# CVEs published 2026-11-08

323 CVEs were published on November 8, 2026: 23 critical, 128 high. 1 early warning was posted. Days are UTC.
## Early warnings

- [SZB-4458e05e7c](https://cve.now/SZB-4458e05e7c): SonicWall patches seven SonicOS flaws, including an SSL-VPN bypass exploited in attacks

## CVEs

- [CVE-2026-124501](https://cve.now/CVE-2026-124501.md): Tidelift moto AWS Batch Emulation models.py privileges management (CVSS 6.9, Tidelift moto)
- [CVE-2026-124500](https://cve.now/CVE-2026-124500.md): Fengoffice Feng Office File FilesController.class.php upload\_document\_image server-side request forgery (CVSS 5.3, Fengoffice Feng Office)
- [CVE-2026-124499](https://cve.now/CVE-2026-124499.md): Fengoffice Feng Office Translation Tool ToolController.class.php write\_translations code injection (CVSS 5.1, Fengoffice Feng Office)
- [CVE-2026-124498](https://cve.now/CVE-2026-124498.md): Convene Azeus Convene Board Management Portal dummy\_launcher.jsp cross site scripting (CVSS 5.1, Azeus Convene Board Management Portal)
- [CVE-2026-118904](https://cve.now/CVE-2026-118904.md): IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication. (CVSS 8.1, IBM webMethods Integration Server)
- [CVE-2026-96146](https://cve.now/CVE-2026-96146.md): Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management (CVSS 7.5, IBM SevOne Network Performance Management)
- [CVE-2026-95867](https://cve.now/CVE-2026-95867.md): Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management (CVSS 6.7, IBM SevOne Network Performance Management)
- [CVE-2026-17427](https://cve.now/CVE-2026-17427.md): This Power System update is being released to address (CVSS 6.5, IBM OPENBMC · IBM Power Hardware Management Console)
- [CVE-2026-17426](https://cve.now/CVE-2026-17426.md): This Power System update is being released to address (CVSS 6.5, IBM OPENBMC)
- [CVE-2026-16697](https://cve.now/CVE-2026-16697.md): This Power System update is being released to address (CVSS 6.5, IBM OPENBMC · IBM Power Hardware Management Console)
- [CVE-2026-16682](https://cve.now/CVE-2026-16682.md): This Power System update is being released to address (CVSS 6.5, IBM OPENBMC · IBM Hardware Management Console)
- [CVE-2026-97677](https://cve.now/CVE-2026-97677.md): Langflow OSS is affected by multiple vulnerabilities (CVSS 8.1, IBM Langflow OSS)
- [CVE-2026-9764](https://cve.now/CVE-2026-9764.md): IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution (CVSS 8.8, IBM Bob Shell)
- [CVE-2026-93879](https://cve.now/CVE-2026-93879.md): Hibernate Validator is affected by an expression language injection vulnerability (CVSS 7.5, IBM Hibernate Validator)
- [CVE-2026-93005](https://cve.now/CVE-2026-93005.md): Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 (CVSS 6.5, IBM Process Mining)
- [CVE-2026-8860](https://cve.now/CVE-2026-8860.md): IBM Verify Directory is affected by multiple vulnerabilities (CVSS 6.5, IBM Security Verify Directory · IBM Verify Directory)
- [CVE-2026-8642](https://cve.now/CVE-2026-8642.md): IBM Verify Directory is affected by multiple vulnerabilities (CVSS 4.3, IBM Security Verify Directory · IBM Verify Directory)
- [CVE-2026-8640](https://cve.now/CVE-2026-8640.md): IBM Verify Directory is affected by multiple vulnerabilities (CVSS 3.5, IBM Security Verify Directory · IBM Verify Directory)
- [CVE-2026-8639](https://cve.now/CVE-2026-8639.md): IBM Verify Directory is affected by multiple vulnerabilities (CVSS 8.8, IBM Security Verify Directory · IBM Verify Directory)
- [CVE-2026-84237](https://cve.now/CVE-2026-84237.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 3.1, IBM Guardium Data Protection)
- [CVE-2026-84229](https://cve.now/CVE-2026-84229.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 6.5, IBM Guardium Data Protection)
- [CVE-2026-84228](https://cve.now/CVE-2026-84228.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 3.1, IBM Guardium Data Protection)
- [CVE-2026-84030](https://cve.now/CVE-2026-84030.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 5.6, IBM Guardium Data Protection)
- [CVE-2026-82830](https://cve.now/CVE-2026-82830.md): IBM Guardium Data Protection is affected by multiple vulnerabilities (CVSS 6.7, IBM Guardium Data Protection)
- [CVE-2026-81542](https://cve.now/CVE-2026-81542.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 6.4, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-81209](https://cve.now/CVE-2026-81209.md): Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVSS 4.9, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2026-80435](https://cve.now/CVE-2026-80435.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 5.0, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-78636](https://cve.now/CVE-2026-78636.md): IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities (CVSS 4.3, IBM WebSphere Application Server - Liberty)
- [CVE-2026-78537](https://cve.now/CVE-2026-78537.md): IBM Guardium Key Lifecycle Manager is affected by a security vulnerability (CVSS 6.8, IBM Guardium Key Lifecycle Manager)
- [CVE-2026-77153](https://cve.now/CVE-2026-77153.md): IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem \[\] (CVSS 4.8, IBM i)
- [CVE-2026-75879](https://cve.now/CVE-2026-75879.md): Multiple vulnerabilities in IBM Content Navigator and FasterXML jackson-databind in IBM Content Navigator (CVSS 4.3, IBM Content Navigator)
- [CVE-2026-6715](https://cve.now/CVE-2026-6715.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 9.8, IBM Concert)
- [CVE-2026-3684](https://cve.now/CVE-2026-3684.md): Vulnerabilities exists in IBM Cloud Pak for Data System (CVSS 6.5, IBM Cloud Pak for Data System)
- [CVE-2026-2700](https://cve.now/CVE-2026-2700.md): Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge (CVSS 4.3, IBM watsonx Orchestrate Cartridge for Cloud Pak for Data)
- [CVE-2026-2477](https://cve.now/CVE-2026-2477.md): Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge (CVSS 6.5, IBM watsonx Orchestrate Cartridge for Cloud Pak for Data)
- [CVE-2026-19307](https://cve.now/CVE-2026-19307.md): Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVSS 4.3, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2026-19133](https://cve.now/CVE-2026-19133.md): TS4500 Tape Library addresses security vulnerability (CVSS 8.1, IBM Storage TS4500 Library)
