS 2.2, djangoproject django)
- [CVE-2026-113593](https://cve.now/CVE-2026-113593.md): Potential exposure of private data via empty and missing Vary headers (CVSS 3.1, djangoproject django)
- [CVE-2026-111362](https://cve.now/CVE-2026-111362.md): Server-side request forgery via crs member of GeoJSON geometries (CVSS 5.3, djangoproject django)
- [CVE-2026-111211](https://cve.now/CVE-2026-111211.md): Potential log injection via unescaped geometry form values (CVSS 5.3, djangoproject django)
- [CVE-2026-108147](https://cve.now/CVE-2026-108147.md): Potential memory exhaustion in MultiPartParser via base64-encoded file upload (CVSS 5.3, djangoproject django)
- [CVE-2026-120758](https://cve.now/CVE-2026-120758.md): NULL Pointer Dereference in H5HL\_unprotect via Corrupted File (CVSS 5.4, The HDF Group HDF5)
- [CVE-2026-65168](https://cve.now/CVE-2026-65168.md): NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. (CVSS 7.0, NVIDIA Slurm)
- [CVE-2026-65165](https://cve.now/CVE-2026-65165.md): NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary… (CVSS 5.3, NVIDIA Slurm)
- [CVE-2026-65140](https://cve.now/CVE-2026-65140.md): NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained… (CVSS 5.7, NVIDIA Slurm)
- [CVE-2026-65139](https://cve.now/CVE-2026-65139.md): NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution. (CVSS 6.3, NVIDIA Slurm)
- [CVE-2026-120757](https://cve.now/CVE-2026-120757.md): Heap Buffer Over-read via Non-Terminated Link Data in H5L\_\_extern\_traverse (CVSS 6.9, The HDF Group HDF5)
- [CVE-2026-65138](https://cve.now/CVE-2026-65138.md): NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate… (CVSS 6.3, NVIDIA Slurm)
- [CVE-2026-65109](https://cve.now/CVE-2026-65109.md): NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside… (CVSS 4.7, NVIDIA Slurm)
- [CVE-2026-121578](https://cve.now/CVE-2026-121578.md): CVE-2026-121578 (CVSS 6.1, Amidaware Tactical RMM)
- [CVE-2026-120756](https://cve.now/CVE-2026-120756.md): Heap Buffer Over-read via Malformed Message Size in HDF5's H5O\_\_chunk\_deserialize (CVSS 1.9, The HDF Group HDF5)
- [CVE-2026-121260](https://cve.now/CVE-2026-121260.md): Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection (CVSS 9.4, Ziroom ZHOME A0101)
- [CVE-2026-120755](https://cve.now/CVE-2026-120755.md): Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter (CVSS 4.7, The HDF Group Szip Filter)
- [CVE-2026-118487](https://cve.now/CVE-2026-118487.md): Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser (CVSS 7.5, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-119741](https://cve.now/CVE-2026-119741.md): rsync through 3.5.1 Denial of Service via hash\_search() Checksum Collisions (CVSS 8.7, RsyncProject rsync)
- [CVE-2026-121564](https://cve.now/CVE-2026-121564.md): Silent loss of messages when merging overlapping chat exports in whatstk (CVSS 1.8, lucasrodes whatstk)
- [CVE-2026-120754](https://cve.now/CVE-2026-120754.md): Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter (CVSS 1.9, The HDF Group Scale-Offset Filter)
- [CVE-2026-97350](https://cve.now/CVE-2026-97350.md): Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows (CVSS 6.9, Securepoint SSL VPN Client)
- [CVE-2026-65108](https://cve.now/CVE-2026-65108.md): NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with… (CVSS 6.3, NVIDIA Slurm)
- [CVE-2026-65107](https://cve.now/CVE-2026-65107.md): NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write… (CVSS 6.3, NVIDIA Slurm)
- [CVE-2026-73328](https://cve.now/CVE-2026-73328.md): Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/ (CVSS 8.6, volmarg personal-management-system)
- [CVE-2026-121562](https://cve.now/CVE-2026-121562.md): CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint (CVSS 6.9, CTFd)
- [CVE-2026-121561](https://cve.now/CVE-2026-121561.md): Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads (CVSS 6.3, HumanSignal label-studio · HumanSignal label-studio-sdk)
- [CVE-2026-121560](https://cve.now/CVE-2026-121560.md): LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts (CVSS 7.1, logchimp)
- [CVE-2026-121559](https://cve.now/CVE-2026-121559.md): GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning (CVSS 8.6, glpi-project GLPI)
- [CVE-2026-121558](https://cve.now/CVE-2026-121558.md): AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project\_id (CVSS 2.3, Ricky-7-Yan intelligent-audit-system)
- [CVE-2026-121557](https://cve.now/CVE-2026-121557.md): WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot (CVSS 8.2, wppconnect-server)
- [CVE-2026-121556](https://cve.now/CVE-2026-121556.md): FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints (CVSS 8.7, beecue FastBee)
- [CVE-2026-121555](https://cve.now/CVE-2026-121555.md): Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb (CVSS 8.7, DrizzleTime Foxel)
- [CVE-2026-121554](https://cve.now/CVE-2026-121554.md): cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects (CVSS 8.2, silkimen cordova-plugin-advanced-http)
