Patch Tuesday — September 2026

2026-09-08 · 5905 CVEs

CVEs published or modified the week of 2026-09-08, partitioned by vendor.

Microsoft (982 CVEs)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73299Critical10.0—2026-08-12Prompty is a markdown file format (.prompty) for LLM prompts.
CVE-2026-83941Critical9.9—2026-09-08Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-66302Critical9.8—2026-09-08External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-78509Critical9.8—2026-09-08Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78445Critical9.8—2026-09-08Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-77493Critical9.8—2026-09-08Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73025Critical9.8—2026-09-08Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73010Critical9.8—2026-09-08Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009Critical9.8—2026-09-08Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-72983Critical9.8—2026-09-08Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72982Critical9.8—2026-09-08Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72979Critical9.8—2026-09-08Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70296Critical9.8—2026-09-08Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69910Critical9.8—2026-09-08Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69845Critical9.8—2026-09-08Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69829Critical9.8—2026-09-08Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-69824Critical9.8—2026-09-08Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVE-2026-69819Critical9.8—2026-09-08Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-69769Critical9.8—2026-09-08Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVE-2026-69768Critical9.8—2026-09-08Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVE-2026-69730Critical9.8—2026-09-08Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69715Critical9.8—2026-09-08Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVE-2026-69595Critical9.8—2026-09-08Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69590Critical9.8—2026-09-08Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-69586Critical9.8—2026-09-08Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVE-2026-69579Critical9.8—2026-09-08Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-69525Critical9.8—2026-09-08Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69496Critical9.8—2026-09-08Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
CVE-2026-69493Critical9.8—2026-09-08Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69491Critical9.8—2026-09-08Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVE-2026-69463Critical9.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVE-2026-69431Critical9.8—2026-09-08Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
CVE-2026-69408Critical9.8—2026-09-08Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69276Critical9.8—2026-09-08Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVE-2026-68839Critical9.8—2026-09-08Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-67643Critical9.8—2026-09-08Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67631Critical9.8—2026-09-08Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-81376Critical9.6—2026-09-08Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-65669Critical9.6—2026-09-08Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69356Critical9.3—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-80098Critical9.3—2026-09-03Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69641Critical9.1—2026-09-08Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-62916Critical9.1—2026-09-03Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69854Critical9.0—2026-09-08Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-67636Critical9.0—2026-09-08Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67378Critical9.0—2026-09-08Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85877High8.8—2026-09-08Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
CVE-2026-83998High8.8—2026-09-08Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83996High8.8—2026-09-08Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83992High8.8—2026-09-08Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-81955High8.8—2026-09-08Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-81952High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-81385High8.8—2026-09-08Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-81352High8.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
CVE-2026-80096High8.8—2026-09-08Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80085High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80083High8.8—2026-09-08Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-80081High8.8—2026-09-08Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-80080High8.8—2026-09-08Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80077High8.8—2026-09-08Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-80074High8.8—2026-09-08Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-78526High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78525High8.8—2026-09-08Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78524High8.8—2026-09-08Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78521High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78519High8.8—2026-09-08Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78518High8.8—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78517High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514High8.8—2026-09-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512High8.8—2026-09-08Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78507High8.8—2026-09-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78505High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78504High8.8—2026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78463High8.8—2026-09-08Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-78462High8.8—2026-09-08Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78456High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-78442High8.8—2026-09-08Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
CVE-2026-78439High8.8—2026-09-08Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-77908High8.8—2026-09-08Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-77907High8.8—2026-09-08Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-77906High8.8—2026-09-08Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-77901High8.8—2026-09-08Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77504High8.8—2026-09-08Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77495High8.8—2026-09-08Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-77487High8.8—2026-09-08Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77486High8.8—2026-09-08Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77484High8.8—2026-09-08Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77483High8.8—2026-09-08Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77482High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77481High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77480High8.8—2026-09-08Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73028High8.8—2026-09-08Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73023High8.8—2026-09-08Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73018High8.8—2026-09-08Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-73016High8.8—2026-09-08Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73013High8.8—2026-09-08Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73012High8.8—2026-09-08Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-73006High8.8—2026-09-08Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-72986High8.8—2026-09-08Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-72973High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72960High8.8—2026-09-08Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-72959High8.8—2026-09-08Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72950High8.8—2026-09-08Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72940High8.8—2026-09-08Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-72933High8.8—2026-09-08Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-71352High8.8—2026-09-08Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
CVE-2026-71336High8.8—2026-09-08Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
CVE-2026-71328High8.8—2026-09-08Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-70586High8.8—2026-09-08Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
CVE-2026-70351High8.8—2026-09-08Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-70203High8.8—2026-09-08Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-69860High8.8—2026-09-08Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69797High8.8—2026-09-08Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69784High8.8—2026-09-08Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69778High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69772High8.8—2026-09-08Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
CVE-2026-69767High8.8—2026-09-08Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69764High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69759High8.8—2026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69742High8.8—2026-09-08Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-69740High8.8—2026-09-08Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69729High8.8—2026-09-08Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
CVE-2026-69724High8.8—2026-09-08Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69722High8.8—2026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69716High8.8—2026-09-08Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69712High8.8—2026-09-08Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
CVE-2026-69686High8.8—2026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69678High8.8—2026-09-08Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69676High8.8—2026-09-08Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
CVE-2026-69671High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69669High8.8—2026-09-08Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
CVE-2026-69649High8.8—2026-09-08Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-69632High8.8—2026-09-08Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69629High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-69628High8.8—2026-09-08Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
CVE-2026-69614High8.8—2026-09-08Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69603High8.8—2026-09-08Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-69601High8.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69598High8.8—2026-09-08Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69556High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69551High8.8—2026-09-08Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-69547High8.8—2026-09-08Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-69529High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69522High8.8—2026-09-08Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69518High8.8—2026-09-08Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVE-2026-69511High8.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69499High8.8—2026-09-08Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69495High8.8—2026-09-08Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69494High8.8—2026-09-08Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69485High8.8—2026-09-08Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2026-69465High8.8—2026-09-08Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69464High8.8—2026-09-08Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69461High8.8—2026-09-08Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVE-2026-69442High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69439High8.8—2026-09-08Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69434High8.8—2026-09-08Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
CVE-2026-69386High8.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69360High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69355High8.8—2026-09-08External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-69334High8.8—2026-09-08Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69291High8.8—2026-09-08Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69285High8.8—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69282High8.8—2026-09-08Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69273High8.8—2026-09-08Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69268High8.8—2026-09-08Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69266High8.8—2026-09-08Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-68828High8.8—2026-09-08Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-68786High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-68775High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67642High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67639High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67638High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67388High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67385High8.8—2026-09-08Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67384High8.8—2026-09-08Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67373High8.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67370High8.8—2026-09-08Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67368High8.8—2026-09-08Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820High8.8—2026-09-08Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819High8.8—2026-09-08Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818High8.8—2026-09-08Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66814High8.8—2026-09-08Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-65772High8.8—2026-09-08Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-62895High8.8—2026-09-08Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62744High8.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-62706High8.8—2026-09-08Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-72984High8.8—2026-08-28Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-24301High8.8—2026-08-18Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-80097High8.6—2026-09-08Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70341High8.5—2026-09-11Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-67379High8.5—2026-09-08Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-70178High8.5—2026-09-03Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
CVE-2026-69857High8.5—2026-09-03Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
CVE-2026-65818High8.5—2026-09-03Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
CVE-2026-78510High8.4—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-77503High8.4—2026-09-08Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2026-69638High8.4—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-69479High8.4—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-69646High8.3—2026-09-08Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-83939High8.2—2026-09-08Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-81379High8.2—2026-09-08Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81378High8.2—2026-09-08Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81357High8.2—2026-09-08Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81356High8.2—2026-09-08Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81354High8.2—2026-09-08Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-72962High8.2—2026-09-08Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72961High8.2—2026-09-08Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-72958High8.2—2026-09-08Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-69906High8.2—2026-09-08Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69874High8.2—2026-09-08Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-69846High8.2—2026-09-08Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69820High8.2—2026-09-08Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83997High8.1—2026-09-08Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-78450High8.1—2026-09-08Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78449High8.1—2026-09-08Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78444High8.1—2026-09-08Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-77505High8.1—2026-09-08Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72987High8.1—2026-09-08Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-72981High8.1—2026-09-08Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVE-2026-72936High8.1—2026-09-08Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVE-2026-70563High8.1—2026-09-08Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70342High8.1—2026-09-08Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69989High8.1—2026-09-08Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69858High8.1—2026-09-08Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69827High8.1—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69813High8.1—2026-09-08Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-69786High8.1—2026-09-08Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-69782High8.1—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69732High8.1—2026-09-08Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-69680High8.1—2026-09-08Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69620High8.1—2026-09-08Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69546High8.1—2026-09-08Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69530High8.1—2026-09-08Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-69524High8.1—2026-09-08Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69510High8.1—2026-09-08Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69438High8.1—2026-09-08Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVE-2026-69380High8.1—2026-09-08Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69325High8.1—2026-09-08Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVE-2026-55007High8.1—2026-09-08Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-47297High8.1—2026-09-08Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83948High8.0—2026-09-08Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
CVE-2026-69876High8.0—2026-09-08Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69875High8.0—2026-09-08Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69847High8.0—2026-09-08Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69826High8.0—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69807High8.0—2026-09-08Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
CVE-2026-69777High8.0—2026-09-08Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-69773High8.0—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69762High8.0—2026-09-08Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69727High8.0—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69717High8.0—2026-09-08Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVE-2026-69714High8.0—2026-09-08Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69689High8.0—2026-09-08Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69681High8.0—2026-09-08Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69643High8.0—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-69625High8.0—2026-09-08Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
CVE-2026-69623High8.0—2026-09-08Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
CVE-2026-69619High8.0—2026-09-08Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
CVE-2026-69512High8.0—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-69505High8.0—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69503High8.0—2026-09-08Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69481High8.0—2026-09-08Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVE-2026-69462High8.0—2026-09-08Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-69458High8.0—2026-09-08Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
CVE-2026-69427High8.0—2026-09-08Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69423High8.0—2026-09-08Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69418High8.0—2026-09-08Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69412High8.0—2026-09-08Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69371High8.0—2026-09-08Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
CVE-2026-69365High8.0—2026-09-08Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
CVE-2026-69346High8.0—2026-09-08Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-69332High8.0—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69322High8.0—2026-09-08Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69301High8.0—2026-09-08Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69271High8.0—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68894High8.0—2026-09-08Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-68880High8.0—2026-09-08Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68878High8.0—2026-09-08Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-68876High8.0—2026-09-08Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-68838High8.0—2026-09-08Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68834High8.0—2026-09-08Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68827High8.0—2026-09-08Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVE-2026-85880High7.8KEV2026-09-08Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-84000High7.8—2026-09-08Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVE-2026-83995High7.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83990High7.8—2026-09-08Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83988High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83987High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83986High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83985High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83983High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83982High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83981High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83980High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83979High7.8—2026-09-08Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83978High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83977High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83976High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83975High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83973High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83972High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83971High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83970High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968High7.8—2026-09-08Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83952High7.8—2026-09-08Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83942High7.8—2026-09-08Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83498High7.8—2026-09-08Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81963High7.8KEV2026-09-08Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-81960High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81959High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81957High7.8—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81956High7.8—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81954High7.8—2026-09-08Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81953High7.8—2026-09-08Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81951High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81950High7.8—2026-09-08Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81949High7.8—2026-09-08Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81948High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81947High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81398High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81397High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81396High7.8—2026-09-08Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81388High7.8—2026-09-08Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81386High7.8—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81353High7.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-80075High7.8—2026-09-08Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-78448High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78447High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77904High7.8—2026-09-08Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-77500High7.8—2026-09-08Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77489High7.8—2026-09-08Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73026High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73024High7.8—2026-09-08Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-73021High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73020High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73015High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73014High7.8—2026-09-08Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVE-2026-73011High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73007High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73002High7.8—2026-09-08Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73001High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73000High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72997High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72996High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72995High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72994High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72993High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72992High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72991High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72990High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72988High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72967High7.8—2026-09-08Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-72965High7.8—2026-09-08Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72957High7.8—2026-09-08Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVE-2026-72953High7.8—2026-09-08Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72946High7.8—2026-09-08Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72944High7.8—2026-09-08Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72941High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72929High7.8—2026-09-08Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-71345High7.8—2026-09-08Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-71343High7.8—2026-09-08Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVE-2026-71337High7.8—2026-09-08Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-71334High7.8—2026-09-08Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVE-2026-70584High7.8—2026-09-08Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70583High7.8—2026-09-08Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70581High7.8—2026-09-08Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70574High7.8—2026-09-08Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70572High7.8—2026-09-08Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70569High7.8—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-70564High7.8—2026-09-08Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-70334High7.8—2026-09-08Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-70289High7.8—2026-09-08Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-69921High7.8—2026-09-08Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69907High7.8—2026-09-08Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