- [CVE-2026-18893](https://cve.now/CVE-2026-18893.md): CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities (CVSS 7.1, CockroachDB PostgreSQL for IBM VPC)
- [CVE-2026-18546](https://cve.now/CVE-2026-18546.md): CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities (CVSS 5.4, CockroachDB PostgreSQL for IBM VPC)
- [CVE-2026-18668](https://cve.now/CVE-2026-18668.md): Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway (CVSS 6.5, IBM Sterling File Gateway)
- [CVE-2026-18525](https://cve.now/CVE-2026-18525.md): IBM Sterling Secure Proxy is vulnerable to multiple issues (CVSS 4.9, IBM Secure Proxy)
- [CVE-2026-18484](https://cve.now/CVE-2026-18484.md): IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization (CVSS 6.5, IBM ContextForge MCP Gateway)
- [CVE-2026-18196](https://cve.now/CVE-2026-18196.md): IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection (CVSS 5.4, IBM App Connect Enterprise)
- [CVE-2026-18195](https://cve.now/CVE-2026-18195.md): IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection (CVSS 4.2, IBM App Connect Enterprise)
- [CVE-2026-18194](https://cve.now/CVE-2026-18194.md): IBM App Connect Enterprise is vulnerable to a clickjacking attack (CVSS 2.5, IBM App Connect Enterprise)
- [CVE-2026-18093](https://cve.now/CVE-2026-18093.md): IBM App Connect Enterprise is vulnerable to a credential exposure (CVSS 7.5, IBM App Connect Enterprise)
- [CVE-2026-17466](https://cve.now/CVE-2026-17466.md): IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities (CVSS 9.1, IBM Optim)
- [CVE-2026-17437](https://cve.now/CVE-2026-17437.md): IBM App Connect Enterprise is vulnerable to an arbitrary file write (CVSS 5.5, IBM App Connect Enterprise)
- [CVE-2026-16699](https://cve.now/CVE-2026-16699.md): Vulnerability exists in IBM Netezza Appliance (CVSS 6.5, IBM Netezza Appliance)
- [CVE-2026-16433](https://cve.now/CVE-2026-16433.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 6.5, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-16427](https://cve.now/CVE-2026-16427.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 6.5, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-16325](https://cve.now/CVE-2026-16325.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 4.4, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-15266](https://cve.now/CVE-2026-15266.md): Multiple Vulnerabilities in IBM Concert Software (CVSS 9.8, IBM Concert)
- [CVE-2026-14963](https://cve.now/CVE-2026-14963.md): IBM Cognos Command Center has addressed vulnerabilities (CVSS 4.3, IBM Cognos Command Center)
- [CVE-2026-76052](https://cve.now/CVE-2026-76052.md): The following vulnerabilities that can affect IBM Storage Scale and IBM Storage Scale System and the Management GUI are now fixed in… (CVSS 6.0, IBM Storage Scale System · IBM Storage Scale)
- [CVE-2026-14469](https://cve.now/CVE-2026-14469.md): IBM Storage Scale Incorrect Authorization (CVSS 5.4, IBM Storage Scale Container Native and CSI)
- [CVE-2026-14437](https://cve.now/CVE-2026-14437.md): IBM Storage Scale Path Traversal (CVSS 6.5, IBM Storage Scale Container Native and CSI)
- [CVE-2026-14435](https://cve.now/CVE-2026-14435.md): IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability (CVSS 5.9, IBM Turbonomic kubeturbo agent)
- [CVE-2026-14434](https://cve.now/CVE-2026-14434.md): IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability (CVSS 5.9, IBM Turbonomic kubeturbo agent)
- [CVE-2026-14377](https://cve.now/CVE-2026-14377.md): IBM Turbonomic kubeturbo agent, used by IBM Turbonomic Application Resource Management, is affected by a security vulnerability (CVSS 5.4, IBM Turbonomic kubeturbo agent)
- [CVE-2026-14375](https://cve.now/CVE-2026-14375.md): The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher (CVSS 5.9, IBM Storage Scale)
- [CVE-2026-12737](https://cve.now/CVE-2026-12737.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability (CVSS 4.4, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2026-12735](https://cve.now/CVE-2026-12735.md): IBM Controller Disclosure Management has addressed vulnerabilities (CVSS 4.3, IBM Controller Disclosure Management)
- [CVE-2026-120115](https://cve.now/CVE-2026-120115.md): Multiple vulnerabilities in IBM Aspera Connect (CVSS 6.3, IBM Aspera Connect)
- [CVE-2026-120113](https://cve.now/CVE-2026-120113.md): Multiple vulnerabilities in IBM Aspera Connect (CVSS 6.4, IBM Aspera Connect)
- [CVE-2026-119670](https://cve.now/CVE-2026-119670.md): Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management (CVSS 6.3, IBM Storage Copy Data Management)
- [CVE-2026-117545](https://cve.now/CVE-2026-117545.md): IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication mechanism. (CVSS 8.8, IBM webMethods Integration Server)
- [CVE-2026-116501](https://cve.now/CVE-2026-116501.md): Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk\_circuit\_inst\_unitary(). (CVSS 8.4, IBM Qiskit SDK)
- [CVE-2026-116500](https://cve.now/CVE-2026-116500.md): Unbound Recursion in QPY deserialization can lead to denial of service (CVSS 6.2, IBM Qiskit SDK)
- [CVE-2026-116499](https://cve.now/CVE-2026-116499.md): Arbitrary Code Execution in Qiskit SDK QPY Deserialization (CVSS 8.4, IBM Qiskit SDK)
- [CVE-2026-115554](https://cve.now/CVE-2026-115554.md): Tivoli Netcool/OMNIbus Web GUI is vulnerable to stored cross-site scripting (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2026-11547](https://cve.now/CVE-2026-11547.md): IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities (CVSS 4.3, IBM WebSphere Application Server - Liberty)
- [CVE-2026-114464](https://cve.now/CVE-2026-114464.md): Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 (CVSS 9.3, IBM Process Mining)
- [CVE-2026-113698](https://cve.now/CVE-2026-113698.md): IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table (CVSS 6.5, IBM Db2)
- [CVE-2026-112369](https://cve.now/CVE-2026-112369.md): Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 (CVSS 4.3, IBM Process Mining)
- [CVE-2026-110273](https://cve.now/CVE-2026-110273.md): Security Vulnerability identified in IBM TRIRIGA - Command Execution (CVSS 8.8, IBM TRIRIGA Application Platform)