- [CVE-2026-121553](https://cve.now/CVE-2026-121553.md): Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime()) (CVSS 6.3, cotonti)
- [CVE-2026-121552](https://cve.now/CVE-2026-121552.md): domain-admin before 1.6.79 Missing Authorization via getGroupUserList (CVSS 5.3, dromara domain-admin)
- [CVE-2026-121551](https://cve.now/CVE-2026-121551.md): PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description (CVSS 5.1, postfixadmin)
- [CVE-2026-121550](https://cve.now/CVE-2026-121550.md): nnn through 5.3 Symlink-Following Write via NNN\_FIFO Handling (CVSS 1.0, jarun nnn)
- [CVE-2026-121549](https://cve.now/CVE-2026-121549.md): nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins (CVSS 4.1, jarun nnn)
- [CVE-2026-121548](https://cve.now/CVE-2026-121548.md): nnn through 5.3 OS Command Injection via togglex Plugin (CVSS 8.4, jarun nnn)
- [CVE-2026-121547](https://cve.now/CVE-2026-121547.md): dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata (CVSS 1.0, Canop dysk)
- [CVE-2026-121546](https://cve.now/CVE-2026-121546.md): ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following (CVSS 6.0, Novik ruTorrent)
- [CVE-2026-121545](https://cve.now/CVE-2026-121545.md): Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler (CVSS 6.9, robiningelbrecht dreeve)
- [CVE-2026-121544](https://cve.now/CVE-2026-121544.md): Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers (CVSS 6.9, koodo-reader)
- [CVE-2026-121543](https://cve.now/CVE-2026-121543.md): smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation (CVSS 8.7, a466350665 smart-sso)
- [CVE-2026-121455](https://cve.now/CVE-2026-121455.md): DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save (CVSS 5.3, dbgate)
- [CVE-2026-121454](https://cve.now/CVE-2026-121454.md): Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests (CVSS 6.3, padloc)
- [CVE-2026-121453](https://cve.now/CVE-2026-121453.md): SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint (CVSS 5.1, dataease SQLBot)
- [CVE-2026-121452](https://cve.now/CVE-2026-121452.md): bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service (CVSS 8.3, mlogclub bbs-go)
- [CVE-2026-121451](https://cve.now/CVE-2026-121451.md): AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF (CVSS 8.7, amir1376 ab-download-manager)
- [CVE-2026-121450](https://cve.now/CVE-2026-121450.md): CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID (CVSS 7.7, PAICNI CFNext)
- [CVE-2026-118488](https://cve.now/CVE-2026-118488.md): Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client (CVSS 5.9, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-100493](https://cve.now/CVE-2026-100493.md): An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an… (CVSS 6.9, AMD Compressionator SDK)
- [CVE-2026-40652](https://cve.now/CVE-2026-40652.md): An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted… (CVSS 5.2, AMD Compressionator SDK)
- [CVE-2026-40661](https://cve.now/CVE-2026-40661.md): An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially… (CVSS 5.2, AMD Compressionator SDK)
- [CVE-2026-40660](https://cve.now/CVE-2026-40660.md): A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read… (CVSS 5.2, AMD Compressionator SDK)
- [CVE-2026-40659](https://cve.now/CVE-2026-40659.md): An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted… (CVSS 5.1, AMD Compressionator SDK)
- [CVE-2026-43603](https://cve.now/CVE-2026-43603.md): A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service. (CVSS 6.9, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +38)
- [CVE-2026-110265](https://cve.now/CVE-2026-110265.md): runZero search SQL injection (CVSS 6.5, runZero Platform)
- [CVE-2026-118489](https://cve.now/CVE-2026-118489.md): CachingWebClient shares user-specific HTTP responses across users via the shared cache tier (CVSS 7.5, Eclipse Foundation Eclipse Vert.x)
- [CVE-2026-118527](https://cve.now/CVE-2026-118527.md): Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to… (CVSS 4.3, KEV, Ivanti Connect Secure)
- [CVE-2026-121449](https://cve.now/CVE-2026-121449.md): Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook (CVSS 7.1, Finsys dockhand)
- [CVE-2026-121448](https://cve.now/CVE-2026-121448.md): Dockhand before 1.0.54 Path Traversal via Stack Environment Routes (CVSS 8.7, Finsys dockhand)
- [CVE-2026-121447](https://cve.now/CVE-2026-121447.md): svg-sanitizer before 1.1.0 XSS via animateTransform on Safari (CVSS 5.3, darylldoyle svg-sanitizer)
- [CVE-2026-121446](https://cve.now/CVE-2026-121446.md): svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes (CVSS 5.3, darylldoyle svg-sanitizer)
- [CVE-2026-121445](https://cve.now/CVE-2026-121445.md): svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping (CVSS 8.2, darylldoyle svg-sanitizer)
- [CVE-2026-121444](https://cve.now/CVE-2026-121444.md): svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph (CVSS 8.7, darylldoyle svg-sanitizer)
- [CVE-2026-121443](https://cve.now/CVE-2026-121443.md): svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag (CVSS 6.9, darylldoyle svg-sanitizer)