CVE-2026-69900High7.8—2026-09-08Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69864High7.8—2026-09-08Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69844High7.8—2026-09-08Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69841High7.8—2026-09-08Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69822High7.8—2026-09-08Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69821High7.8—2026-09-08Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69801High7.8—2026-09-08Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69799High7.8—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69790High7.8—2026-09-08Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69787High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69785High7.8—2026-09-08Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-69758High7.8—2026-09-08Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69738High7.8—2026-09-08Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69731High7.8—2026-09-08Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69725High7.8—2026-09-08Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69720High7.8—2026-09-08Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69709High7.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69707High7.8—2026-09-08Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69691High7.8—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69687High7.8—2026-09-08Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69685High7.8—2026-09-08Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69612High7.8—2026-09-08Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69608High7.8—2026-09-08Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69604High7.8—2026-09-08Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69594High7.8—2026-09-08Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69593High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69592High7.8—2026-09-08Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69589High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69585High7.8—2026-09-08Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69584High7.8—2026-09-08Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69583High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69582High7.8—2026-09-08Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69580High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69576High7.8—2026-09-08Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-69571High7.8—2026-09-08Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69561High7.8—2026-09-08Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69544High7.8—2026-09-08Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-69542High7.8—2026-09-08Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-69541High7.8—2026-09-08Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69538High7.8—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-69535High7.8—2026-09-08Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69534High7.8—2026-09-08Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69532High7.8—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69528High7.8—2026-09-08Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69513High7.8—2026-09-08Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69509High7.8—2026-09-08Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69508High7.8—2026-09-08Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69489High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69480High7.8—2026-09-08Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69478High7.8—2026-09-08Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69476High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69475High7.8—2026-09-08Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69467High7.8—2026-09-08Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69459High7.8—2026-09-08Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
CVE-2026-69456High7.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-69455High7.8—2026-09-08Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69450High7.8—2026-09-08Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69447High7.8—2026-09-08Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69445High7.8—2026-09-08Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
CVE-2026-69444High7.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-69436High7.8—2026-09-08Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69433High7.8—2026-09-08Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69432High7.8—2026-09-08Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69426High7.8—2026-09-08Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVE-2026-69424High7.8—2026-09-08Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69421High7.8—2026-09-08Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69420High7.8—2026-09-08Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVE-2026-69407High7.8—2026-09-08Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69392High7.8—2026-09-08Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69391High7.8—2026-09-08Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69389High7.8—2026-09-08Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-69377High7.8—2026-09-08Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-69368High7.8—2026-09-08Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69359High7.8—2026-09-08Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69352High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69348High7.8—2026-09-08Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69328High7.8—2026-09-08Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69324High7.8—2026-09-08Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-69323High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69312High7.8—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69307High7.8—2026-09-08Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69298High7.8—2026-09-08Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69295High7.8—2026-09-08Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69293High7.8—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69290High7.8—2026-09-08Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69289High7.8—2026-09-08Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-69284High7.8—2026-09-08Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
CVE-2026-69283High7.8—2026-09-08Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69277High7.8—2026-09-08Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69270High7.8—2026-09-08Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69269High7.8—2026-09-08Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-69265High7.8—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68896High7.8—2026-09-08Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-68892High7.8—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68890High7.8—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68888High7.8—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68885High7.8—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68877High7.8—2026-09-08Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68875High7.8—2026-09-08Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68850High7.8—2026-09-08Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-68848High7.8—2026-09-08Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-68845High7.8—2026-09-08Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68844High7.8—2026-09-08Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68841High7.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68832High7.8—2026-09-08Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68787High7.8—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-62810High7.8—2026-09-08Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-62804High7.8—2026-09-08External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-62697High7.8—2026-09-08Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-58611High7.8—2026-09-08Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
CVE-2026-58600High7.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
CVE-2026-58599High7.8—2026-09-08Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-56198High7.8—2026-09-08Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-56177High7.8—2026-09-08Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-56172High7.8—2026-09-08Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-77909High7.7—2026-09-08Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
CVE-2026-66307High7.5—2026-09-08Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66304High7.5—2026-09-08Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-84001High7.5—2026-09-08Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVE-2026-83989High7.5—2026-09-08Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVE-2026-81355High7.5—2026-09-08Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-78446High7.5—2026-09-08Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2026-77898High7.5—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-77895High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77893High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77890High7.5—2026-09-08Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77889High7.5—2026-09-08Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77888High7.5—2026-09-08Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77886High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77502High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77501High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77499High7.5—2026-09-08Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77498High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77494High7.5—2026-09-08Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-73017High7.5—2026-09-08Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2026-72989High7.5—2026-09-08Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
CVE-2026-72954High7.5—2026-09-08Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72949High7.5—2026-09-08Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
CVE-2026-72943High7.5—2026-09-08Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72932High7.5—2026-09-08Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVE-2026-72928High7.5—2026-09-08Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-72923High7.5—2026-09-08The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model.
CVE-2026-71330High7.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
CVE-2026-70587High7.5—2026-09-08Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
CVE-2026-70579High7.5—2026-09-08Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
CVE-2026-70570High7.5—2026-09-08Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70065High7.5—2026-09-08Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69890High7.5—2026-09-08Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69881High7.5—2026-09-08Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVE-2026-69852High7.5—2026-09-08Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-69809High7.5—2026-09-08Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVE-2026-69805High7.5—2026-09-08External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69804High7.5—2026-09-08Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69793High7.5—2026-09-08Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69760High7.5—2026-09-08Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69744High7.5—2026-09-08Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69710High7.5—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69631High7.5—2026-09-08Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-69607High7.5—2026-09-08Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69599High7.5—2026-09-08Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69588High7.5—2026-09-08Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-69587High7.5—2026-09-08Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVE-2026-69539High7.5—2026-09-08Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69514High7.5—2026-09-08Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69443High7.5—2026-09-08Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
CVE-2026-69429High7.5—2026-09-08Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
CVE-2026-69428High7.5—2026-09-08Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVE-2026-69397High7.5—2026-09-08Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-69378High7.5—2026-09-08Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69342High7.5—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69329High7.5—2026-09-08Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
CVE-2026-68887High7.5—2026-09-08Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
CVE-2026-67376High7.5—2026-09-08Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-62813High7.5—2026-09-08Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-62759High7.5—2026-09-08Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-57099High7.5—2026-09-08Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-57098High7.5—2026-09-08Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-84003High7.4—2026-09-08Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-81383High7.4—2026-09-08Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-78461High7.4—2026-09-08Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69347High7.4—2026-09-08Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2026-69477High7.3—2026-09-08Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
CVE-2026-69417High7.3—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69402High7.3—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-81349High7.2—2026-09-08Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
CVE-2026-66305High7.1—2026-09-08Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-69775High7.1—2026-09-08Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
CVE-2026-69761High7.1—2026-09-08Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69757High7.1—2026-09-08Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69706High7.1—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69688High7.1—2026-09-08Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-69602High7.1—2026-09-08Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
CVE-2026-69597High7.1—2026-09-08Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-69553High7.1—2026-09-08Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
CVE-2026-69536High7.1—2026-09-08Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69482High7.1—2026-09-08Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVE-2026-69460High7.1—2026-09-08Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
CVE-2026-69451High7.1—2026-09-08Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
CVE-2026-69396High7.1—2026-09-08Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69384High7.1—2026-09-08Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVE-2026-69366High7.1—2026-09-08Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-69364High7.1—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-69358High7.1—2026-09-08Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2026-69357High7.1—2026-09-08Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69340High7.1—2026-09-08Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69338High7.1—2026-09-08Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69337High7.1—2026-09-08Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVE-2026-69336High7.1—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69314High7.1—2026-09-08Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69313High7.1—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69305High7.1—2026-09-08Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69296High7.1—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69274High7.1—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69272High7.1—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68893High7.1—2026-09-08Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-68889High7.1—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68846High7.1—2026-09-08Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-68835High7.1—2026-09-08Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-85360High7.0—2026-09-08Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83999High7.0—2026-09-08Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83940High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-81389High7.0—2026-09-08Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-80093High7.0—2026-09-08Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-78464High7.0—2026-09-08Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-78457High7.0—2026-09-08Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVE-2026-77905High7.0—2026-09-08Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-77899High7.0—2026-09-08Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77897High7.0—2026-09-08Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
CVE-2026-77894High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-77485High7.0—2026-09-08Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-73022High7.0—2026-09-08Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73005High7.0—2026-09-08Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2026-73003High7.0—2026-09-08Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-72963High7.0—2026-09-08Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVE-2026-72952High7.0—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-72930High7.0—2026-09-08Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
CVE-2026-72926High7.0—2026-09-08Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71353High7.0—2026-09-08Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71351High7.0—2026-09-08Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71342High7.0—2026-09-08Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71340High7.0—2026-09-08Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71333High7.0—2026-09-08Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71332High7.0—2026-09-08Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-70585High7.0—2026-09-08Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
CVE-2026-70578High7.0—2026-09-08Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-70577High7.0—2026-09-08Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-70573High7.0—2026-09-08Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70568High7.0—2026-09-08Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70567High7.0—2026-09-08Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70565High7.0—2026-09-08Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-70562High7.0—2026-09-08Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70283High7.0—2026-09-08Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69911High7.0—2026-09-08Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69896High7.0—2026-09-08Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69891High7.0—2026-09-08Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-69889High7.0—2026-09-08Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69866High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69859High7.0—2026-09-08Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69838High7.0—2026-09-08Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69834High7.0—2026-09-08Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-69818High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69817High7.0—2026-09-08Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69816High7.0—2026-09-08Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69814High7.0—2026-09-08Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69806High7.0—2026-09-08Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-69791High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69779High7.0—2026-09-08Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69735High7.0—2026-09-08Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69711High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69708High7.0—2026-09-08Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69694High7.0—2026-09-08Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69693High7.0—2026-09-08Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVE-2026-69692High7.0—2026-09-08Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69682High7.0—2026-09-08Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69654High7.0—2026-09-08Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69652High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69648High7.0—2026-09-08Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2026-69645High7.0—2026-09-08Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-69630High7.0—2026-09-08Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69621High7.0—2026-09-08Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69617High7.0—2026-09-08Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69613High7.0—2026-09-08Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69611High7.0—2026-09-08Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69610High7.0—2026-09-08Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69606High7.0—2026-09-08Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69605High7.0—2026-09-08Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69600High7.0—2026-09-08Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69581High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69578High7.0—2026-09-08Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69575High7.0—2026-09-08Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69574High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69573High7.0—2026-09-08Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69567High7.0—2026-09-08Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69564High7.0—2026-09-08Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVE-2026-69563High7.0—2026-09-08Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69560High7.0—2026-09-08Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69549High7.0—2026-09-08Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69540High7.0—2026-09-08Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69517High7.0—2026-09-08Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