- [CVE-2026-10844](https://cve.now/CVE-2026-10844.md): IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities (CVSS 4.3, IBM WebSphere Application Server - Liberty)
- [CVE-2026-108292](https://cve.now/CVE-2026-108292.md): Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 (CVSS 5.5, IBM Process Mining)
- [CVE-2026-108284](https://cve.now/CVE-2026-108284.md): IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities (CVSS 6.5, IBM WebSphere Application Server - Liberty)
- [CVE-2026-107331](https://cve.now/CVE-2026-107331.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 9.9, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-107330](https://cve.now/CVE-2026-107330.md): DataStage on Cloud Pak for Data has several vulnerabilities (CVSS 7.7, IBM DataStage on Cloud Pak for Data)
- [CVE-2026-105473](https://cve.now/CVE-2026-105473.md): IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS (CVSS 4.6, IBM QRadar)
- [CVE-2026-105467](https://cve.now/CVE-2026-105467.md): IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS (CVSS 8.1, IBM QRadar)
- [CVE-2026-103320](https://cve.now/CVE-2026-103320.md): IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities (CVSS 4.3, IBM WebSphere Application Server - Liberty)
- [CVE-2026-102618](https://cve.now/CVE-2026-102618.md): IBM i is Affected by a Protection Mechanism Failure (CVSS 3.6, IBM i)
- [CVE-2026-101117](https://cve.now/CVE-2026-101117.md): IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks. (CVSS 9.1, IBM WebSphere Extreme Scale)
- [CVE-2025-36075](https://cve.now/CVE-2025-36075.md): IBM Safer Payments could allow an authenticated user to obtain sensitive information (CVSS 5.3, IBM Safer Payments)
- [CVE-2026-61987](https://cve.now/CVE-2026-61987.md): WordPress WCFM – Frontend Manager for WooCommerce plugin \<= 6.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WC Lovers WCFM – Frontend Manager for WooCommerce)
- [CVE-2026-114186](https://cve.now/CVE-2026-114186.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 6.5, WPVibes AnyWhere Elementor)
- [CVE-2026-114189](https://cve.now/CVE-2026-114189.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - SQL Injection vulnerability (CVSS 8.5, WPVibes AnyWhere Elementor)
- [CVE-2026-109900](https://cve.now/CVE-2026-109900.md): WordPress Melapress Role Editor plugin \<= 1.3.0 - Privilege Escalation vulnerability (CVSS 9.6, Melapress Role Editor)
- [CVE-2026-120858](https://cve.now/CVE-2026-120858.md): WordPress FluentForm plugin \<= 6.2.16 - Broken Access Control vulnerability (CVSS 6.5, WP ManageNinja FluentForm)
- [CVE-2026-109899](https://cve.now/CVE-2026-109899.md): WordPress Melapress Role Editor plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 7.1, Melapress Role Editor)
- [CVE-2026-114188](https://cve.now/CVE-2026-114188.md): WordPress AnyWhere Elementor plugin \<= 1.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPVibes AnyWhere Elementor)
- [CVE-2025-1837](https://cve.now/CVE-2025-1837.md): Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge (CVSS 5.4, IBM watsonx Orchestrate Cartridge for Cloud Pak for Data)
- [CVE-2025-0166](https://cve.now/CVE-2025-0166.md): Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge (CVSS 2.7, IBM watsonx Orchestrate Cartridge for Cloud Pak for Data)
- [CVE-2024-41786](https://cve.now/CVE-2024-41786.md): IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule (CVSS 5.3, IBM Engineering Requirements Management DOORS Next)
- [CVE-2026-124553](https://cve.now/CVE-2026-124553.md): BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing (CVSS 8.7, funstory-ai BabelDOC)
- [CVE-2026-124552](https://cve.now/CVE-2026-124552.md): Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi (CVSS 4.8, webmin)
- [CVE-2026-124551](https://cve.now/CVE-2026-124551.md): ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpoint (CVSS 6.0, classroomio)
- [CVE-2026-124474](https://cve.now/CVE-2026-124474.md): MRBS before 1.12.3 Reflected XSS via error parameter of view\_entry.php (CVSS 5.3, meeting-room-booking-system mrbs-code)
- [CVE-2026-124465](https://cve.now/CVE-2026-124465.md): Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic (CVSS 7.1, Trendyol kafka-konsumer)
- [CVE-2026-124331](https://cve.now/CVE-2026-124331.md): Jinher OA ProjectAfficheManage.aspx sql injection (CVSS 6.9, Jinher OA)
- [CVE-2026-124494](https://cve.now/CVE-2026-124494.md): SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass (CVSS 9.3, JiHong88 suneditor)
- [CVE-2026-124493](https://cve.now/CVE-2026-124493.md): SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent (CVSS 9.3, JiHong88 suneditor)
- [CVE-2026-124492](https://cve.now/CVE-2026-124492.md): SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List (CVSS 8.3, JiHong88 suneditor)
- [CVE-2026-124491](https://cve.now/CVE-2026-124491.md): SunEditor before 3.4.0 Stored XSS via FileUpload Plugin Filename (CVSS 5.3, JiHong88 suneditor)
- [CVE-2026-124490](https://cve.now/CVE-2026-124490.md): OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument (CVSS 9.4, openemr)
- [CVE-2026-124489](https://cve.now/CVE-2026-124489.md): OpenEMR before 8.3.0 Broken Access Control via portal\_payment.php (CVSS 7.1, openemr)
- [CVE-2026-124488](https://cve.now/CVE-2026-124488.md): OpenEMR before 8.3.0 Authorization Bypass via load\_form.php High-Sensitivity Encounters (CVSS 8.6, openemr)
- [CVE-2026-124487](https://cve.now/CVE-2026-124487.md): OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref (CVSS 7.1, openemr)
- [CVE-2026-124486](https://cve.now/CVE-2026-124486.md): OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller (CVSS 8.7, openemr)
- [CVE-2026-124485](https://cve.now/CVE-2026-124485.md): OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API (CVSS 7.1, openemr)
- [CVE-2026-124484](https://cve.now/CVE-2026-124484.md): OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs (CVSS 8.7, openemr)
- [CVE-2026-124483](https://cve.now/CVE-2026-124483.md): OpenEMR before 8.4.0 Improper Authorization via Prescription REST API (CVSS 8.7, openemr)
- [CVE-2026-124482](https://cve.now/CVE-2026-124482.md): OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch (CVSS 7.1, openemr)
- [CVE-2026-124481](https://cve.now/CVE-2026-124481.md): OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments (CVSS 7.1, openemr)