- [CVE-2026-121442](https://cve.now/CVE-2026-121442.md): Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API (CVSS 5.3, frappe hrms)
- [CVE-2026-121441](https://cve.now/CVE-2026-121441.md): Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling (CVSS 6.3, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-121440](https://cve.now/CVE-2026-121440.md): Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass (CVSS 6.3, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-121439](https://cve.now/CVE-2026-121439.md): Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-121438](https://cve.now/CVE-2026-121438.md): Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing (CVSS 6.9, lepture mistune)
- [CVE-2026-121437](https://cve.now/CVE-2026-121437.md): Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via \_process\_emphasis\_delimiters (CVSS 8.7, lepture mistune)
- [CVE-2026-121436](https://cve.now/CVE-2026-121436.md): Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api\_keys.php (CVSS 8.6, froxlor)
- [CVE-2026-121435](https://cve.now/CVE-2026-121435.md): Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API (CVSS 5.3, froxlor)
- [CVE-2026-121434](https://cve.now/CVE-2026-121434.md): Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API (CVSS 5.3, froxlor)
- [CVE-2026-121433](https://cve.now/CVE-2026-121433.md): AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export (CVSS 5.1, AzuraCast)
- [CVE-2026-121432](https://cve.now/CVE-2026-121432.md): AzuraCast before 0.24.0 CRLF Injection via Mount display\_name in PLS Playlist (CVSS 5.1, AzuraCast)
- [CVE-2026-121431](https://cve.now/CVE-2026-121431.md): AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors (CVSS 6.9, AzuraCast)
- [CVE-2026-121430](https://cve.now/CVE-2026-121430.md): AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints (CVSS 5.3, AzuraCast)
- [CVE-2026-121429](https://cve.now/CVE-2026-121429.md): AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe() (CVSS 8.7, AzuraCast)
- [CVE-2026-121428](https://cve.now/CVE-2026-121428.md): AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone (CVSS 8.7, AzuraCast)
- [CVE-2026-121427](https://cve.now/CVE-2026-121427.md): AzuraCast through 0.23.8 Config Injection via frontend\_config.custom\_config (CVSS 8.7, AzuraCast)
- [CVE-2026-121426](https://cve.now/CVE-2026-121426.md): Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser (CVSS 8.3, nodemailer)
- [CVE-2026-121425](https://cve.now/CVE-2026-121425.md): Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing (CVSS 8.3, nodemailer)
- [CVE-2026-121424](https://cve.now/CVE-2026-121424.md): Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments (CVSS 8.3, nodemailer)
- [CVE-2026-121423](https://cve.now/CVE-2026-121423.md): SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization (CVSS 7.1, surrealdb)
- [CVE-2026-121422](https://cve.now/CVE-2026-121422.md): SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass (CVSS 5.1, surrealdb)
- [CVE-2026-121421](https://cve.now/CVE-2026-121421.md): SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass (CVSS 5.3, surrealdb)
- [CVE-2026-121420](https://cve.now/CVE-2026-121420.md): SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses (CVSS 4.8, surrealdb)
- [CVE-2026-121419](https://cve.now/CVE-2026-121419.md): SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision (CVSS 8.6, surrealdb)
- [CVE-2026-121418](https://cve.now/CVE-2026-121418.md): SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner (CVSS 5.3, surrealdb)
- [CVE-2026-121417](https://cve.now/CVE-2026-121417.md): SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn\_local in KV Backends (CVSS 8.8, surrealdb)
- [CVE-2026-121416](https://cve.now/CVE-2026-121416.md): SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations (CVSS 7.1, surrealdb)
- [CVE-2026-121415](https://cve.now/CVE-2026-121415.md): Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key (CVSS 6.3, parse-community parse-server)
- [CVE-2026-121414](https://cve.now/CVE-2026-121414.md): Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update (CVSS 8.2, parse-community parse-server)
- [CVE-2026-121413](https://cve.now/CVE-2026-121413.md): Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession (CVSS 2.3, parse-community parse-server)
- [CVE-2026-121412](https://cve.now/CVE-2026-121412.md): FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly (CVSS 7.1, FreeRDP)
- [CVE-2026-121411](https://cve.now/CVE-2026-121411.md): FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry (CVSS 2.3, FreeRDP)
- [CVE-2026-121410](https://cve.now/CVE-2026-121410.md): FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE\_2 (CVSS 5.3, FreeRDP)
- [CVE-2026-121409](https://cve.now/CVE-2026-121409.md): FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token (CVSS 8.2, FreeRDP)
- [CVE-2026-121408](https://cve.now/CVE-2026-121408.md): FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel (CVSS 6.0, FreeRDP)