CVE-2026-69516High7.0—2026-09-08Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-69501High7.0—2026-09-08Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69500High7.0—2026-09-08Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69498High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69492High7.0—2026-09-08Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69488High7.0—2026-09-08Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69473High7.0—2026-09-08Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69472High7.0—2026-09-08Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-69470High7.0—2026-09-08Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-69468High7.0—2026-09-08Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69466High7.0—2026-09-08Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69448High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69441High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69440High7.0—2026-09-08Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69430High7.0—2026-09-08Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69422High7.0—2026-09-08Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69413High7.0—2026-09-08Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69410High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69404High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-69401High7.0—2026-09-08Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-69398High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69394High7.0—2026-09-08Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69388High7.0—2026-09-08Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69385High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-69383High7.0—2026-09-08External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69379High7.0—2026-09-08Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69362High7.0—2026-09-08Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69341High7.0—2026-09-08Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69335High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69333High7.0—2026-09-08Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69331High7.0—2026-09-08Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69319High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69311High7.0—2026-09-08Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69310High7.0—2026-09-08Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-69309High7.0—2026-09-08Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69300High7.0—2026-09-08Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69299High7.0—2026-09-08Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69292High7.0—2026-09-08Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69287High7.0—2026-09-08Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69281High7.0—2026-09-08Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69280High7.0—2026-09-08Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69279High7.0—2026-09-08Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69275High7.0—2026-09-08Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68897High7.0—2026-09-08Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68884High7.0—2026-09-08Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-68847High7.0—2026-09-08Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-68840High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68837High7.0—2026-09-08Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68825High7.0—2026-09-08Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68824High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-62694High7.0—2026-09-08Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-50349High7.0—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-62727High7.0—2026-08-19Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78451Medium6.8—2026-09-08Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-77892Medium6.8—2026-09-08No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72999Medium6.8—2026-09-08Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72985Medium6.8—2026-09-08Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-71350Medium6.8—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-71349Medium6.8—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-71348Medium6.8—2026-09-08Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-71329Medium6.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69566Medium6.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69490Medium6.8—2026-09-08Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-69415Medium6.8—2026-09-08Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-68833Medium6.8—2026-09-08Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-65812Medium6.8—2026-09-08Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
CVE-2026-72948Medium6.7—2026-09-08Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-72935Medium6.7—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-72927Medium6.7—2026-09-08Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVE-2026-71339Medium6.7—2026-09-08Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69449Medium6.7—2026-09-08Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
CVE-2026-69373Medium6.7—2026-09-08Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69350Medium6.7—2026-09-08Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69469Medium6.6—2026-09-08Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-69642Medium6.5—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66308Medium6.5—2026-09-08Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66306Medium6.5—2026-09-08Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303Medium6.5—2026-09-08Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-63523Medium6.5—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-81381Medium6.5—2026-09-08Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-81377Medium6.5—2026-09-08Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
CVE-2026-80091Medium6.5—2026-09-08Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80090Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80089Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80087Medium6.5—2026-09-08Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80086Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-80084Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-80082Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80079Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80078Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80073Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78522Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78515Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-78503Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78453Medium6.5—2026-09-08Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
CVE-2026-78441Medium6.5—2026-09-08Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77896Medium6.5—2026-09-08Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVE-2026-73029Medium6.5—2026-09-08Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-72977Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72975Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974Medium6.5—2026-09-08Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72956Medium6.5—2026-09-08Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72942Medium6.5—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
CVE-2026-72939Medium6.5—2026-09-08Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
CVE-2026-72938Medium6.5—2026-09-08Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-70019Medium6.5—2026-09-08Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
CVE-2026-69839Medium6.5—2026-09-08Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
CVE-2026-69781Medium6.5—2026-09-08Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-69739Medium6.5—2026-09-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734Medium6.5—2026-09-08Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69719Medium6.5—2026-09-08Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69683Medium6.5—2026-09-08Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69636Medium6.5—2026-09-08Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69626Medium6.5—2026-09-08Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69624Medium6.5—2026-09-08Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
CVE-2026-69562Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69497Medium6.5—2026-09-08Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
CVE-2026-69409Medium6.5—2026-09-08Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69395Medium6.5—2026-09-08Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
CVE-2026-69375Medium6.5—2026-09-08Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
CVE-2026-69374Medium6.5—2026-09-08Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
CVE-2026-69361Medium6.5—2026-09-08Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-69297Medium6.5—2026-09-08Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
CVE-2026-69267Medium6.5—2026-09-08Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
CVE-2026-68898Medium6.5—2026-09-08Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVE-2026-68784Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68781Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68780Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68779Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68778Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68777Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68776Medium6.5—2026-09-08Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67648Medium6.5—2026-09-08Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67645Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67641Medium6.5—2026-09-08Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67633Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67630Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67629Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67624Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67393Medium6.5—2026-09-08Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390Medium6.5—2026-09-08Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67389Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67386Medium6.5—2026-09-08Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67383Medium6.5—2026-09-08Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67369Medium6.5—2026-09-08Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-66816Medium6.5—2026-09-08Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-64918Medium6.5—2026-09-08Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-62801Medium6.5—2026-09-08Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-62762Medium6.5—2026-09-08Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-58649Medium6.5—2026-09-08Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-66324Medium6.5—2026-08-28External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-77891Medium6.4—2026-09-08Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77887Medium6.4—2026-09-08Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-72947Medium6.4—2026-09-08Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71338Medium6.4—2026-09-08Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVE-2026-70582Medium6.4—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-69878Medium6.4—2026-09-08Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77490Medium6.1—2026-09-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-78523Medium5.9—2026-09-08Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-72978Medium5.9—2026-09-08Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-70124Medium5.9—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70091Medium5.9—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-69930Medium5.9—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69929Medium5.9—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69803Medium5.9—2026-09-08Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69382Medium5.9—2026-09-08Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69304Medium5.9—2026-09-08Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-69559Medium5.8—2026-09-08Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
CVE-2026-69723Medium5.7—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
CVE-2026-69679Medium5.7—2026-09-08Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69637Medium5.7—2026-09-08Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69591Medium5.7—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.
CVE-2026-69572Medium5.7—2026-09-08Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
CVE-2026-69569Medium5.7—2026-09-08Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
CVE-2026-69552Medium5.7—2026-09-08Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
CVE-2026-69507Medium5.7—2026-09-08Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.
CVE-2026-69416Medium5.7—2026-09-08Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69405Medium5.7—2026-09-08Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69393Medium5.7—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVE-2026-69372Medium5.7—2026-09-08Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
CVE-2026-69349Medium5.7—2026-09-08Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
CVE-2026-69317Medium5.7—2026-09-08Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
CVE-2026-68874Medium5.7—2026-09-08Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
CVE-2026-69832Medium5.6—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-85875Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-83991Medium5.5—2026-09-08Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
CVE-2026-83951Medium5.5—2026-09-08Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949Medium5.5—2026-09-08Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83501Medium5.5—2026-09-08Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-81958Medium5.5—2026-09-08Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81401Medium5.5—2026-09-08Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81400Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81399Medium5.5—2026-09-08Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81395Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81394Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391Medium5.5—2026-09-08Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81390Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81387Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78513Medium5.5—2026-09-08Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78506Medium5.5—2026-09-08Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78454Medium5.5—2026-09-08Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-77492Medium5.5—2026-09-08Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVE-2026-77491Medium5.5—2026-09-08Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
CVE-2026-77488Medium5.5—2026-09-08Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-73008Medium5.5—2026-09-08Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-73004Medium5.5—2026-09-08Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
CVE-2026-72966Medium5.5—2026-09-08Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
CVE-2026-72964Medium5.5—2026-09-08Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
CVE-2026-72945Medium5.5—2026-09-08Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
CVE-2026-72937Medium5.5—2026-09-08Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVE-2026-71341Medium5.5—2026-09-08Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
CVE-2026-70290Medium5.5—2026-09-08Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70145Medium5.5—2026-09-08Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-69862Medium5.5—2026-09-08Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
CVE-2026-69808Medium5.5—2026-09-08Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69794Medium5.5—2026-09-08Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-69770Medium5.5—2026-09-08Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69741Medium5.5—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69684Medium5.5—2026-09-08Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-69674Medium5.5—2026-09-08Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.
CVE-2026-69672Medium5.5—2026-09-08Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69627Medium5.5—2026-09-08Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
CVE-2026-69618Medium5.5—2026-09-08Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
CVE-2026-69616Medium5.5—2026-09-08Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
CVE-2026-69609Medium5.5—2026-09-08Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69568Medium5.5—2026-09-08Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
CVE-2026-69554Medium5.5—2026-09-08Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69531Medium5.5—2026-09-08Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
CVE-2026-69527Medium5.5—2026-09-08Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
CVE-2026-69504Medium5.5—2026-09-08Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-69457Medium5.5—2026-09-08Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-69453Medium5.5—2026-09-08Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69406Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-69403Medium5.5—2026-09-08Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
CVE-2026-69390Medium5.5—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69376Medium5.5—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69369Medium5.5—2026-09-08Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69367Medium5.5—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69353Medium5.5—2026-09-08Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
CVE-2026-69351Medium5.5—2026-09-08Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
CVE-2026-69345Medium5.5—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69344Medium5.5—2026-09-08Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-69343Medium5.5—2026-09-08Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69339Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
CVE-2026-69321Medium5.5—2026-09-08Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
CVE-2026-69318Medium5.5—2026-09-08Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-69315Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
CVE-2026-69308Medium5.5—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69303Medium5.5—2026-09-08Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
CVE-2026-69294Medium5.5—2026-09-08Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
CVE-2026-69288Medium5.5—2026-09-08Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-69286Medium5.5—2026-09-08Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
CVE-2026-68895Medium5.5—2026-09-08Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
CVE-2026-68886Medium5.5—2026-09-08Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
CVE-2026-68881Medium5.5—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-68873Medium5.5—2026-09-08Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
CVE-2026-68852Medium5.5—2026-09-08Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
CVE-2026-68851Medium5.5—2026-09-08Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-68843Medium5.5—2026-09-08Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-68842Medium5.5—2026-09-08Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
CVE-2026-68831Medium5.5—2026-09-08Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
CVE-2026-68830Medium5.5—2026-09-08Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
CVE-2026-66323Medium5.4—2026-08-28Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-62904Medium5.4—2026-08-28Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-81380Medium5.3—2026-09-08Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-70575Medium5.3—2026-09-08Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
CVE-2026-72976Medium5.0—2026-09-08Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-68785Medium4.9—2026-09-08Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-69474Medium4.8—2026-09-08Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
CVE-2026-72931Medium4.7—2026-09-08Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
CVE-2026-69895Medium4.7—2026-09-08Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69853Medium4.7—2026-09-08Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69792Medium4.7—2026-09-08Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.
CVE-2026-69771Medium4.7—2026-09-08Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-69483Medium4.7—2026-09-08Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
CVE-2026-69425Medium4.7—2026-09-08Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
CVE-2026-69316Medium4.7—2026-09-08Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-68891Medium4.7—2026-09-08Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-68849Medium4.7—2026-09-08Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
CVE-2026-78508Medium4.6—2026-09-08Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78452Medium4.6—2026-09-08Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-69690Medium4.6—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69548Medium4.6—2026-09-08Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-69381Medium4.6—2026-09-08Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-72980Medium4.4—2026-09-08Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
CVE-2026-69713Medium4.4—2026-09-08Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-58616Medium4.4—2026-08-28Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
CVE-2026-78516Medium4.3—2026-09-08Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-78455Medium4.3—2026-09-08Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-73019Medium4.3—2026-09-08Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-66798Medium4.3—2026-08-28Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-69904Low3.5—2026-09-08Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69615Low3.5—2026-09-08Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Other vendors (4923 CVEs across 1021 vendors)

Linux · 454 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89712Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock nfsd4_ssc_expire_umount() walks nn->nfsd_ssc_mount_list with list_for_each_entry_safe(ni, tmp, ...).