- [CVE-2026-124480](https://cve.now/CVE-2026-124480.md): OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN (CVSS 8.7, openemr)
- [CVE-2026-124479](https://cve.now/CVE-2026-124479.md): OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download (CVSS 7.1, openemr)
- [CVE-2026-124478](https://cve.now/CVE-2026-124478.md): OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php (CVSS 7.1, openemr)
- [CVE-2026-124477](https://cve.now/CVE-2026-124477.md): OpenEMR before 8.3.0 Missing Authorization via delete\_Recall in save.php (CVSS 8.7, openemr)
- [CVE-2026-124476](https://cve.now/CVE-2026-124476.md): OpenEMR before 8.3.0 IDOR via form\_pid in portal/lib/paylib.php (CVSS 7.1, openemr)
- [CVE-2026-124475](https://cve.now/CVE-2026-124475.md): OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting\_patient (CVSS 7.1, openemr)
- [CVE-2026-124473](https://cve.now/CVE-2026-124473.md): OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API (CVSS 7.1, openemr)
- [CVE-2026-124472](https://cve.now/CVE-2026-124472.md): OpenEMR before 8.3.0 Missing Authorization via sl\_eob\_patient\_note.php (CVSS 8.6, openemr)
- [CVE-2026-124471](https://cve.now/CVE-2026-124471.md): OpenEMR before 8.3.0 Missing Authorization and IDOR via sl\_eob\_invoice.php (CVSS 8.6, openemr)
- [CVE-2026-124470](https://cve.now/CVE-2026-124470.md): OpenEMR before 8.3.0 BOLA via portal\_custom\_report.php Exposes Patient Problem Lists (CVSS 7.1, openemr)
- [CVE-2026-124469](https://cve.now/CVE-2026-124469.md): OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter (CVSS 9.4, openemr)
- [CVE-2026-124468](https://cve.now/CVE-2026-124468.md): OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API (CVSS 7.1, openemr)
- [CVE-2026-124467](https://cve.now/CVE-2026-124467.md): OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload (CVSS 8.7, openemr)
- [CVE-2026-124466](https://cve.now/CVE-2026-124466.md): OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks\_uri (CVSS 6.9, openemr)
- [CVE-2026-124464](https://cve.now/CVE-2026-124464.md): OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse (CVSS 7.1, openemr)
- [CVE-2026-124463](https://cve.now/CVE-2026-124463.md): OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View (CVSS 9.3, openemr)
- [CVE-2026-124462](https://cve.now/CVE-2026-124462.md): OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter (CVSS 7.1, openemr)
- [CVE-2026-124461](https://cve.now/CVE-2026-124461.md): OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint (CVSS 8.6, openemr)
- [CVE-2026-124460](https://cve.now/CVE-2026-124460.md): OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController (CVSS 7.1, openemr)
- [CVE-2026-124459](https://cve.now/CVE-2026-124459.md): OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers (CVSS 8.6, openemr)
- [CVE-2026-124458](https://cve.now/CVE-2026-124458.md): OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpoint (CVSS 7.1, openemr)
- [CVE-2026-124457](https://cve.now/CVE-2026-124457.md): OpenEMR before 8.3.0 Path Traversal via sl\_eob\_process.php eraname (CVSS 7.2, openemr)
- [CVE-2026-124456](https://cve.now/CVE-2026-124456.md): OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Module (CVSS 7.1, openemr)
- [CVE-2026-124455](https://cve.now/CVE-2026-124455.md): OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid\_Equals Mass-Assignment (CVSS 7.1, openemr)
- [CVE-2026-124453](https://cve.now/CVE-2026-124453.md): OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.php (CVSS 7.1, openemr)
- [CVE-2026-124452](https://cve.now/CVE-2026-124452.md): OpenEMR before 8.3.0 Stored XSS via Eye Exam Document Notes (CVSS 5.1, openemr)
- [CVE-2026-124451](https://cve.now/CVE-2026-124451.md): OpenEMR before 8.4.0 Authorization Bypass via checkUserHasAccessToPatient in SMART on FHIR (CVSS 6.0, openemr)
- [CVE-2026-124450](https://cve.now/CVE-2026-124450.md): OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument (CVSS 9.3, openemr)
- [CVE-2026-124449](https://cve.now/CVE-2026-124449.md): OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routes (CVSS 7.1, openemr)
- [CVE-2026-124448](https://cve.now/CVE-2026-124448.md): OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributes (CVSS 8.6, openemr)
- [CVE-2026-124447](https://cve.now/CVE-2026-124447.md): OpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update Endpoint (CVSS 8.6, openemr)
- [CVE-2026-124446](https://cve.now/CVE-2026-124446.md): OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocument (CVSS 8.7, openemr)
- [CVE-2026-124445](https://cve.now/CVE-2026-124445.md): OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force (CVSS 9.3, openemr)
- [CVE-2026-124444](https://cve.now/CVE-2026-124444.md): OpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query API (CVSS 7.1, openemr)
- [CVE-2026-124443](https://cve.now/CVE-2026-124443.md): Frappe before 16.35.0 Broken Access Control in File List/Report Queries (CVSS 5.3, frappe)
- [CVE-2026-124442](https://cve.now/CVE-2026-124442.md): AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connector Redirects (CVSS 7.1, AzuraCast)
- [CVE-2026-124441](https://cve.now/CVE-2026-124441.md): Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind (CVSS 8.7, kyverno)
- [CVE-2026-124440](https://cve.now/CVE-2026-124440.md): Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass (CVSS 9.4, kyverno)
- [CVE-2026-124439](https://cve.now/CVE-2026-124439.md): Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowException (CVSS 8.7, scriban)
- [CVE-2026-124438](https://cve.now/CVE-2026-124438.md): Scriban before 7.5.2 Delegate Target Exposure via array.map Member Access (CVSS 9.1, scriban)
- [CVE-2026-124437](https://cve.now/CVE-2026-124437.md): Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursion (CVSS 8.7, scriban)
- [CVE-2026-124436](https://cve.now/CVE-2026-124436.md): OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources (CVSS 8.6, openremote core)
- [CVE-2026-124435](https://cve.now/CVE-2026-124435.md): OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload (CVSS 4.6, openremote core)
- [CVE-2026-124434](https://cve.now/CVE-2026-124434.md): Grav Lightbox Gallery 1.1.0 before 1.3.2 File Read via Shortcode Media Actions (CVSS 7.1, getgrav grav)