- [CVE-2026-121407](https://cve.now/CVE-2026-121407.md): FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel (CVSS 7.1, FreeRDP)
- [CVE-2026-121406](https://cve.now/CVE-2026-121406.md): FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload (CVSS 5.3, FreeRDP)
- [CVE-2026-121405](https://cve.now/CVE-2026-121405.md): FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control (CVSS 5.3, FreeRDP)
- [CVE-2026-121404](https://cve.now/CVE-2026-121404.md): FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA (CVSS 7.1, FreeRDP)
- [CVE-2026-121403](https://cve.now/CVE-2026-121403.md): FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP (CVSS 5.3, FreeRDP)
- [CVE-2026-121402](https://cve.now/CVE-2026-121402.md): FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics (CVSS 7.1, FreeRDP)
- [CVE-2026-121401](https://cve.now/CVE-2026-121401.md): FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet (CVSS 5.3, FreeRDP)
- [CVE-2026-121400](https://cve.now/CVE-2026-121400.md): FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet (CVSS 7.1, FreeRDP)
- [CVE-2026-121399](https://cve.now/CVE-2026-121399.md): FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length (CVSS 5.3, FreeRDP)
- [CVE-2026-121398](https://cve.now/CVE-2026-121398.md): FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module (CVSS 8.2, FreeRDP)
- [CVE-2026-121397](https://cve.now/CVE-2026-121397.md): FreeRDP before 3.32.2 Heap Over-Read via WinPR save\_png\_to\_buffer() (CVSS 5.3, FreeRDP)
- [CVE-2026-121396](https://cve.now/CVE-2026-121396.md): FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion (CVSS 5.3, FreeRDP)
- [CVE-2026-121395](https://cve.now/CVE-2026-121395.md): FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder (CVSS 7.1, FreeRDP)
- [CVE-2026-121394](https://cve.now/CVE-2026-121394.md): FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder (CVSS 7.1, FreeRDP)
- [CVE-2026-121393](https://cve.now/CVE-2026-121393.md): FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion (CVSS 7.1, FreeRDP)
- [CVE-2026-121392](https://cve.now/CVE-2026-121392.md): FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls\_verify\_certificate (CVSS 9.1, FreeRDP)
- [CVE-2026-121391](https://cve.now/CVE-2026-121391.md): FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE (CVSS 5.3, FreeRDP)
- [CVE-2026-121390](https://cve.now/CVE-2026-121390.md): FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response (CVSS 5.3, FreeRDP)
- [CVE-2026-121389](https://cve.now/CVE-2026-121389.md): FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging (CVSS 2.3, FreeRDP)
- [CVE-2026-121388](https://cve.now/CVE-2026-121388.md): FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA\_FIRST (CVSS 7.1, FreeRDP)
- [CVE-2026-121387](https://cve.now/CVE-2026-121387.md): FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder (CVSS 5.3, FreeRDP)
- [CVE-2026-121386](https://cve.now/CVE-2026-121386.md): FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers (CVSS 8.7, FreeRDP)
- [CVE-2026-121513](https://cve.now/CVE-2026-121513.md): Out-of-bounds Write in µD3TN (CVSS 7.5, µD3TN)
- [CVE-2026-121512](https://cve.now/CVE-2026-121512.md): Missing Release of Memory after Effective Lifetime in µD3TN (CVSS 7.5, µD3TN)
- [CVE-2026-121511](https://cve.now/CVE-2026-121511.md): Out-of-bounds Read in µD3TN (CVSS 7.1, µD3TN)
- [CVE-2026-121510](https://cve.now/CVE-2026-121510.md): Out-of-bounds Write in µD3TN (CVSS 7.5, µD3TN)
- [CVE-2026-121508](https://cve.now/CVE-2026-121508.md): Use After Free in µD3TN (CVSS 5.9, µD3TN)
- [CVE-2026-121507](https://cve.now/CVE-2026-121507.md): Double Free in µD3TN (CVSS 5.9, µD3TN)
- [CVE-2026-121506](https://cve.now/CVE-2026-121506.md): Out-of-bounds Write in NTPsec (CVSS 7.4, NTPsec)
- [CVE-2026-121505](https://cve.now/CVE-2026-121505.md): Out-of-bounds Read in NTPsec (CVSS 3.7, NTPsec)
- [CVE-2026-120572](https://cve.now/CVE-2026-120572.md): Incorrect boundary conditions in the Layout: Block and Inline component (CVSS 8.8, Mozilla Firefox)
- [CVE-2026-119742](https://cve.now/CVE-2026-119742.md): Nagios XI \< 2026R2 OS Command Injection via mibs.php (CVSS 8.6, Nagios Enterprises Nagios XI)
- [CVE-2026-85035](https://cve.now/CVE-2026-85035.md): Use-after-free via dynamically allocated message queue retained by the CAN RX filter (CVSS 8.8, zephyrproject zephyr)
- [CVE-2026-85034](https://cve.now/CVE-2026-85034.md): Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribers (CVSS 6.7, zephyrproject zephyr)
- [CVE-2026-85033](https://cve.now/CVE-2026-85033.md): Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next… (CVSS 4.6, zephyrproject zephyr)
- [CVE-2026-85032](https://cve.now/CVE-2026-85032.md): Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress (CVSS 4.8, zephyrproject zephyr)
- [CVE-2026-119179](https://cve.now/CVE-2026-119179.md): MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data (CVSS 8.3, MongoDB Node.js Driver)