CVE-2026-89708Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown After a DESTROY_SESSION the per-session teardown path can free a session while rpciod still hol…
CVE-2026-89703Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations nfsd4_drop_revoked_stid() handles FREE_STATEID for admin-revoked delegations but does not set SC_STA…
CVE-2026-89702Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_verify_err tracepoints declare the server sockaddr slot sized by xpt_remotelen b…
CVE-2026-89689Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very slot it is currently processing.
CVE-2026-89688Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_seqid_op() the stateid is obtained from nfsd4_lookup_stateid(), which holds a ref…
CVE-2026-89686Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_layout_stateid reads fp->fi_deleg_file without holding fi_lock when the parent sta…
CVE-2026-89681Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT_PENDING before the callback is invoked, so delayed_work_pending() in lm_breaker…
CVE-2026-89677Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can hypothetically provide a different dentry than the one passed in.
CVE-2026-89676Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy_state() before dup_copy_fields(), so the s2s_cp_stateids I…
CVE-2026-89675Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardown caller (OFFLOAD_CANCEL, nfsd4_shutdown_copy, nfsd4_cance…
CVE-2026-89674Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calculation in nfsd4_ff_encode_layoutget() has multiple errors that can result in eithe…
CVE-2026-89669Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initializing the cpntf state after nfs4_alloc_init_cpntf_state() had already linke…
CVE-2026-89662Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() releases a client's open owners, but a lock owner whose only reference is a blocked loc…
CVE-2026-89660Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4_client; a stateid reference does not pin it.
CVE-2026-89659Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a bare pointer to its owning nfs4_client and does not keep it alive.
CVE-2026-89658Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admin_revoked() takes a stateid reference under clp->cl_lock, drops nn->client_lock…
CVE-2026-89656Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the d…
CVE-2026-89655Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_entry() iterates ci->i_cap_flush_list but drops i_ceph_lock to send cap messages.
CVE-2026-89654Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sessions[] and for each active session drops mdsc->mutex to perform per-se…
CVE-2026-89653Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are monitor controlled.
CVE-2026-89652Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied name into the caller's NAME_MAX-sized buffer with memcpy(name, rinfo…
CVE-2026-89651Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decodes the MDSCapAuth records carried by a CEPH_SESSION_OPEN message (msg_version >=…
CVE-2026-89643Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used for both netlink deletion templates and internal fsnotify autoremove.
CVE-2026-89637Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 When a valid primary TRANSACT2 response has been received (mid->resp_buf set, mid-…
CVE-2026-89636Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() When free_tgts() frees all structures in ce->tlist, ce->tgthint is left pointing to one of the freed cache_dfs_tgt structur…
CVE-2026-89635Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbd_reopen_durable_fd() walks the inode's m_op_list and rebinds every detached oplock to the rec…
CVE-2026-89633Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes data pointers directly from server-supplied DataOffset fields with no…
CVE-2026-89614Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol->lcn_empty_bits_per_page is sized from vol->nr_clusters at mount, but ntfs_cluster_alloc() bounds its scan of…
CVE-2026-89613Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size.
CVE-2026-89612Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parse_ntfs_boot_sector() decoded th…
CVE-2026-89611Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs_attr_update_meta() shifts the attribute name when converting between non-sparse and sparse attributes.
CVE-2026-89610Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends be…
CVE-2026-89558Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in raid10_sync_request() Commit fe6a19d40ceb ("md/md-bitmap: merge md_bitmap_start_sync() into bitmap_operations") converted…
CVE-2026-89555Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_multipath_hash() to choose a nexthop when an MPLS route has multiple nexthops.
CVE-2026-89551Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `len` bytes from the tail of an xdr_buf by walking the tail, pages, and head iovecs.
CVE-2026-89550Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validates only an upper bound on the wire-supplied opaque length before handing the buff…
CVE-2026-89546Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a request while the NFS callback service is being torn down.
CVE-2026-89542Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at…
CVE-2026-89541Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() validates the RPCSEC_GSS opaque length with offset = (u8 *)(p) - (u8 *)head->iov_base; …
CVE-2026-89538Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() sets buf->len to a logical length, which can be much smaller than head[0].iov_len (the al…
CVE-2026-89536Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs_tls_handshake_done() a reference to the lower transport before submitting the h…
CVE-2026-89533Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() walks a Read chunk's segment list to build a sub-range starting at byte offset and spannin…
CVE-2026-89530Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a Write list…
CVE-2026-89526Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed ch…
CVE-2026-89495Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_handler Patch series "ocfs2/dlm: bound peer-controlled lengths in the o2dlm".
CVE-2026-89494Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm_mig_lockres_handler A node receiving a DLM_MIG_LOCKRES message trusts several fields of the peer-supplied dlm_migratable_lockres without v…
CVE-2026-89492Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check the ECC and signature of an indexed-direct…
CVE-2026-89485Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file lock-drop nlm_traverse_files() pins the current file with f_count++ across a mutex_unlock for nlm_inspect_file(), but nothin…
CVE-2026-89482Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Commit 25e5cb780e62 ("nvme-tcp: fix possible crash in write_zeroes processing") established that bl…
CVE-2026-89479Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp_endpoint_bh_rcv() looks the association up only when chunk->asoc is NULL, and caches the result in ch…
CVE-2026-89478Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed sctp_rcv() resolves the transport once per packet and leaves it in chunk->transport.
CVE-2026-81002Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into an order-0 page and advertises PAGE_SIZE as its frame size.
CVE-2026-80986Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has max_recv_sge == 1 there is no shared v2 receive buffer, and smc_llc_save_add_link_…
CVE-2026-80981Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() smc_llc_srv_add_link() keeps add_llc pointing into the queue entry: add_llc = &qentry->msg.add…
CVE-2026-80980Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smc_connection an…
CVE-2026-80976Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 headers and makes the inner packet the skb network header.
CVE-2026-80926Critical9.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2_oplock_break_noti() reads opinfo->conn without any lock and dereferences it after two allocations which may s…
CVE-2026-89448Critical9.3—2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misc…
CVE-2026-89713Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsd_setattr() checks whether a size update needs NFSD_MAY_TRUNC before it takes inode_lock().
CVE-2026-89697Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry.
CVE-2026-89672Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 sibling: nfsaclsvc_decode_setaclargs() fills in argp->acl_acc…
CVE-2026-89671Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditionally for both ACL_TYPE_ACCESS and ACL_TYPE_DEFAULT, passing argp->acl_access an…
CVE-2026-89650Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/mdsmap.c reads num_export_targets from each per-mds info record and advances the…
CVE-2026-89649Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-supplied xattr blob one attribute at a time.
CVE-2026-89634Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_data() error context loop The check added by commit 7d9a7f1f96cd ("smb/client: fix possible infinite loop and oob read in sy…
CVE-2026-89631Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() bounds its strnlen() over the byte area with the server's ByteCount minus two, which…
CVE-2026-89630Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data_offset bound in is_valid_oplock_break() Commit 83bfbd0bb902 ("cifs: Remove the RFC1002 header from smb_hdr") changed the quantity this boun…
CVE-2026-89537Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads the token ID at ptr[0..1], the flags byte at ptr[2], and padding at ptr…
CVE-2026-89532Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list contains a chunk whose ch_segcount is zero, pcl_for_each_segment computes its inclusive upper…
CVE-2026-80945Critical9.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst wit…
CVE-2026-89729High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature sensor_hub_get_feature() clamps its return value to the caller's buffer size, but the copy loop still…
CVE-2026-89725High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32_rx_done() appends each received CEC byte to rx_msg.msg[] using rx_msg.len as the write index, increme…
CVE-2026-89663High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2s_cp_stateids IDR and on their parent stid's sc_cp_list, pinned by a…
CVE-2026-89626High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() creates one sysfs group for each custom sensor field.
CVE-2026-89601High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construct like: if (IS_SYNC(inode)) { sync_inode_metadata(inode, 1); } el…
CVE-2026-89569High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_security_cfm() looks up a session on session_list and then walks its DLC list without holding rfcomm_m…
CVE-2026-89534High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler() handles RDMA_CM_EVENT_ADDR_CHANGE, it creates a replacement listener cm_id and…
CVE-2026-89513High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-controlled num_events * sizeof(*einfo) in a 32-bit integer.
CVE-2026-89493High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl_used against rl_count in refcount block validator ocfs2_find_refcount_rec_in_rl() walks the on-disk refcount record array with: for (; i < le16_to_c…
CVE-2026-89450High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field tegra241_vintf_init_vsid() programs the guest-provided vSID into SID_MATCH, whose VIRT_SID field spans…
CVE-2026-89445High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_IOPF borrows an attach handle from group->pasid_array without synchronizing against PASID detach, th…
CVE-2026-80989High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet_connected_work() undoes its own work and returns without clearing login_…
CVE-2026-80937High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915_mcu_get_eeprom() copies a fixed EFUSE block into the driver's dev->mt76.eeprom.data buff…
CVE-2026-80935High8.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996_mcu_get_eeprom() derives the destination of the EFUSE/EXT block copy from the address re…
CVE-2026-80921High8.8—2026-09-09In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie…
CVE-2026-80914High8.8—2026-09-09In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready iso_conn_ready() looks up the BIS listener socket with iso_get_sock(), which takes a reference, a…
CVE-2026-89744High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for_each_child_node() When iterate over children of a fwnode that has a secondary fwnode, fwnode_get_next_child_node() can e…
CVE-2026-89615High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record The copy_lcns loop and the redo shorten loop index page_lcns[] at j + i, where i runs up to the log record's lcns_fol…
CVE-2026-89599High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() registers the display before initializing ddata->lock.
CVE-2026-89588High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm header with (err + 1), the remaining…
CVE-2026-89560High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name…
CVE-2026-89504High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_get_regulator_dt_data(), of_get_child_by_name() acquires a …
CVE-2026-89471High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd-charger: bound the EC-reported port count cros_usbpd_charger_probe() reads two port counts from the EC and uses one of them, num_charger_ports…
CVE-2026-89470High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS Currently the cros_usbpd-charger driver probe iterates based on raw charger port count returned by th…
CVE-2026-89469High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727_release_irq() lp8727_isr_func(), the threaded IRQ handler, is the only caller that arms pchg->work via schedule_delay…
CVE-2026-89465High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr_rdy_work, max_charging_time_work and batt_presence_work.
CVE-2026-89452High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-managed IOMMU object to qcom_iommu_devices before adding the IOMMU sysfs device and…
CVE-2026-81017High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor number (in->sensor_num).
CVE-2026-81012High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_string_from_buffer() clamps the converted string length against the destination buff…
CVE-2026-81004High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run.
CVE-2026-80967High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() before initializing mgr->lock, even though the threaded handle…
CVE-2026-80953High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() requests the IRQ and unmasks REG_IRQ_PENDING_CMDR before the controller's IBI sta…
CVE-2026-80932High8.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtio_vsock_remove() stops the virtqueues and then flushes each work item before freeing the enclosing virtio_vsock.
CVE-2026-80753High8.4—2026-09-03In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text.