- [CVE-2026-124433](https://cve.now/CVE-2026-124433.md): phpMyFAQ before 4.1.11 Insufficient Authorization in Group Deletion via GroupController (CVSS 7.0, thorsten phpMyFAQ)
- [CVE-2026-124432](https://cve.now/CVE-2026-124432.md): phpMyFAQ before 4.1.11 and 4.2.0-beta.3 Account Enumeration via WebAuthn prepare-login (CVSS 6.9, thorsten phpMyFAQ)
- [CVE-2026-124431](https://cve.now/CVE-2026-124431.md): Craft CMS 5.10.0 before 5.11.2 Unauthorized Volume Browsing via Asset Replacement (CVSS 5.3, craftcms cms)
- [CVE-2026-124430](https://cve.now/CVE-2026-124430.md): Craft CMS 5.10.0 before 5.11.2 RCE via app/render-elements Signing Oracle (CVSS 8.7, craftcms cms)
- [CVE-2026-124429](https://cve.now/CVE-2026-124429.md): Craft CMS 5.0.0 before 5.11.2 Privilege Escalation via Public Registration (CVSS 8.7, craftcms cms)
- [CVE-2026-124428](https://cve.now/CVE-2026-124428.md): Craft CMS 5.7.0 before 5.11.2 Arbitrary SVG File Read via app/icon-svg (CVSS 7.1, craftcms cms)
- [CVE-2026-124427](https://cve.now/CVE-2026-124427.md): Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next (CVSS 9.3, craftcms cms)
- [CVE-2026-124426](https://cve.now/CVE-2026-124426.md): Craft CMS before 5.11.2 GraphQL Sites Scope Bypass via localized Field (CVSS 6.9, craftcms cms)
- [CVE-2026-124425](https://cve.now/CVE-2026-124425.md): Parse Server 9.10.6-alpha.1 before 9.10.7-alpha.2 Information Disclosure via Save Response (CVSS 2.3, parse-community parse-server)
- [CVE-2026-124424](https://cve.now/CVE-2026-124424.md): WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php (CVSS 7.1, WWBN AVideo)
- [CVE-2026-124330](https://cve.now/CVE-2026-124330.md): FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal (CVSS 2.3, FlowCI flow-core-x)
- [CVE-2026-124329](https://cve.now/CVE-2026-124329.md): FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal (CVSS 2.3, FlowCI flow-core-x)
- [CVE-2026-124328](https://cve.now/CVE-2026-124328.md): FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection (CVSS 5.3, FlowCI flow-core-x)
- [CVE-2026-124326](https://cve.now/CVE-2026-124326.md): DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal (CVSS 5.3, DataLinkDC Dinky)
- [CVE-2026-110963](https://cve.now/CVE-2026-110963.md): Userplace \<= 1.2.0 - Unauthenticated Privilege Escalation (CVSS 9.8, Userplace)
- [CVE-2026-110132](https://cve.now/CVE-2026-110132.md): Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification (CVSS 4.9, Sync Post With Other Site)
- [CVE-2026-109925](https://cve.now/CVE-2026-109925.md): Productive Commerce \< 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers (CVSS 8.6, Productive Commerce)
- [CVE-2026-106015](https://cve.now/CVE-2026-106015.md): Ecommerce Affiliate \<= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force (CVSS 8.1, Ecommerce Affiliate)
- [CVE-2026-105970](https://cve.now/CVE-2026-105970.md): BCK Auto-confirm Bank Transfer \<= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation (CVSS 5.3, Thanh Toán Quét Mã QR Code Tự Động)
- [CVE-2026-104639](https://cve.now/CVE-2026-104639.md): Razorpay for WooCommerce \< 4.8.9 - Admin+ SQLi via Webhook (CVSS 4.1, Razorpay for WooCommerce)
- [CVE-2026-104338](https://cve.now/CVE-2026-104338.md): Razorpay for WooCommerce \< 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route (CVSS 3.7, Razorpay for WooCommerce)
- [CVE-2026-104337](https://cve.now/CVE-2026-104337.md): Razorpay for WooCommerce \< 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply (CVSS 5.3, Razorpay for WooCommerce)
- [CVE-2026-104307](https://cve.now/CVE-2026-104307.md): BackUpWordPress \< 3.15 - Subscriber+ Backup Directory File Deletion via hmbkp\_dismiss\_error (CVSS 5.4, BackUpWordPress)
- [CVE-2026-103303](https://cve.now/CVE-2026-103303.md): Turisbook Booking System \<= 1.3.8 - Unauthenticated Stored XSS via Cart Background Setting (CVSS 8.8, Turisbook Booking System)
- [CVE-2026-114432](https://cve.now/CVE-2026-114432.md): Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename (CVSS 9.8, Contact Form)
- [CVE-2026-96963](https://cve.now/CVE-2026-96963.md): Pie Register \<= 3.8.4.15 - Contributor+ Invitation Code Modification (CVSS 2.7, Pie Register)
- [CVE-2026-96961](https://cve.now/CVE-2026-96961.md): Pie Register \<= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction (CVSS 6.5, Pie Register)
- [CVE-2026-103375](https://cve.now/CVE-2026-103375.md): Antom Payments \<= 2.0.11 - Unauthenticated WooCommerce Order Data Disclosure (CVSS 5.3, Antom Payments)
- [CVE-2026-97195](https://cve.now/CVE-2026-97195.md): Secure Custom Fields \< 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition (CVSS 3.5, Secure Custom Fields)
- [CVE-2026-97194](https://cve.now/CVE-2026-97194.md): Secure Custom Fields \< 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields (CVSS 2.7, Secure Custom Fields)
- [CVE-2026-97193](https://cve.now/CVE-2026-97193.md): Secure Custom Fields \< 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR (CVSS 2.7, Secure Custom Fields)
- [CVE-2026-97192](https://cve.now/CVE-2026-97192.md): Secure Custom Fields \< 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path (CVSS 2.7, Secure Custom Fields)
- [CVE-2026-85344](https://cve.now/CVE-2026-85344.md): FV Player \< 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization (CVSS 4.3, FV Flowplayer Video Player)
- [CVE-2026-122085](https://cve.now/CVE-2026-122085.md): Event Tickets Manager for WooCommerce \< 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure (CVSS 6.5, Event Tickets Manager for WooCommerce)
- [CVE-2026-122062](https://cve.now/CVE-2026-122062.md): Pronamic Pay & Pronamic Pay doneren met Mollie - Unauthenticated Form Submission Disclosure via REST API (CVSS 5.3, Pronamic Pay)
- [CVE-2026-122060](https://cve.now/CVE-2026-122060.md): WP Recipe Maker \< 10.9.2 - Unauthenticated Password-Protected Recipe Disclosure (CVSS 5.3, WP Recipe Maker)
- [CVE-2026-114713](https://cve.now/CVE-2026-114713.md): The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies… (CVSS 8.6, UnrealIRCd)
- [CVE-2026-124422](https://cve.now/CVE-2026-124422.md): SunEditor 3.0.0 before 3.4.0 Stored XSS via html.clean() Iframe Placeholder (CVSS 5.3, jihong88 suneditor)