- [CVE-2026-89295](https://cve.now/CVE-2026-89295.md): Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter (no CVSS, Eclipse Foundation Eclipse Mnestix)
- [CVE-2026-65160](https://cve.now/CVE-2026-65160.md): NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero. (CVSS 5.5, NVIDIA CUDA Toolkit · NVIDIA NVJPEG)
- [CVE-2026-121458](https://cve.now/CVE-2026-121458.md): Instatic before 0.0.21 Authorization Bypass via MCP Content Read Tools (CVSS 7.1, CoreBunch Instatic)
- [CVE-2026-99270](https://cve.now/CVE-2026-99270.md): tcp: Fix potential UAF in reqsk\_timer\_handler(). (CVSS 8.1, Linux)
- [CVE-2026-76124](https://cve.now/CVE-2026-76124.md): BuddyBoss App \<= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint (CVSS 8.8, BuddyBoss App)
- [CVE-2026-108060](https://cve.now/CVE-2026-108060.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108059](https://cve.now/CVE-2026-108059.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108058](https://cve.now/CVE-2026-108058.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108057](https://cve.now/CVE-2026-108057.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108056](https://cve.now/CVE-2026-108056.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108055](https://cve.now/CVE-2026-108055.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108054](https://cve.now/CVE-2026-108054.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108053](https://cve.now/CVE-2026-108053.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108052](https://cve.now/CVE-2026-108052.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108051](https://cve.now/CVE-2026-108051.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108050](https://cve.now/CVE-2026-108050.md): Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108049](https://cve.now/CVE-2026-108049.md): Clickjacking vulnerability in the Alosuite web application. (CVSS 5.1, AM System ALO Suite)
- [CVE-2026-108048](https://cve.now/CVE-2026-108048.md): Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. (CVSS 6.9, AM System ALO Suite)
- [CVE-2026-108047](https://cve.now/CVE-2026-108047.md): Inadequate authorization vulnerability in Alosuite’s user invitation functionality (CVSS 8.6, AM System ALO Suite)
- [CVE-2026-108046](https://cve.now/CVE-2026-108046.md): Direct Object Reference (IDOR) vulnerability in Alosuite (CVSS 6.9, AM System ALO Suite)
- [CVE-2026-99269](https://cve.now/CVE-2026-99269.md): sched\_ext: Wait for SCX\_OPSS\_DISPATCHING before moving tasks off DSQs (CVSS 7.8, Linux)
- [CVE-2026-99268](https://cve.now/CVE-2026-99268.md): io\_uring: wake ring pollers for local task\_work (no CVSS, Linux)
- [CVE-2026-99267](https://cve.now/CVE-2026-99267.md): io\_uring/napi: make stale entries time out after 60s (no CVSS, Linux)
- [CVE-2026-99266](https://cve.now/CVE-2026-99266.md): io\_uring/zcrx: fix buffer offsets in areas above 4GB (no CVSS, Linux)
- [CVE-2026-99265](https://cve.now/CVE-2026-99265.md): io\_uring/openclose: keep the lock in io\_pipe\_fixed() (no CVSS, Linux)
- [CVE-2026-99264](https://cve.now/CVE-2026-99264.md): io\_uring/net: don't retry recv on uncommitted buffers (CVSS 7.8, Linux)
- [CVE-2026-99263](https://cve.now/CVE-2026-99263.md): io\_uring/poll: avoid retry wakeup loss when dropping ownership (no CVSS, Linux)
- [CVE-2026-99262](https://cve.now/CVE-2026-99262.md): io\_uring/timeout: don't lose a cancel as io-wq arms a timeout (no CVSS, Linux)
- [CVE-2026-99261](https://cve.now/CVE-2026-99261.md): drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction (no CVSS, Linux)
- [CVE-2026-99260](https://cve.now/CVE-2026-99260.md): ntfs: fix resident conversion in ntfs\_new\_attr\_flags (no CVSS, Linux)
- [CVE-2026-99259](https://cve.now/CVE-2026-99259.md): soc/tegra: pmc: Fix uninitialised clock rate (no CVSS, Linux)
- [CVE-2026-99258](https://cve.now/CVE-2026-99258.md): x86/hyperv: Avoid using per-cpu output page in hv\_apicid\_to\_vp\_index() (no CVSS, Linux)
- [CVE-2026-99257](https://cve.now/CVE-2026-99257.md): gpio: shared: gracefully handle no-device lookup of shared GPIOs (no CVSS, Linux)
- [CVE-2026-99256](https://cve.now/CVE-2026-99256.md): dm cache: fix issue with background work locking (no CVSS, Linux)
- [CVE-2026-99255](https://cve.now/CVE-2026-99255.md): io\_uring/io-wq: don't hide a link from cancellations (no CVSS, Linux)
- [CVE-2026-99254](https://cve.now/CVE-2026-99254.md): io\_uring: don't flood a cancelling task with task\_work (no CVSS, Linux)
- [CVE-2026-99253](https://cve.now/CVE-2026-99253.md): io\_uring/cancel: rearm local work wake up before sleep (no CVSS, Linux)
- [CVE-2026-99252](https://cve.now/CVE-2026-99252.md): io\_uring/mpscq: disable preemption while pushing (no CVSS, Linux)
- [CVE-2026-99251](https://cve.now/CVE-2026-99251.md): Drivers: hv: Avoid infinite retry loop in init\_vp\_index() (no CVSS, Linux)
- [CVE-2026-99250](https://cve.now/CVE-2026-99250.md): printk: Postpone kthread startup (no CVSS, Linux)
- [CVE-2026-99249](https://cve.now/CVE-2026-99249.md): pid\_namespace: make zap\_pid\_ns\_processes() freezable (no CVSS, Linux)