CVE-2026-89711High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check The header for commit e75b23f9e323 ("nfsd: check d_can_lookup in fh_verify of directories") details the assumption…
CVE-2026-89665High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdr_decode_sattr(): iap->ia_atime.tv…
CVE-2026-89632High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() reparse_buf_ptr() reads buf->ReparseDataLength before checking that count covers the full fix…
CVE-2026-89586High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata_scsi_write_same_xlat() translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA…
CVE-2026-89554High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_token_join_cookie_init_state() restores remote_nonce, local_nonce, backup, join_id, token and…
CVE-2026-80985High8.2—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys() read the part of a v2 message that does not…
CVE-2026-89709High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init() and cleared by nfsd_lockd_shutdown() with plain stores, while lockd dereference…
CVE-2026-89682High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net nfsd_file_dispose_list_delayed() defers fput() to nfsd service threads via a per-net freeme queue…
CVE-2026-89667High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsd_file from the rhashtable…
CVE-2026-89583High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_service_data() walks the advertising data for a Service Data field with a matching UUID.
CVE-2026-89547High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation __svc_create() initializes three per-pool percpu_counter stats and ignores every return value.
CVE-2026-89535High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma->sc_cm_id->device before teardown, then calls rdma_destroy_id(sc_cm_id) which f…
CVE-2026-89524High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl_cfg80211_connect_event() subtracts fixed IE offsets from assoc_req_len (-= 4) and…
CVE-2026-81003High8.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a socket from iucv_sk_list by matching four 8-byte name fields in the transport head…
CVE-2026-89771High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers trace_buffer subbuf_size is read lockless in ring_buffer_read_page() and ring_buffer_read_start(), while it…
CVE-2026-89767High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mismatch path ovl_create_real() releases the new dentry twice when the casefold consistency check fails.
CVE-2026-89764High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently.
CVE-2026-89763High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted_tpm_exit() drops the TPM chip reference and frees the digest array before unregistering the trusted key type.
CVE-2026-89762High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin_current_label_crit_section() AppArmor's begin_current_label_crit_section() is a scary function called from lots of LSM hooks (in p…
CVE-2026-89761High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa_vec_unique() null terminates at vec[n - dups] when VEC_FLAG_TERMINATE is passed.
CVE-2026-89760High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm, swap: don't free a hibernation slot that is in the swap cache A slot with a folio in the swap cache is freed when the folio leaves the cache, not when its count drop…
CVE-2026-89758High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3.
CVE-2026-89755High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing swapcache __migrate_device_pages() reads the folio mapping before calling folio_free_swap().
CVE-2026-89754High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() If ->pmd_entry() sets walk->action = ACTION_AGAIN, the pmd_none() check is retried.
CVE-2026-89750High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Clear copied tracing state before fork duplication dup_task_struct() copies user_event_mm from the parent into the child, without grabbing a referen…
CVE-2026-89748High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simple_ring_buffer_swap_reader_page() starts with retry set to 8 and post-decrements it only after a fail…
CVE-2026-89747High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change Writing to buffer_subbuf_size_kb calls ring_buffer_subbuf_order_set(), which frees every sub-bu…
CVE-2026-89746High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first…
CVE-2026-89742High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: rapidio: mport_cdev: fix use-after-free in dma_req_free() dma_req_free() acquires buf_mutex through req->map, drops the mapping reference with kref_put(), and then deref…
CVE-2026-89741High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in __video_register_device()" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a.
CVE-2026-89738High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode (board.vbus_pin && board.vbus_polled), probe arms a self-restarting cycle: at…
CVE-2026-89736High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix use-after-free on sound card disconnect g_audio_cleanup() invokes snd_card_free_when_closed() to initiate sound card teardown and immediately f…
CVE-2026-89733High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() In uvc_function_bind() error path, we use usb_ep_free_request which uses uvc->co…
CVE-2026-89724High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: media: vicodec: fix out-of-bounds write in FWHT encoder vidioc_s_fmt_vid_out() sizes the encoder CAPTURE buffer from the compressed descriptor pixfmt_fwht, whose sizeima…
CVE-2026-89723High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in nilfs_direct_propagat…
CVE-2026-89690High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit walks every in-flight svc_rqst under rcu_read_lock and, for NFSv4 requests, reads o…
CVE-2026-89670High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (filecache.c:296), and nfsd_file_slab is created without SLAB_TYPESAFE_BY_RCU (KMEM_…
CVE-2026-89668High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init() runs before nfsd4_init_slabs() in init_nfsd().
CVE-2026-89646High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a wrbuffer claim on each newly dirtied folio: it bumps i_wrbuffer_ref (taking an i…
CVE-2026-89641High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() When the else branch of cifs_file_set_size() finds a writable file handle via find_writable_file(), it…
CVE-2026-89638High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips th…
CVE-2026-89624High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universal_pidff_probe() starts the device with hid_hw_start() and then, if force-feedback initialisa…
CVE-2026-89622High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_smbus_read() stores the caller-supplied buffer pointer in mcp->rxbuf for the duration of a transfer…
CVE-2026-89620High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy write_cmd_to_txdma() builds an output report in qsdev->report_buf, a heap buffer allocated in quicks…
CVE-2026-89619High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quickspi_hid_raw_request() receives the caller's buffer length in len, but quickspi_ge…
CVE-2026-89617High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR_PAGE_ENTRY ends in a page_lcns[] array whose length is the on-disk lcns_follow field.
CVE-2026-89609High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() drops queued messages from a dying daemon without holding ecryptfs_msg_ctx_lists_m…
CVE-2026-89607High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet parse_tag_3_packet() set encrypted_key_size from the Tag 3 packet body without bounding it against EC…
CVE-2026-89606High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filenam…
CVE-2026-89605High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the requ…
CVE-2026-89602High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only after every global buffer has been grown.
CVE-2026-89600High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content() builds its file_range on the triggering task's stack.
CVE-2026-89597High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers the v86d connector callback before registering the platform driver.
CVE-2026-89594High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsi_alloc_controller()…
CVE-2026-89587High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in query_capability() query_capability() copies four ACPI buffer objects returned by the firmware _DSM into fixed-size u8[16]…
CVE-2026-89585High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before charlcd_register() calls misc_re…
CVE-2026-89584High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a…
CVE-2026-89581High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but th…
CVE-2026-89580High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returns a per-CPU perf_callchain_entry buffer and releases its recursion slot via put_callchain_entry() b…
CVE-2026-89579High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_map_alloc() has two 32-bit-specific problems when the computed bitmap reaches the U32_MAX fallback c…
CVE-2026-89574High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() validates blocknr and csum and nothing else, while node_check(), next to it, has bounded the structura…
CVE-2026-89573High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array_block_check() can only compare the header against itself, so a block with value_size 4 and max…
CVE-2026-89570High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the…
CVE-2026-89564High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk association installed by bpf_sk_assign() so that local delivery can use th…
CVE-2026-89563High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() ip6_tnl_xmit() may need to expand headroom before it can push the outer IPv6 and optional encap headers.
CVE-2026-89562High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnels ip6gre_tnl_link_config_route() accumulates the lower device's hardware header length into dev->hard_header_len whene…
CVE-2026-89559High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() The on-media namespace index field nslot is a u32 read from the DIMM label storage area.
CVE-2026-89557High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_1_load() In super_1_load(), sb->bblog_shift is an __u8 type value loaded from on- disk superblock.
CVE-2026-89553High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem clos…
CVE-2026-89548High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_destroy_cache_detail() only cancels the global cache_cleaner delayed_work when cache_list is e…
CVE-2026-89545High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period svc_rqst_free() frees rqstp->rq_argp and rqstp->rq_resp synchronously via kfree(), but defers the rqs…
CVE-2026-89540High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_entry() publishes /proc/net/rpc/use-gss-proxy via proc_create_data() before init_gssp_clnt(…
CVE-2026-89523High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss da…
CVE-2026-89522High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on probe error path isys_register_devices() registers the V4L2 async notifier via isys_notifier_init().
CVE-2026-89520High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick_next_task() operates on all sibling rqs under one acquisition of the shared core-w…
CVE-2026-89510High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_change() queues reg_work to register the RDMA device.
CVE-2026-89508High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma_event_handler() straight from the write() path, without the handler lock that keeps ctx->…
CVE-2026-89507High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event() ctx->file may only be changed under the handler lock and the xa_lock, which is what stops uevents being queued for a…
CVE-2026-89503High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set, it can allocate a reader…
CVE-2026-89501High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf Because, ring_buffer_subbuf_order_set() can clear cpu_buffer->free_page, hold cpu_buffer->lock to prevent races…
CVE-2026-89500High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuf_order fo…
CVE-2026-89499High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can return -EBUSY when the writer moves the head before the remote catch…
CVE-2026-89497High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepare_cdm_array() sizes each client debug keyword buffer with strcspn(cds_head, " "), but then…
CVE-2026-89489High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall sys_or1k_atomic() (syscall 244 in the "or1k" ABI) takes two user pointers, v1 and v2, and swaps the…
CVE-2026-89488High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, while netns teardown frees that state under ovs_mutex.
CVE-2026-89487High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb_tx_error() a packet we are about to drop queue_userspace_packet() borrows the packet skb -- it only copies it into a private netlink message (user_…
CVE-2026-89486High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() Commit 9e91f8a6c868 ("ipmi:msghandler: Remove srcu for the ipmi_interfaces list") dropped the synchronize_rc…
CVE-2026-89472High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger_manager_remove() and the err_reg_extcon probe error path free each charger regulator wi…
CVE-2026-89442High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates the user-supplied socket_id with 'socket_id > topology_max_packages()', but iss…
CVE-2026-89441High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddet_work al…
CVE-2026-89440High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD card-detect interrupt and the probe enables it before mmc_add_host() runs.
CVE-2026-89436High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] acpi_pcc_retrieve_biosdata() rejects SINF packages only when pcc->num_sifr is strictly less than hkey…
CVE-2026-81015High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() registers the LPS0 s2idle handler with acpi_register_lps0_dev() and creates the driv…
CVE-2026-81010High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback task_work path when task_work_add() can no longer queue work to the originating…
CVE-2026-81008High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_index() and icc_get(), if the dynamic allocation for path->name fails via kaspri…
CVE-2026-81006High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file.
CVE-2026-81001High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and takes no reference on them.
CVE-2026-81000High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear.
CVE-2026-80995High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup() uses rt->dev without holding a reference on it.
CVE-2026-80994High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow->mask free is scheduled via RCU right after it is removed…
CVE-2026-80992High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer.
CVE-2026-80991High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_interrupt() can race with ravb_ptp_stop() and pass the clock to ptp_clock_event() while ptp_clock_unregister() is freein…
CVE-2026-80982High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_release() smc_rx_splice() hands RMB pages to a pipe and takes a socket reference per entry so the smc_sock stays alive unt…
CVE-2026-80979High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smc_conn_free() calls smc_ism_unset_conn() only while the link group is still on its device list, and n…
CVE-2026-80978High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed_headroom from lower output devices.
CVE-2026-80977High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb_tx_error() skb_tx_error() completes the zerocopy uarg and clears SKBFL_ALL_ZEROCOPY, and skb_zcopy_downgrade_manage…
CVE-2026-80975High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER…
CVE-2026-80971High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_related_resources() frees both URBs and leaves the pointers behind: usb_kill_urb(bcd2k->midi_out_u…
CVE-2026-80962High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache_info cache_segs_init() iterates cache_info->n_segs times indexing cache->segments[], which is sized to the cache d…
CVE-2026-80961High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment bounds Two more fields decoded from the cache device go unbounded.
CVE-2026-80959High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from the cache device and addresses within the…
CVE-2026-80955High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay, when key->seg_gen is stale (key->seg_gen < key->cache_pos.cache_seg->gen), cach…
CVE-2026-80954High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_device_get_supported_xfer_mode() uses dev->desc to obtain the master controller.