- [CVE-2026-123616](https://cve.now/CVE-2026-123616.md): imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader (CVSS 8.7, imgproxy · github.com/imgproxy/imgproxy +3)
- [CVE-2026-123615](https://cve.now/CVE-2026-123615.md): imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader (CVSS 8.7, imgproxy · github.com/imgproxy/imgproxy +3)
- [CVE-2026-123614](https://cve.now/CVE-2026-123614.md): imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow (CVSS 9.3, imgproxy · github.com/imgproxy/imgproxy/v3 +2)
- [CVE-2026-123613](https://cve.now/CVE-2026-123613.md): Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypass (CVSS 6.9, rustls)
- [CVE-2026-123612](https://cve.now/CVE-2026-123612.md): rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure (CVSS 4.6, rustls)
- [CVE-2026-123611](https://cve.now/CVE-2026-123611.md): rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello (CVSS 6.3, rustls)
- [CVE-2026-123610](https://cve.now/CVE-2026-123610.md): rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression (CVSS 6.3, rustls)
- [CVE-2026-123609](https://cve.now/CVE-2026-123609.md): Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug (CVSS 4.1, rustls)
- [CVE-2026-123608](https://cve.now/CVE-2026-123608.md): Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression (CVSS 8.7, hickory-dns · hickory-proto)
- [CVE-2026-123607](https://cve.now/CVE-2026-123607.md): Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service (CVSS 8.7, hickory-dns · hickory-net)
- [CVE-2026-123606](https://cve.now/CVE-2026-123606.md): Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification (CVSS 8.7, hickory-dns)
- [CVE-2026-123605](https://cve.now/CVE-2026-123605.md): Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name (CVSS 8.7, hickory-dns)
- [CVE-2026-123604](https://cve.now/CVE-2026-123604.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try\_send TC-Retry Loop (CVSS 8.7, hickory-dns)
- [CVE-2026-123603](https://cve.now/CVE-2026-123603.md): Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass (CVSS 6.9, hickory-dns)
- [CVE-2026-123602](https://cve.now/CVE-2026-123602.md): Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching (CVSS 8.2, hickory-dns)
- [CVE-2026-123601](https://cve.now/CVE-2026-123601.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery (CVSS 8.3, hickory-dns)
- [CVE-2026-123600](https://cve.now/CVE-2026-123600.md): Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass (CVSS 6.3, hickory-dns)
- [CVE-2026-123599](https://cve.now/CVE-2026-123599.md): Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records (CVSS 6.3, hickory-dns)
- [CVE-2026-123598](https://cve.now/CVE-2026-123598.md): Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning (CVSS 6.3, hickory-dns)
- [CVE-2026-123597](https://cve.now/CVE-2026-123597.md): Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors (CVSS 6.3, hickory-dns)
- [CVE-2026-123596](https://cve.now/CVE-2026-123596.md): Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC (CVSS 8.7, hickory-dns)
- [CVE-2026-123595](https://cve.now/CVE-2026-123595.md): Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 (CVSS 8.7, hickory-dns)
- [CVE-2026-123594](https://cve.now/CVE-2026-123594.md): Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals (CVSS 6.3, hickory-dns)
- [CVE-2026-123593](https://cve.now/CVE-2026-123593.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors (CVSS 6.3, hickory-dns)
- [CVE-2026-123592](https://cve.now/CVE-2026-123592.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision (CVSS 8.2, hickory-dns)
- [CVE-2026-123591](https://cve.now/CVE-2026-123591.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks (CVSS 8.2, hickory-dns)
- [CVE-2026-123590](https://cve.now/CVE-2026-123590.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation (CVSS 6.3, hickory-dns)
- [CVE-2026-123589](https://cve.now/CVE-2026-123589.md): Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout (CVSS 6.9, hickory-dns)
- [CVE-2026-123588](https://cve.now/CVE-2026-123588.md): Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool (CVSS 8.7, hickory-dns)
- [CVE-2026-123587](https://cve.now/CVE-2026-123587.md): Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC (CVSS 8.9, hickory-dns)
- [CVE-2026-123586](https://cve.now/CVE-2026-123586.md): Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals (CVSS 8.7, hickory-dns)
- [CVE-2026-123585](https://cve.now/CVE-2026-123585.md): Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records (CVSS 6.9, hickory-dns)
- [CVE-2026-123584](https://cve.now/CVE-2026-123584.md): Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses (CVSS 8.2, hickory-dns)
- [CVE-2026-123583](https://cve.now/CVE-2026-123583.md): Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses (CVSS 6.3, hickory-dns)
- [CVE-2026-123582](https://cve.now/CVE-2026-123582.md): Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record (CVSS 6.3, hickory-dns)
- [CVE-2026-123581](https://cve.now/CVE-2026-123581.md): Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset (CVSS 6.9, hickory-dns)
- [CVE-2026-123580](https://cve.now/CVE-2026-123580.md): Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 (CVSS 8.7, hickory-dns)
- [CVE-2026-123579](https://cve.now/CVE-2026-123579.md): Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion (CVSS 6.3, hickory-dns)
- [CVE-2026-123578](https://cve.now/CVE-2026-123578.md): Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0 (CVSS 6.3, hickory-dns)
- [CVE-2026-123577](https://cve.now/CVE-2026-123577.md): Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service (CVSS 8.7, hickory-dns)
- [CVE-2026-123576](https://cve.now/CVE-2026-123576.md): Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests (CVSS 8.7, hickory-dns)
- [CVE-2026-123575](https://cve.now/CVE-2026-123575.md): Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies (CVSS 8.7, hickory-dns)
- [CVE-2026-123574](https://cve.now/CVE-2026-123574.md): Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser (CVSS 8.7, hickory-dns)
- [CVE-2026-123573](https://cve.now/CVE-2026-123573.md): hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser (CVSS 8.7, hickory-dns)
- [CVE-2026-123572](https://cve.now/CVE-2026-123572.md): Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser (CVSS 8.7, hickory-dns)