- [CVE-2026-99248](https://cve.now/CVE-2026-99248.md): i2c: xiic: restore non-managed runtime PM to fix clk WARN flood (no CVSS, Linux)
- [CVE-2026-99247](https://cve.now/CVE-2026-99247.md): tracing: Do not initialize tracefs work if tracing is disabled (no CVSS, Linux)
- [CVE-2026-99246](https://cve.now/CVE-2026-99246.md): tipc: protect node reset trace dump with node lock (CVSS 8.1, Linux)
- [CVE-2026-99245](https://cve.now/CVE-2026-99245.md): KEYS: Fix key\_reject\_and\_link() race with keyring restriction (no CVSS, Linux)
- [CVE-2026-99244](https://cve.now/CVE-2026-99244.md): pid\_namespace: prevent TIF\_NOTIFY\_SIGNAL from interrupting the reaper (no CVSS, Linux)
- [CVE-2026-99243](https://cve.now/CVE-2026-99243.md): io-wq: order the exit bit against worker creation task work (no CVSS, Linux)
- [CVE-2026-114442](https://cve.now/CVE-2026-114442.md): Apache HertzBeat: incomplete XPath expression validation in aliasFields (low (no CVSS), Apache Software Foundation Apache HertzBeat)
- [CVE-2026-120327](https://cve.now/CVE-2026-120327.md): Open Redirection in extension "Mail" (mail) (CVSS 5.3, TYPO3 mediaessenz/mail)
- [CVE-2026-120328](https://cve.now/CVE-2026-120328.md): Information Disclosure in extension "Mail" (mail) (CVSS 6.9, TYPO3 mediaessenz/mail)
- [CVE-2026-120329](https://cve.now/CVE-2026-120329.md): Broken Access Control in extension "Mail" (mail) (CVSS 5.3, TYPO3 mediaessenz/mail)
- [CVE-2026-120330](https://cve.now/CVE-2026-120330.md): Broken Access Control in extension "Mail" (mail) (CVSS 7.1, TYPO3 mediaessenz/mail)
- [CVE-2026-120331](https://cve.now/CVE-2026-120331.md): Server-Side Request Forgery in extension "Mail" (mail) (CVSS 5.3, TYPO3 mediaessenz/mail)
- [CVE-2026-120332](https://cve.now/CVE-2026-120332.md): Cross-Site Scripting in extension "Mail" (mail) (CVSS 5.1, TYPO3 mediaessenz/mail)
- [CVE-2026-120333](https://cve.now/CVE-2026-120333.md): Broken Access Control in extension "Frontend User Registration" (sf\_register) (CVSS 8.8, TYPO3 evoweb/sf-register)
- [CVE-2026-77691](https://cve.now/CVE-2026-77691.md): Command injection vulnerability (CVSS 8.1, Zohocorp ManageEngine Key Manager Plus)
- [CVE-2026-89229](https://cve.now/CVE-2026-89229.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot… (CVSS 5.1, vivo BlueLM Copilot)
- [CVE-2026-119843](https://cve.now/CVE-2026-119843.md): Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags (CVSS 6.5, Red Hat Enterprise Linux · GStreamer project gst-plugins-go…)
- [CVE-2026-77778](https://cve.now/CVE-2026-77778.md): Improper access control vulnerability (CVSS 7.1, Zohocorp ManageEngine Key Manager Plus)
- [CVE-2026-119641](https://cve.now/CVE-2026-119641.md): Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership (no CVSS, Apache Software Foundation org.apache.oozie:oozie-main)
- [CVE-2026-119724](https://cve.now/CVE-2026-119724.md): Apache JClouds: XML External Entity (XXE) in provider-response parsing (no CVSS, Apache Software Foundation org.apache.jclouds:jclouds-core)
- [CVE-2026-89293](https://cve.now/CVE-2026-89293.md): Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering (CVSS 8.8, Eclipse Foundation Eclipse Mnestix)
- [CVE-2026-77777](https://cve.now/CVE-2026-77777.md): Improper access control vulnerability (CVSS 7.1, Zohocorp ManageEngine Key Manager Plus)
- [CVE-2026-89292](https://cve.now/CVE-2026-89292.md): Unauthenticated SSRF with MNESTIX\_BACKEND\_API\_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures (CVSS 9.2, Eclipse Foundation Eclipse Mnestix)
- [CVE-2026-118448](https://cve.now/CVE-2026-118448.md): Uninitialized output buffer returned after nd\_to\_text failure in pybddisasm (CVSS 6.9, Bitdefender pybddisasm)
- [CVE-2026-118447](https://cve.now/CVE-2026-118447.md): Uninitialized INSTRUX contents returned after decoding failure in pybddisasm (CVSS 4.8, Bitdefender pybddisasm)
- [CVE-2026-118446](https://cve.now/CVE-2026-118446.md): Use-after-free in INSTRUX array members in pybddisasm (CVSS 6.9, Bitdefender pybddisasm)
- [CVE-2026-118445](https://cve.now/CVE-2026-118445.md): Use-after-free in INSTRUX structure members in pybddisasm (CVSS 6.9, Bitdefender pybddisasm)
- [CVE-2026-118444](https://cve.now/CVE-2026-118444.md): Out-of-bounds reads during instruction decoding in pybddisasm (CVSS 4.8, Bitdefender pybddisasm)
- [CVE-2026-109161](https://cve.now/CVE-2026-109161.md): Buffer Overflow in Digital I/O (CVSS 6.9, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-105982](https://cve.now/CVE-2026-105982.md): Command Injection in IPsec VPN (CVSS 8.6, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-105981](https://cve.now/CVE-2026-105981.md): Command Injection in Digital I/O (CVSS 8.6, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-105980](https://cve.now/CVE-2026-105980.md): Command Injection in WireGuard VPN (CVSS 8.6, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-105979](https://cve.now/CVE-2026-105979.md): Command Injection in ZeroTier VPN (CVSS 8.6, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-105978](https://cve.now/CVE-2026-105978.md): Command Injection in Management Control Functions (CVSS 8.6, Welotec TK100 · Welotec TK500-v2 +1)