CVE-2026-80952High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_devs() clears i3cdev->dev->desc before calling device_unregister().
CVE-2026-80950High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data.
CVE-2026-80947High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from the RX completion path: rtl8xxxu_rx_complete() hands the URB to rtl8xxxu_queue_rx_…
CVE-2026-80944High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller-provided data buffer in cmd_node->data_buf.
CVE-2026-80936High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_pm_work on stop mt7925 queues mlo_pm_work with a 5 second delay during multi-link power-save setup and never cancels it on the stop path.
CVE-2026-80933High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length.
CVE-2026-80931High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1_f19_i2c_master_transfer() is the master_xfer for the DS28E17 1-Wire to I2C bridge.
CVE-2026-80929High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is global, and kill_cad_pid() is only used in the root namespace.
CVE-2026-80928High7.8—2026-09-11In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the credentials of another task, objective credentials (->real_cred, accessed with __task_cred()) must…
CVE-2026-64381High7.8—2026-07-25In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_buffer before checking whether the number of compound PDUs…
CVE-2026-89743High7.7—2026-09-11In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response length nsm_sendrecv_msg_locked() stores the virtqueue used-ring length reported by the NSM device into msg->resp.len withou…
CVE-2026-89720High7.7—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifs_sb_verify_signature() bounds the on-disk ubifs_sig_node->len field before handing the signature payload to…
CVE-2026-89466High7.7—2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: terminate the strings from firmware The qcom_battmgr_sc8280xp_strcpy() takes a Pascal-style string when the firmware sends one.
CVE-2026-81016High7.7—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() discards the return value of several S2D SMU commands.
CVE-2026-80943High7.6—2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tx_fill_desc() uses ieee80211_get_tid() to read the QoS TID from the 802.11 header and then uses it…
CVE-2026-89707High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfsd_cross_mnt() initializes a local struct path with mntget() and dget() before calling follow_down().
CVE-2026-89706High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn->writeverf at request time and reports it to the client via CB_OFFLOAD after the worker…
CVE-2026-89704High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_range() samples dst->f_wb_err into "since" after the copy loop, then uses it to detect writeba…
CVE-2026-89699High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() accepts an unbounded cr_datalen from the wire for NF4LNK symlink targets, allowing a client to…
CVE-2026-89696High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG_NFSD_V4_2_INTER_SSC is enabled, nfsd4_putfh() can return success with fh_dentry and fh_e…
CVE-2026-89695High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4_decode_posixacl() reads a u32 entry count off the wire and passes it straight to posix_acl_alloc() and sort_pa…
CVE-2026-89692High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue nfsd_break_one_deleg() sets NFSD4_CALLBACK_RUNNING via test_and_set_bit at entry to serialize recall work…
CVE-2026-89687High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permitted to return success without actually opening the file.
CVE-2026-89685High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming() clients_still_reclaiming() computes a deadline from nn->boot_time (CLOCK_REALTIME, ~1.7 billion) but compar…
CVE-2026-89684High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state() published the new cpntf entry into the s2s_cp_stateids IDR (with cs_type set) in one s2s…
CVE-2026-89680High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns nfserr_offload_denied directly, bypassing the out: l…
CVE-2026-89679High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR request includes FATTR4_WORD2_TIME_DELEG_ACCESS or FATTR4_WORD2_TIME_DELEG_MODIFY in…
CVE-2026-89678High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list of write segments and, after each vfs_iocb_iter_write(), tries to detect a short…
CVE-2026-89664High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd4_decode_fattr4(), which allocates refcounted struct posix_acl objects via posix…
CVE-2026-89657High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_read() validates that the sparse-read data length matches the summed extent leng…
CVE-2026-89648High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decodes interval sets of delegated inode numbers from an MDS create-with-delegation re…
CVE-2026-89647High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() re-queues itself for as long as ceph_trim_dentries() returns -EAGAIN, which happ…
CVE-2026-89616High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() ni_read_frame() decompresses an LZNT $DATA frame into the vmapped target pages and then trusts deco…
CVE-2026-89561High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl_srh_rcv() dereferences idev from __in6_dev_get() without a NULL check when reading idev->cnf.rpl_s…
CVE-2026-89549High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() spreads the requested threads evenly across the service's pools (base = nrservs / sv_nrpool…
CVE-2026-89544High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller, a re…
CVE-2026-89528High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sending multip…
CVE-2026-89511High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuatio…
CVE-2026-89483High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup_discard() always maps sizeof(struct nvme_dsm_range) * NVME_DSM_MAX_RANGES = 4096 bytes as the DSM payload however many ra…
CVE-2026-89481High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does not check the direction of the request the R2T refers to.
CVE-2026-89480High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme_tcp_recv_data() completes a request once the current C2HData PDU has been consumed.
CVE-2026-89477High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp_process_strreset_outreq(), sctp_process_strreset_addstrm_out() and sctp_process_strreset_resp() complete a p…
CVE-2026-89476High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream->outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter.
CVE-2026-80998High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr->kick…
CVE-2026-80997High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionally stops the TX queue before calling pm_runtime_get(), relying on the wake schedu…
CVE-2026-80987High7.5—2026-09-11In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buffer by calling tx_handler() with a NULL data pointer and returning success.
CVE-2026-80924High7.5—2026-09-09In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly deri…
CVE-2026-89769High7.4—2026-09-11In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path When cpuhp_setup_state fails after pit_clockevent_per_cpu_init has successfully called request_…
CVE-2026-89521High7.3—2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq lock Core scheduling's pick_next_task() breaks when a ->pick_task() implementation can release the rq lock.
CVE-2026-89731High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read cxl_rch_get_aer_info() copies the RCH Downstream Port AER capability from the RCRB MMIO block using a…
CVE-2026-89705High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_status_counter to an odd value once a request has been decoded, and bac…
CVE-2026-89691High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4_release_compoundargs() resets args->ops to the inline iops[8] array when the dynamically-allocated op…
CVE-2026-89640High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 With len == 0 (clone to EOF), the effective length is computed as: len = src_inode->i_size - off…
CVE-2026-89639High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC cifs_do_truncate() is invoked from cifs_open() without i_rwsem, so it cannot use cifs_resize_file_loc…
CVE-2026-89608High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into the file header, but it calculates the remaining packet buffer size f…
CVE-2026-89596High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv_suspend() and nv_resume() walk the non-PCI configuration space with for (i = 0; i <= np->regist…
CVE-2026-89593High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __unmap_hugepage_range can adjust reservations.
CVE-2026-89571High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmd_rpc() copies cmd->in_len bytes into inbuf = kvzalloc(cmd->in_len) and passes inbuf and in_len to…
CVE-2026-89443High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the user-provided level as an index into perf_l…
CVE-2026-81011High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count.
CVE-2026-81007High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the length byte.
CVE-2026-80958High7.1—2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the writeback worker and the GC worker bounds its length by PCACHE_S…
CVE-2026-89459High7.0—2026-09-11In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIY_PERCPU() with older binutils Commit a737737cdb9c ("s390/percpu: Infrastructure for more efficient this_cpu operations") introduced MVIY_PERCPU(), w…
CVE-2026-89456High7.0—2026-09-11In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_postaction() copies the timing and device state from the finished ERP request back to…
CVE-2026-64376Medium5.5—2026-07-25In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device reference leak in firmware_upload_register() firmware_upload_register() -> fw_create_instance() -> device_initialize() After fw_creat…
CVE-2026-64369Medium5.5—2026-07-25In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligned addresses and may cross page boundaries.
CVE-2026-64373Medium4.7—2026-07-25In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq_suspend() is called via the kernel_restart() -> device_shutdown() path.
CVE-2026-89773———2026-09-11In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm_stream_ctx that should skip configuring HDCP routine.
CVE-2026-89772———2026-09-11In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb ("btrfs: unify folio dirty flag clearing") replaced the folio_clear_dirty_for_io() call in extent_w…
CVE-2026-89770———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fs_bio_integrity_alloc might not allocate a bio integrity payload if PI verification is disabled on the block devi…
CVE-2026-89768———2026-09-11In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing_file_open() derives the path to be stored in the new backing file from user_file->f_path.
CVE-2026-89766———2026-09-11In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace ioctl The PIDFD_GET_*_NAMESPACE ioctls in pidfd_ioctl() perform a filesystem credentials ptrace access check before handing…
CVE-2026-89765———2026-09-11In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct __kernel_old_timeval contains a four-byte hole after tv_usec because tv_sec is…
CVE-2026-89759———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid soft lockup when scanning task", v3.
CVE-2026-89757———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sort_folio() has a shortcut for moving folios that are no longer evictable but are still sitting on a gener…
CVE-2026-89756———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() migrate_pages_batch() unmaps each folio before moving it, and every unmap runs the mmu_notifier in…
CVE-2026-89753———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() I am seeing some rcu_tasks stalls in the Meta fleet during reclaim.
CVE-2026-89752———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or…
CVE-2026-89751———2026-09-11In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASK(BITS_PER_BYTE * size, 0); GENMASK(h, l…
CVE-2026-89749———2026-09-11In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run() and unconditionally passes the returned task_struct pointer to kthread_stop().
CVE-2026-89745———2026-09-11In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap_prepare Commit 651fdda8406d ("relay: update relay to use mmap_prepare") changed the `mmap` file operation to `mmap_prepare` for rela…
CVE-2026-89740———2026-09-11In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime imx_uart_probe() publishes its devm-allocated port in imx_uart_ports[] before uart_add_one_port() because console setup…
CVE-2026-89739———2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition In dwc3_gadget_init_endpoint, &dep->nostream_work is bound with dwc3_nostream_w…
CVE-2026-89737———2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbt_altmode_remove() drops the plug and cable references without draining tbt->work.
CVE-2026-89735———2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown f_midi2_alloc_inst() creates default configfs child groups for the default endpoint and default block usin…
CVE-2026-89734———2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() In uvcg_video_init(), if kthread_run_worker() fails, the error logged uses uvcg_err(), however, the p…
CVE-2026-89732———2026-09-11In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent deadlock during ep0 read loop Currently, ffs_ep0_read() holds ffs->mutex when it prepares to go to sleep waiting for an event.
CVE-2026-89730———2026-09-11In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes r…
CVE-2026-89728———2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Fix out-of-bounds access for newdevs mask When software initiates DAA (Dynamic Address Assignment), the controller reports the result via the NRSPQP (Norma…
CVE-2026-89727———2026-09-11In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight to vgic_get_vcpu_irq(), and treats…
CVE-2026-89726———2026-09-11In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", v2.
CVE-2026-89722———2026-09-11In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() pci_write_legacy_io() loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote…
CVE-2026-89721———2026-09-11In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_register The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xf…
CVE-2026-89719———2026-09-11In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in read_block_state() read_block_state() calculates nr_pages before taking dev_lock.
CVE-2026-89718———2026-09-11In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bounds after reinitialization".
CVE-2026-89717———2026-09-11In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram issues reported by sashiko".