- [CVE-2026-123571](https://cve.now/CVE-2026-123571.md): Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding (CVSS 8.7, hickory-dns)
- [CVE-2026-123570](https://cve.now/CVE-2026-123570.md): Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts (CVSS 8.7, hickory-dns)
- [CVE-2026-123569](https://cve.now/CVE-2026-123569.md): Devalue before 5.6.3 Denial of Service via Sparse Array Serialization (CVSS 8.7, sveltejs devalue)
- [CVE-2026-123568](https://cve.now/CVE-2026-123568.md): Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output (CVSS 2.1, sveltejs devalue)
- [CVE-2026-123567](https://cve.now/CVE-2026-123567.md): Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten (CVSS 6.3, sveltejs devalue)
- [CVE-2026-123566](https://cve.now/CVE-2026-123566.md): Devalue before 5.9.3 CPU Amplification Denial of Service via uneval (CVSS 8.7, sveltejs devalue)
- [CVE-2026-123565](https://cve.now/CVE-2026-123565.md): Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval (CVSS 8.7, sveltejs devalue)
- [CVE-2026-123564](https://cve.now/CVE-2026-123564.md): Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays (CVSS 8.7, sveltejs devalue)
- [CVE-2026-123563](https://cve.now/CVE-2026-123563.md): Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse (CVSS 8.7, sveltejs devalue)
- [CVE-2026-123562](https://cve.now/CVE-2026-123562.md): Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection (CVSS 8.7, sveltejs devalue · devalue)
- [CVE-2026-123561](https://cve.now/CVE-2026-123561.md): Sveltejs devalue before 5.9.3 proto Rejection Bypass via Property-Key Coercion (CVSS 6.3, sveltejs devalue)
- [CVE-2026-123560](https://cve.now/CVE-2026-123560.md): Zebra before 7.0.0 Sync Denial of Service via Forged Checkpoint Block Body (CVSS 8.7, ZcashFoundation zebra)
- [CVE-2026-123559](https://cve.now/CVE-2026-123559.md): Zebra before 7.0.0 Denial of Service via Quadratic Sighash Computation (CVSS 8.7, ZcashFoundation zebra)
- [CVE-2026-123558](https://cve.now/CVE-2026-123558.md): Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier Rewind (CVSS 8.7, ZcashFoundation zebra)
- [CVE-2026-123557](https://cve.now/CVE-2026-123557.md): Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection (CVSS 8.2, ZcashFoundation zebra)
- [CVE-2026-123556](https://cve.now/CVE-2026-123556.md): Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring (CVSS 6.9, ZcashFoundation zebra)
- [CVE-2026-123555](https://cve.now/CVE-2026-123555.md): Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures (CVSS 8.7, ZcashFoundation zebra)
- [CVE-2026-123554](https://cve.now/CVE-2026-123554.md): Zebra zebrad 6.4.0 before 7.0.0 Denial of Service via Mempool Coinbase-Maturity Check (CVSS 8.7, ZcashFoundation zebra)
- [CVE-2026-123553](https://cve.now/CVE-2026-123553.md): OpenAM before 16.1.4 Default Credentials in Built-in Accounts Allow Unauthenticated Login (CVSS 6.9, OpenIdentityPlatform OpenAM)
- [CVE-2026-123552](https://cve.now/CVE-2026-123552.md): OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point (CVSS 6.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123551](https://cve.now/CVE-2026-123551.md): OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket (CVSS 10.0, OpenIdentityPlatform OpenAM)
- [CVE-2026-123550](https://cve.now/CVE-2026-123550.md): OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions (CVSS 9.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123549](https://cve.now/CVE-2026-123549.md): OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass (CVSS 9.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123548](https://cve.now/CVE-2026-123548.md): OpenAM before 16.1.4 Open Redirect via WS-Federation and SAML v2.0 Pages (CVSS 2.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123547](https://cve.now/CVE-2026-123547.md): OpenAM before 16.1.4 Open Redirect via SAML v2.0 RelayState (CVSS 2.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123546](https://cve.now/CVE-2026-123546.md): OpenAM before 16.1.4 Open Redirect and XSS via goto and gotoOnFail (CVSS 5.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123545](https://cve.now/CVE-2026-123545.md): OpenAM 14.5.1 before 16.1.4 CSRF in OAuth 2.0 Device Flow (CVSS 7.1, OpenIdentityPlatform OpenAM)
- [CVE-2026-123544](https://cve.now/CVE-2026-123544.md): OpenAM before 16.1.4 Insufficient Response Validation in Internal SOAP Channel (CVSS 6.1, OpenIdentityPlatform OpenAM)
- [CVE-2026-123543](https://cve.now/CVE-2026-123543.md): OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation (CVSS 8.7, OpenIdentityPlatform OpenAM)
- [CVE-2026-123542](https://cve.now/CVE-2026-123542.md): OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow (CVSS 7.6, OpenIdentityPlatform OpenAM)
- [CVE-2026-123541](https://cve.now/CVE-2026-123541.md): OpenAM before 16.1.4 Open Redirect via SAML 1.x Trusted-Partner Matching (CVSS 5.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123540](https://cve.now/CVE-2026-123540.md): OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST (CVSS 2.0, OpenIdentityPlatform OpenAM)
- [CVE-2026-123539](https://cve.now/CVE-2026-123539.md): OpenAM before 16.1.4 Stored XSS via OAuth 2.0 Consent Page Display Name (CVSS 4.8, OpenIdentityPlatform OpenAM)
- [CVE-2026-123538](https://cve.now/CVE-2026-123538.md): OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation (CVSS 7.5, OpenIdentityPlatform OpenAM)
- [CVE-2026-123537](https://cve.now/CVE-2026-123537.md): OpenAM before 16.1.4 SSRF via UMA Scope Description URLs (CVSS 5.3, OpenIdentityPlatform OpenAM)
- [CVE-2026-123536](https://cve.now/CVE-2026-123536.md): OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs (CVSS 5.1, OpenIdentityPlatform OpenAM)
- [CVE-2026-123535](https://cve.now/CVE-2026-123535.md): Tornado before 6.6 Cookie Attribute Injection via set\_cookie max\_age (CVSS 2.3, tornadoweb tornado)
- [CVE-2026-123534](https://cve.now/CVE-2026-123534.md): Tornado before 6.6 Path Traversal via static\_url() Version Hashing (CVSS 8.3, tornadoweb tornado)
- [CVE-2026-123533](https://cve.now/CVE-2026-123533.md): Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File (CVSS 6.8, GitoxideLabs gitoxide)
- [CVE-2026-123532](https://cve.now/CVE-2026-123532.md): gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe (CVSS 7.1, GitoxideLabs gitoxide)