- [CVE-2026-121024](https://cve.now/CVE-2026-121024.md): Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet (CVSS 5.4, AxxonSoft AxxonNet)
- [CVE-2026-121023](https://cve.now/CVE-2026-121023.md): LDAP Bind Password Exposure in AxxonNet ARP Agent Logs (CVSS 5.5, AxxonSoft AxxonNet ARP Agent)
- [CVE-2026-121022](https://cve.now/CVE-2026-121022.md): Default Administrator Password Change Not Enforced in Axxon One Web Client (CVSS 8.1, AxxonSoft Axxon One)
- [CVE-2026-121021](https://cve.now/CVE-2026-121021.md): Plaintext Storage of LDAP Password in Axxon One Shared Configuration (CVSS 5.5, AxxonSoft Axxon One)
- [CVE-2026-92610](https://cve.now/CVE-2026-92610.md): Improper limitation of paths in py-aspect-model-loader (no CVSS, Eclipse Foundation Eclipse Semantic Modeling Framework)
- [CVE-2026-121020](https://cve.now/CVE-2026-121020.md): User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API (CVSS 4.3, AxxonSoft Axxon One)
- [CVE-2026-113421](https://cve.now/CVE-2026-113421.md): ThreadX Modules invokes trace-full callbacks after module unload (CVSS 7.3, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-115231](https://cve.now/CVE-2026-115231.md): User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege (CVSS 8.5, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-91075](https://cve.now/CVE-2026-91075.md): Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass (CVSS 5.3, Eupago Gateway For Woocommerce)
- [CVE-2026-103327](https://cve.now/CVE-2026-103327.md): CryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook Secret (CVSS 5.3, CryptoCloud)
- [CVE-2026-4052](https://cve.now/CVE-2026-4052.md): Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) (CVSS 9.8, WSO2 API Manager · WSO2 API Control Plane +1)
- [CVE-2026-74846](https://cve.now/CVE-2026-74846.md): Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the… (no CVSS, Catalyst-Plugin-Authentication)
- [CVE-2026-16900](https://cve.now/CVE-2026-16900.md): Authentication Bypass (CVSS 7.5, Zohocorp Log360 · Zohocorp EventLog Analyzer)
- [CVE-2026-103653](https://cve.now/CVE-2026-103653.md): Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP (CVSS 6.7, Qt)
- [CVE-2026-13594](https://cve.now/CVE-2026-13594.md): Improper Access Control vulnerability (CVSS 9.1, Zohocorp Log360 · Zohocorp EventLog Analyzer)
- [CVE-2026-120988](https://cve.now/CVE-2026-120988.md): billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend… (CVSS 6.1, NAVER billboard.js)
- [CVE-2026-120987](https://cve.now/CVE-2026-120987.md): Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment. (no CVSS, NAVER Whale browser)
- [CVE-2025-5769](https://cve.now/CVE-2025-5769.md): Reflected Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Allows Browser Redirection and UI Modification (CVSS 6.1, WSO2 API Control Plane · WSO2 API Manager +1)
- [CVE-2025-1397](https://cve.now/CVE-2025-1397.md): Improper IDP Status Validation via JWT Bearer or SAML2 Bearer Grants in Multiple WSO2 Products Allows Access Token Issuance for Disabled… (CVSS 4.8, WSO2 Universal Gateway · WSO2 Traffic Manager +7)
- [CVE-2026-104647](https://cve.now/CVE-2026-104647.md): weMail \<= 2.1.6 - Editor+ Incorrect Authorization via User::can() (no CVSS, weMail)
- [CVE-2026-104648](https://cve.now/CVE-2026-104648.md): weMail \<= 2.1.6 - Editor+ API Key Disclosure (no CVSS, weMail)
- [CVE-2026-103379](https://cve.now/CVE-2026-103379.md): WATI Chat and Notification \<= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token (no CVSS, WATI Chat and Notification)
- [CVE-2026-105967](https://cve.now/CVE-2026-105967.md): Gallery for Social Photo \<= 1.0.0.41 - Unauthenticated SSRF via next\_url Parameter (no CVSS, Gallery for Social Photo)
- [CVE-2026-106004](https://cve.now/CVE-2026-106004.md): DT LMS \<= 1.2 - Unauthenticated Arbitrary Course Completion Revocation (no CVSS, DT LMS)
- [CVE-2026-105993](https://cve.now/CVE-2026-105993.md): DT Directory Lite Addon \<= 1.1 - Unauthenticated Plugin Settings Update (no CVSS, DT Directory Lite Addon)
- [CVE-2026-115205](https://cve.now/CVE-2026-115205.md): AZEXO Store Locator \<= 1.4 - Subscriber+ Arbitrary Post Deletion via azt\_delete\_item (no CVSS, AZEXO Store Locator)
- [CVE-2026-77800](https://cve.now/CVE-2026-77800.md): Authentication bypass vulnerability (CVSS 7.7, Zohocorp ManageEngine Key Manager Plus)
- [CVE-2026-77799](https://cve.now/CVE-2026-77799.md): Two-factor authentication bypass (CVSS 7.4, Zohocorp ManageEngine Key Manager Plus)
- [CVE-2026-120578](https://cve.now/CVE-2026-120578.md): AI Alt Text Generator \<= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post\_id' Parameter (CVSS 5.3, migkapa AI Alt Text Generator)
- [CVE-2026-120538](https://cve.now/CVE-2026-120538.md): Easy Digital Downloads \<= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding… (CVSS 8.1, smub Easy Digital Downloads – eCommerce Payments and Subscr…)