CVE-2026-89716———2026-09-11In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlib_deflate_workspacesize(), which triggers BUG_ON() if winbits value…
CVE-2026-89715———2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs_uuid_add_file failure When nfs_uuid_add_file() races with nfs_uuid_put() tearing down uuid->net, it returns -ENXIO without publishing nf…
CVE-2026-89714———2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails nfs4_server_common_setup() allocates server->delegation_hash_table first, but server->destroy -…
CVE-2026-89710———2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path When the server returns a new layout stateid while a valid one is still held, pnfs_layout_proce…
CVE-2026-89701———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths The xdrgen-based TIME_DELEG_ACCESS and TIME_DELEG_MODIFY decode arms store a raw uint32_t nseconds directly into tv_ns…
CVE-2026-89700———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener_set nfsd_sock_nl_policy declares NFSD_A_SOCK_ADDR as a bare NLA_BINARY attribute with no minimum length.
CVE-2026-89698———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage struct nfsd_genl_rqstp declares rq_daddr and rq_saddr as plain "struct sockaddr" (16 bytes).
CVE-2026-89694———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOAD_CANCEL path (clp != NULL), manage_cpntf_state() freed the target cpntf state without ch…
CVE-2026-89693———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in status, but the switch(create->cr_type) b…
CVE-2026-89683———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup nfsd_set_fh_dentry() leaks the dentry reference from exportfs_decode_fh_raw() when the NFS3_FHSIZE or NFS_FH…
CVE-2026-89673———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinfo() computes the da_addr_body reservation as 16 + netid_len + addr_len, but the…
CVE-2026-89666———2026-09-11In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an NFSv3 SETATTR, CREATE, MKDIR, SYMLINK or MKNOD carrying an atime or mtime whose n…
CVE-2026-89661———2026-09-11In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem Writing a filesystem path to /proc/fs/nfsd/unlock_filesystem runs nfsd4_cancel_copy_by_sb() before nfsd_m…
CVE-2026-89645———2026-09-11In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, each fs root gets a reference to its relocation root.
CVE-2026-89644———2026-09-11In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_get_extent(), which returns an extent map reference that must be dropped on all…
CVE-2026-89642———2026-09-11In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() calls truncate_pagecache() but skips pagecache_isize_extended() on extension.
CVE-2026-89629———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size was…
CVE-2026-89628———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd_debug_eeprom_read() trusts resp->raw_data[2] -- a length byte supplied by the device in its RE…
CVE-2026-89627———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot.
CVE-2026-89625———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind For GHL (Guitar Hero Live) dongles, sony_probe() arms a periodic timer: ghl_magic_poke() (the timer callb…
CVE-2026-89623———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hid_hw_stop Quiesce device IO at the start of the devm cleanup callback mcp2221_hid_unregister() so that incoming HID reports cannot…
CVE-2026-89621———2026-09-11In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221_raw_event() mcp2221_raw_event() never validates the size of incoming HID reports.
CVE-2026-89618———2026-09-11In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei->children and ei->list in init_ei() eventfs_create_dir() allocates the eventfs_inode and initializes it with init_ei().
CVE-2026-89604———2026-09-11In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to…
CVE-2026-89598———2026-09-11In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption.
CVE-2026-89595———2026-09-11In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent mark updates When a mark gets a new event bit, fanotify and inotify may avoid recalculating the object mask if the cache…
CVE-2026-89592———2026-09-11In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() rocket_job_push() allocates a temporary array to hold all input and output GEM object pointe…
CVE-2026-89591———2026-09-11In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket_ioctl_submit_job() releases rjob through rocket_job_put() on allocation error paths.
CVE-2026-89590———2026-09-11In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket_job_run() In rocket_job_run(), after taking an extra fence reference for job->done_fence via dma_fence_get(), the error p…
CVE-2026-89589———2026-09-11In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxl_cper_work_lock and cxl_cper_prot_err_wor…
CVE-2026-89582———2026-09-11In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware() frees bp->init_ops, bp->init_data and bp->init_ops_offsets in its error path without set…
CVE-2026-89578———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM_IO_BIO requests, do_region() built each destination bio by walking the source bio's biovec and re-adding…
CVE-2026-89577———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS_NOTSUPP and BLK_STS_INVAL should not cause leg failure on dm-raid1.
CVE-2026-89576———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_take_snap() bumps the live superblock refcount and then dm_tm_shadow_block() allocates a new block for…
CVE-2026-89575———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string() Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value t…
CVE-2026-89572———2026-09-11In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them.
CVE-2026-89568———2026-09-11In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserved_memory_reserve() calculates the size of a preservation by doing 1 << (order + PAGE_SHIFT).
CVE-2026-89567———2026-09-11In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nr_to_scan.
CVE-2026-89566———2026-09-11In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journal_shrink_one_cp_list() skips busy checkpoint buffers when called with JBD2_SHRINK_BUSY_SKIP.
CVE-2026-89565———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect_md mode when metadata_dst allocation fails In collect_md mode ipip_tunnel_rcv() returns 0 without freeing the skb when ip_tun_rx_dst() fail…
CVE-2026-89556———2026-09-11In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elf_validity_cache_sechdrs, section sizes and offsets are validated, unless the section type is SHT_NULL or SHT_NOBITS.
CVE-2026-89552———2026-09-11In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores charp parameters in allocated memory after slab is available, and releases the previous value…
CVE-2026-89543———2026-09-11In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Normal client creation goes through rpc_setup_pipedir(), which records clnt->pipefs_s…
CVE-2026-89539———2026-09-11In the Linux kernel, the following vulnerability has been resolved: SUNRPC: reject duplicate CREDS_VALUE options gssx_dec_option_array() walks the wire-supplied option array and, for every entry whose name matches CREDS_VALUE, calls gssx…
CVE-2026-89531———2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns without action when svc_rdma_create_xprt() fails to allocate the new transport.
CVE-2026-89529———2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject oversized Read segments at decode time The RPC/RDMA Read list decoder stores wire-supplied segment lengths without validation.
CVE-2026-89527———2026-09-11In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on create failure svc_rdma_create() calls kfree(cma_xprt) when svc_rdma_create_listen_id() fails.
CVE-2026-89525———2026-09-11In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings.
CVE-2026-89519———2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return SCX_RQ_BAL_KEEP tells the pick to keep running the previous task, a leftover from when balancing and pi…
CVE-2026-89518———2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix this_rq() assumptions in dispatch kfuncs Under core scheduling, dispatch runs from within the core-wide pick and can target a sibling rq, so ops.dispatch(…
CVE-2026-89517———2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix rq->core_pick corruption under core scheduling Core scheduling's pick_next_task() picks what to run on every SMT sibling of the core in a single pass unde…
CVE-2026-89516———2026-09-11In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users scx_bpf_dsq_reenq() queues a deferred reenq (dru) that runs from run_deferred(), not ops.dispatch…
CVE-2026-89515———2026-09-11In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() During fuzz testing, the following issue was discovered: BUG: KMSAN: uninit-value in __dma_map_sg_attrs+0…
CVE-2026-89514———2026-09-11In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock fnic_fcoe_process_vlan_resp() allocates a VLAN descriptor with kzalloc_obj() (default GFP_KERNEL) while holding…
CVE-2026-89512———2026-09-11In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the…
CVE-2026-89509———2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdma_counter allocation Commit 7e53b31acc7f ("RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj()") requires…
CVE-2026-89506———2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR The original commit missed that three drivers (mthca, irdma, siw) have UHW data associated with reg_mr that cann…
CVE-2026-89505———2026-09-11In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method_elm The legacy write() path dispatches through a uverbs_api_write_method, but the uverbs_attr_bundle passed to provider…
CVE-2026-89502———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with subbuf_order When sub-buffers use an order greater than 0, cpu_buffer->free_page is allocated with subbuf_order.
CVE-2026-89498———2026-09-11In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer_buf on readdir copy failure On a readdir downcall, orangefs_devreq_write_iter() frees op->downcall.trailer_buf with vfree() when cop…
CVE-2026-89496———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94 has found the following memory leak caused by doing 'copy_file_range()' within the same f…
CVE-2026-89491———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() Patch series "ocfs2: cluster: o2hb_region_pin() fixes", v2.
CVE-2026-89490———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2_dir_foreach_blk_el(), the directory cookie position is rebuilt with ctx->pos = (ctx->pos & ~(sb->s_bl…
CVE-2026-89484———2026-09-11In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt_locks_init_private() installs NLM file lock operations even when nlmclnt_find_lockowner() fails to al…
CVE-2026-89475———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove() returns.
CVE-2026-89474———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier queues usb_work, whose handler calls power_supply_changed(bq->charger).
CVE-2026-89473———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe() acquires a reference to a secondary charger using power_supply_get_by_name(), but the referenc…
CVE-2026-89468———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work before unregistering the IRQs.
CVE-2026-89467———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_work when the PMIC GLINK service comes up, and the worker recovers battmgr throug…
CVE-2026-89464———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger: cancel workers via devm bci is devm-allocated.
CVE-2026-89463———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so unbind runs entirely through devm.
CVE-2026-89462———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040_get_soc() ignore errors returned by regmap_read().
CVE-2026-89461———2026-09-11In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040_work() requeues itself after every poll.
CVE-2026-89460———2026-09-11In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- <command>' crashes the kernel when CPUs are hotplug added during that run.
CVE-2026-89458———2026-09-11In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd_int_handler() completes an NRF read of an unallocated ESE track by calling ese_read() and unconditionally…
CVE-2026-89457———2026-09-11In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device->priva…
CVE-2026-89455———2026-09-11In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free of event IRQs during teardown plda_pcie_irq_domain_deinit() removes pcie->event_domain via irq_domain_remove(), but the per-event IRQs mapp…
CVE-2026-89454———2026-09-11In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind t…
CVE-2026-89453———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommu_call_iopf_notifier() looks up the requester with pci_get_domain_bus_and_slot(), which returns a PCI device with…
CVE-2026-89451———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommu_attach_device_pasid() installs the new SVA attach handle in the group PASID lookup before iommu_sva_bin…
CVE-2026-89449———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add iommu_mock_device_add() first calls iommu_fwspec_init(), which on success allocates both…
CVE-2026-89447———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_notify_unmap() skips internal accesses because they do not have an external unmap callback to invoke.
CVE-2026-89446———2026-09-11In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iova_rwsem() takes an object reference and the iova_rwsem write lock before storing the IOAS in the…
CVE-2026-89444———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() populates the security area of the BIOS attribute request buffer with the current…
CVE-2026-89439———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent with other places, add a NULL check for failed socket loading by checking isst_common.sst_inst[].
CVE-2026-89438———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature.