- [CVE-2026-123531](https://cve.now/CVE-2026-123531.md): Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter (CVSS 8.7, go-vikunja vikunja)
- [CVE-2026-123530](https://cve.now/CVE-2026-123530.md): Vikunja before 2.7.1 Missing Step-Up Authentication via TOTP Enrollment Endpoints (CVSS 6.0, go-vikunja vikunja)
- [CVE-2026-123529](https://cve.now/CVE-2026-123529.md): Vikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-color (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-123528](https://cve.now/CVE-2026-123528.md): Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware (CVSS 7.6, go-vikunja vikunja)
- [CVE-2026-123527](https://cve.now/CVE-2026-123527.md): Vikunja 2.4.0 before 2.7.1 API Token Scope Collision Authorization Bypass (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123526](https://cve.now/CVE-2026-123526.md): Vikunja before 2.7.1 Mass Assignment via Team external\_id Field (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123525](https://cve.now/CVE-2026-123525.md): Vikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do Migrations (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123524](https://cve.now/CVE-2026-123524.md): Vikunja 0.23.0 before 2.7.1 Information Disclosure via Webhook related\_tasks Payload (CVSS 6.9, go-vikunja vikunja)
- [CVE-2026-123523](https://cve.now/CVE-2026-123523.md): Vikunja before 2.7.1 Memory Exhaustion via Unbounded Avatar Size Cache (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123522](https://cve.now/CVE-2026-123522.md): Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123521](https://cve.now/CVE-2026-123521.md): Vikunja before 2.7.1 Password Brute-Force via TOTP Disable Endpoint (CVSS 6.0, go-vikunja vikunja)
- [CVE-2026-123520](https://cve.now/CVE-2026-123520.md): Vikunja 0.18.0 before 2.7.1 Privilege Escalation via Account Deletion (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123519](https://cve.now/CVE-2026-123519.md): Vikunja before 2.7.1 Memory Exhaustion DoS via WeKan and Vikunja-File Imports (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123518](https://cve.now/CVE-2026-123518.md): Vikunja before 2.7.1 Missing Authorization in Kanban Task-Bucket Move (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123517](https://cve.now/CVE-2026-123517.md): Vikunja before 2.7.1 Information Disclosure via Team Self-Removal Endpoint (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123516](https://cve.now/CVE-2026-123516.md): Vikunja before 2.7.1 Resource Exhaustion via Vikunja-File ZIP Import (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123515](https://cve.now/CVE-2026-123515.md): Vikunja before 2.7.1 Client-Side Request Forgery via Stored Rich-Text Images (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-123514](https://cve.now/CVE-2026-123514.md): Vikunja before 2.7.1 Orphaned Export Archives Enable Disk Exhaustion (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123513](https://cve.now/CVE-2026-123513.md): Vikunja before 2.7.1 Auth Token Leak via API URL Change (CVSS 7.6, go-vikunja vikunja)
- [CVE-2026-123512](https://cve.now/CVE-2026-123512.md): Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs (CVSS 8.4, go-vikunja vikunja)
- [CVE-2026-123511](https://cve.now/CVE-2026-123511.md): Vikunja before 2.7.1 Resource Exhaustion via CalDAV VTODO RELATED-TO Entries (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123510](https://cve.now/CVE-2026-123510.md): Vikunja before 2.7.1 Plugin and Log Directories Not Anchored to Rootpath (CVSS 1.0, go-vikunja vikunja)
- [CVE-2026-123509](https://cve.now/CVE-2026-123509.md): Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123508](https://cve.now/CVE-2026-123508.md): Vikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release Toolchain (CVSS 2.0, go-vikunja vikunja)
- [CVE-2026-123507](https://cve.now/CVE-2026-123507.md): Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-123506](https://cve.now/CVE-2026-123506.md): Vikunja 2.2.0 before 2.7.1 Token Scope Bypass via Project Webhook Endpoints (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123505](https://cve.now/CVE-2026-123505.md): Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database (CVSS 6.8, go-vikunja vikunja)
- [CVE-2026-123504](https://cve.now/CVE-2026-123504.md): Vikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only Members (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123503](https://cve.now/CVE-2026-123503.md): Vikunja before 2.7.1 Improper Authorization in Kanban Bucket Deletion (CVSS 5.3, go-vikunja vikunja)
- [CVE-2026-123502](https://cve.now/CVE-2026-123502.md): Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging (CVSS 6.9, go-vikunja vikunja)
- [CVE-2026-123501](https://cve.now/CVE-2026-123501.md): Vikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image Decodes (CVSS 7.1, go-vikunja vikunja)
- [CVE-2026-123500](https://cve.now/CVE-2026-123500.md): Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump (CVSS 6.9, go-vikunja vikunja)
- [CVE-2026-123499](https://cve.now/CVE-2026-123499.md): Vikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml Server (CVSS 6.0, go-vikunja vikunja)
- [CVE-2026-123498](https://cve.now/CVE-2026-123498.md): Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata (CVSS 2.1, go-vikunja vikunja)
- [CVE-2026-123497](https://cve.now/CVE-2026-123497.md): Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery (CVSS 7.6, go-vikunja vikunja)
- [CVE-2026-123496](https://cve.now/CVE-2026-123496.md): Vikunja veans before 2.7.1 Symlink Following in veans init (CVSS 4.8, go-vikunja vikunja)
- [CVE-2026-123495](https://cve.now/CVE-2026-123495.md): Vikunja 2.0.0 before 2.7.1 Login CSRF via /api/v2 Login and OIDC Callback (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-123494](https://cve.now/CVE-2026-123494.md): Vikunja before 2.7.1 Login CSRF via Migration OAuth Callbacks (CVSS 5.1, go-vikunja vikunja)
- [CVE-2026-123493](https://cve.now/CVE-2026-123493.md): Vikunja from 2.4.0 before 2.7.1 Authentication Bypass via Bot API Tokens (CVSS 5.3, go-vikunja vikunja)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/daily/2026-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.