- [CVE-2026-120577](https://cve.now/CVE-2026-120577.md): FluentCart A New Era of eCommerce \<= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file\_path' Parameter (CVSS 8.1, wpmanageninja FluentCart A New Era of eCommerce – Faster, L…)
- [CVE-2026-120575](https://cve.now/CVE-2026-120575.md): Photo Engine (Media Organizer & Lightroom) \<= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection Name (CVSS 6.4, tigroumeow Photo Engine)
- [CVE-2026-120574](https://cve.now/CVE-2026-120574.md): SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments \<= 4.9.5… (CVSS 8.1, SureCart – Ecommerce Made Easy For Selling Physical Product…)
- [CVE-2026-120534](https://cve.now/CVE-2026-120534.md): Advanced Custom Fields: Extended PRO \<= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type (CVSS 9.8, ACF Extended Advanced Custom Fields: Extended PRO)
- [CVE-2026-120563](https://cve.now/CVE-2026-120563.md): WPML Multilingual & Multicurrency for WooCommerce \<= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field (CVSS 4.9, amirhelzer WPML Multilingual & Multicurrency for WooCommerce)
- [CVE-2026-120561](https://cve.now/CVE-2026-120561.md): JetFormBuilder \<= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification (CVSS 5.3, jetmonsters JetFormBuilder — Dynamic Blocks Form Builder)
- [CVE-2026-120559](https://cve.now/CVE-2026-120559.md): Contact Form Extender for Divi Builder \<= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal (CVSS 7.5, satindersingh Contact Form Extender for Divi – Submissions…)
- [CVE-2026-120524](https://cve.now/CVE-2026-120524.md): News Kit Addons For Elementor \<= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit\_update\_mega\_menu\_form AJAX Action (CVSS 6.4, blazethemes News Kit Addons For Elementor)
- [CVE-2026-120558](https://cve.now/CVE-2026-120558.md): Advanced Shipment Tracking for WooCommerce \<= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking\_provider' Parameter (CVSS 7.2, zorem Advanced Shipment Tracking for WooCommerce)
- [CVE-2026-120552](https://cve.now/CVE-2026-120552.md): SEO Engine \<= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Entity-Encoded Post Title via Strip-then-Decode in… (CVSS 6.4, tigroumeow SEO Engine – Smart SEO with AI, Schema & Redirec…)
- [CVE-2026-120551](https://cve.now/CVE-2026-120551.md): WP Compress \<= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force\_ic\_connect' and 'apikey'… (CVSS 5.3, aresit WP Compress – Instant Performance & Speed Optimizati…)
- [CVE-2026-120544](https://cve.now/CVE-2026-120544.md): Academy LMS \<= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route (CVSS 4.3, kodezen Academy LMS – AI Course Builder, Quizzes, Certifica…)
- [CVE-2026-120518](https://cve.now/CVE-2026-120518.md): BuddyPress XProfile Image Field \<= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler (CVSS 9.1, kalengi BuddyPress XProfile Custom Image Field)
- [CVE-2026-120971](https://cve.now/CVE-2026-120971.md): Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses (CVSS 5.3, Red Hat build of Apache Camel 4 for Quarkus · Red Hat bu… +6)
- [CVE-2026-111464](https://cve.now/CVE-2026-111464.md): WP Fastest Cache \<= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response (CVSS 5.9, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2026-120831](https://cve.now/CVE-2026-120831.md): Libslirp: libslirp: queue pointer corruption in if\_output() leading to denial of service (CVSS 6.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-76955](https://cve.now/CVE-2026-76955.md): A buffer overflow vulnerability in the zdp\_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based… (CVSS 8.8, Zyxel NWA110AX firmware)
- [CVE-2026-107441](https://cve.now/CVE-2026-107441.md): An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an… (CVSS 8.8, Zyxel GS1900-24E firmware · Zyxel GS1900-8 firmware +8)
- [CVE-2026-105770](https://cve.now/CVE-2026-105770.md): Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages (CVSS 5.3, github.com/octo-sts/app)
- [CVE-2026-120833](https://cve.now/CVE-2026-120833.md): labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch (CVSS 8.5, NIST labbench)
- [CVE-2026-120830](https://cve.now/CVE-2026-120830.md): Libslirp: libslirp: out-of-bounds heap read in icmp\_forward\_error() leading to information disclosure (CVSS 7.4, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-106991](https://cve.now/CVE-2026-106991.md): hustoj \>=24.09.10 and \<=26.08.19 is vulnerable to Incorrect Access Control. (CVSS 7.1)
- [CVE-2026-38595](https://cve.now/CVE-2026-38595.md): An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted… (no CVSS)
- [CVE-2026-38600](https://cve.now/CVE-2026-38600.md): A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via… (CVSS 9.8)
- [CVE-2026-38601](https://cve.now/CVE-2026-38601.md): A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect… (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.