CVE-2026-89437———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for device_mode_info in parse_package() called by sar_get_data() is not freed in som…
CVE-2026-81018———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store ->signature and ->save_signat…
CVE-2026-81014———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and kek_store() strip a trailing newline from the sysfs write before allocating the…
CVE-2026-81013———2026-09-11In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate_password_input() computes length = strlen(buf) and then checks buf[length - 1] to strip a tr…
CVE-2026-81009———2026-09-11In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct_to_user io_handle_query_entry() clamps hdr.size for the inbound copy_from_user() but keeps the original user value as…
CVE-2026-81005———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates new_smi->si_sm and later calls ipmi_register_smi_mod(), which maps to ipmi_add_…
CVE-2026-80999———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and rtl83xx_reset_deassert() are only called from the probe path, which may sleep a…
CVE-2026-80996———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notificati…
CVE-2026-80993———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_caps(), the PCS returned by mac_select_pcs is only checked if NULL but mac_select_…
CVE-2026-80990———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb_xdomain_alloc_in_hopid() passes the wanted HopID to ida_alloc_range() as the lower bound, so a…
CVE-2026-80988———2026-09-11In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: Drop packets when qp link is down") meant to make ntb_transport_tx_enqueue() drop…
CVE-2026-80984———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc_close_stream_wait() calls smc_tx_prepared_sends() from inside its sk_wait_event() conditi…
CVE-2026-80983———2026-09-11In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smc_switch_conns() smc_switch_conns() takes a reference on the SMC socket before dropping lgr->conns_lock, so the connection stays a…
CVE-2026-80974———2026-09-11In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corres…
CVE-2026-80973———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_comm_receiver_handler() forwards a MIDI event using a length byte the device supplies, with no bound an…
CVE-2026-80972———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr->id value is within the proper card index range at probe.
CVE-2026-80970———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_init() allocates its response buffer with kmalloc() and copies the whole buffer back to userspace: …
CVE-2026-80969———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr->id value is within the proper card index range at probe.
CVE-2026-80968———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given…
CVE-2026-80966———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is o…
CVE-2026-80965———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trusts that the given devptr->id value is within the proper card index range at prob…
CVE-2026-80964———2026-09-11In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr->id value is within the proper card index range at probe.
CVE-2026-80963———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))" fails, the code jumps to the "out" label and calls dm_sta…
CVE-2026-80960———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg_num against the cache device size seg_num is read from the crc32c-only superblock, so whoever supplies the cache device on a table load…
CVE-2026-80957———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the on-media last-kset chain by next_cache_seg_id with no cond_resched().
CVE-2026-80956———2026-09-11In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get_cache_segment() scans the segment map up to cache->n_segs, the physical device segment count, but cache_segs_init…
CVE-2026-80951———2026-09-11In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len svc_i3c_master_handle_ibi() reads the IBI payload from the RX FIFO into the IBI slot.
CVE-2026-80949———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some of the error paths in brcmf_sdio_read_control().
CVE-2026-80948———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start(), jumping to out_free_eeprom currently bypasses the out_free_eeprom_blob label.
CVE-2026-80946———2026-09-11In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req->in.h out to the ring in fuse_uring_copy_to_ring() and req->out.h back…
CVE-2026-80942———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory allocated inside rtl92du_init_shared_data() is not freed in any of the subsequent…
CVE-2026-80941———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path…
CVE-2026-80940———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtw_pci_probe() allocates PCI resources through rtw_pci_setup_resource() before it sets up NAPI.
CVE-2026-80939———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an asynchronou…
CVE-2026-80938———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work.
CVE-2026-80934———2026-09-11In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames (MT_TXD7_MAC_TXD, set in mt7996…
CVE-2026-80930———2026-09-11In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change.
CVE-2026-80927———2026-09-11In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the auxiliary clock is disabled during tk_get_aux_ts64() but is enabled before tks->clock_va…
CVE-2026-80925———2026-09-09In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or NETIF_F_HW_VLAN_STAG_TX) on a lower devic…
CVE-2026-80923———2026-09-09In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_register_driver() failure If tty_register_driver() fails, it drops the reference, but fails to set the global dbc_tty_driver to NULL…
CVE-2026-80922———2026-09-09In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed.
CVE-2026-80920———2026-09-09In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when queued from a wakeup handler io_req_local_work_add() signals the CQ ring eventfd inline when it is the one to push the first entry…
CVE-2026-80919———2026-09-09In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format When dumping IB contents from a hung job, amdgpu_devcoredump_format() acquired the VM root PD's r…
CVE-2026-80918———2026-09-09In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by hid_scan_report() on an item with HID_ITEM_TAG_LONG, it stores a pointer to the…
CVE-2026-80917———2026-09-09In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pci_ecam_create() maps eac…
CVE-2026-80916———2026-09-09In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV state corruption on PREEMPT_RT kernels, for the temporary storage used for saving/re…
CVE-2026-80915———2026-09-09In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths.
CVE-2026-80909———2026-09-04In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size.
CVE-2026-80908———2026-09-04In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations.
CVE-2026-80907———2026-09-04In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level.
CVE-2026-80899———2026-09-04In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality.
CVE-2026-80883———2026-09-04In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1x_client_register() function is called just prior to register map initi…
CVE-2026-80785———2026-09-04In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_info() show_mode(), show_modes(), and store_mode() access fb_info->modelist and fb_info->mode without holding lock_fb_inf…
CVE-2026-63839———2026-07-19In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() lwmi_dev_evaluate_int() leaks output.pointer when retval == NULL (found by sashiko.dev [1]).

Google · 339 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87595Critical9.8—2026-09-09Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87544Critical9.8—2026-09-09Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page.
CVE-2026-87534Critical9.8—2026-09-09Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic.
CVE-2026-58822Critical9.8—2026-09-08In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.
CVE-2026-49921Critical9.8—2026-09-08In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.
CVE-2026-28606Critical9.8—2026-09-08In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code.
CVE-2026-87654Critical9.6—2026-09-09Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87650Critical9.6—2026-09-09Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87646Critical9.6—2026-09-09Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87643Critical9.6—2026-09-09Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87638Critical9.6—2026-09-09Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87637Critical9.6—2026-09-09Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87634Critical9.6—2026-09-09Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87621Critical9.6—2026-09-09Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87609Critical9.6—2026-09-09Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic.
CVE-2026-87607Critical9.6—2026-09-09Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87581Critical9.6—2026-09-09Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87558Critical9.6—2026-09-09Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87547Critical9.6—2026-09-09Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87529Critical9.6—2026-09-09Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87528Critical9.6—2026-09-09Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87527Critical9.6—2026-09-09Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87526Critical9.6—2026-09-09Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction.
CVE-2026-87520Critical9.6—2026-09-09Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87512Critical9.6—2026-09-09Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87504Critical9.6—2026-09-09Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension.
CVE-2026-87500Critical9.6—2026-09-09Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87494Critical9.6—2026-09-09Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87492Critical9.6—2026-09-09Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87488Critical9.6—2026-09-09Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87474Critical9.6—2026-09-09Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87470Critical9.6—2026-09-09Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87464Critical9.6—2026-09-09Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87455Critical9.6—2026-09-09Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87448Critical9.6—2026-09-09Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87438Critical9.6—2026-09-09Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-85050Critical9.6—2026-09-03Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-85047Critical9.6—2026-09-03Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-85042Critical9.6—2026-09-03Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-84353Critical9.6—2026-09-02Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-84352Critical9.6—2026-09-02Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-84333Critical9.6—2026-09-02Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-85043Critical9.1—2026-09-03Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic.
CVE-2026-87613Critical9.0—2026-09-09Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic.
CVE-2026-87636High8.8—2026-09-09Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87625High8.8—2026-09-09Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension.
CVE-2026-87617High8.8—2026-09-09Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87612High8.8—2026-09-09Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87588High8.8—2026-09-09Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87587High8.8—2026-09-09Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87585High8.8—2026-09-09Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file.
CVE-2026-87579High8.8—2026-09-09Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87570High8.8—2026-09-09Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file.
CVE-2026-87569High8.8—2026-09-09Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87542High8.8—2026-09-09Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87536High8.8—2026-09-09Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87491High8.8KEV2026-09-09Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87489High8.8—2026-09-09Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension.
CVE-2026-87460High8.8—2026-09-09Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87444High8.8—2026-09-09Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87440High8.8—2026-09-09Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87433High8.8—2026-09-09Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87430High8.8—2026-09-09Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-49882High8.8—2026-09-08In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.
CVE-2026-49879High8.8—2026-09-08In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
CVE-2026-28666High8.8—2026-09-08In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass.
CVE-2026-28618High8.8—2026-09-08In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow.
CVE-2026-28609High8.8—2026-09-08In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting.
CVE-2026-85053High8.8—2026-09-03Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-85051High8.8—2026-09-03Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-85049High8.8—2026-09-03Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87633High8.6—2026-09-09Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction.
CVE-2026-87648High8.3—2026-09-09Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87644High8.3—2026-09-09Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sa…
CVE-2026-87639High8.3—2026-09-09Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87628High8.3—2026-09-09Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic.
CVE-2026-87618High8.3—2026-09-09Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML…
CVE-2026-87616High8.3—2026-09-09Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sa…
CVE-2026-87604High8.3—2026-09-09Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87582High8.3—2026-09-09Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87578High8.3—2026-09-09Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic.
CVE-2026-87572High8.3—2026-09-09Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87553High8.3—2026-09-09Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87524High8.3—2026-09-09Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87510High8.3—2026-09-09Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87506High8.3—2026-09-09Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87487High8.3—2026-09-09Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-87481High8.3—2026-09-09Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87480High8.3—2026-09-09Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87479High8.3—2026-09-09Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the san…
CVE-2026-85048High8.3—2026-09-03Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
CVE-2026-87606High8.1—2026-09-09Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87554High8.1—2026-09-09Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-87537High8.1—2026-09-09Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic.
CVE-2026-87533High8.1—2026-09-09Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-87530High8.1—2026-09-09Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-87514High8.1—2026-09-09Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-87509High8.1—2026-09-09Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-87505High8.1—2026-09-09Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file.
CVE-2026-87499High8.1—2026-09-09Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87471High8.1—2026-09-09Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87467High8.1—2026-09-09Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program.
CVE-2026-87457High8.1—2026-09-09Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
CVE-2026-55277High8.0—2026-09-08In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.
CVE-2026-28662High8.0—2026-09-08In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2026-28659High7.8—2026-09-08In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check.
CVE-2026-58941High7.8—2026-09-08In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.
CVE-2026-58874High7.8—2026-09-08In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.
CVE-2026-58846High7.8—2026-09-08In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.
CVE-2026-58839High7.8—2026-09-08In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.
CVE-2026-58823High7.8—2026-09-08In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.
CVE-2026-58820High7.8—2026-09-08In multiple locations, there is a possible memory safety issue due to integer overflow.
CVE-2026-55294High7.8—2026-09-08In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2026-55285High7.8—2026-09-08In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.
CVE-2026-55273High7.8—2026-09-08In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.
CVE-2026-49932High7.8—2026-09-08In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.
CVE-2026-49927High7.8—2026-09-08In multiple locations, there is a possible out of bounds write due to an integer overflow.
CVE-2026-49919High7.8—2026-09-08In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.
CVE-2026-49918High7.8—2026-09-08In multiple functions, there is a possible out of bounds write due to an integer overflow.
CVE-2026-49887High7.8—2026-09-08In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.
CVE-2026-49884High7.8—2026-09-08In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2026-49881High7.8—2026-09-08In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.
CVE-2026-45531High7.8—2026-09-08In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.
CVE-2026-45520High7.8—2026-09-08In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.
CVE-2026-45515High7.8—2026-09-08In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2026-28668High7.8—2026-09-08In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.
CVE-2026-28664High7.8—2026-09-08In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.
CVE-2026-28663High7.8—2026-09-08In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass.
CVE-2026-28658High7.8—2026-09-08In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.
CVE-2026-28657High7.8—2026-09-08In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.
CVE-2026-28655High7.8—2026-09-08In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code.
CVE-2026-28653High7.8—2026-09-08In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
CVE-2026-28650High7.8—2026-09-08In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code.
CVE-2026-28644High7.8—2026-09-08In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.
CVE-2026-28642High7.8—2026-09-08In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code.
CVE-2026-28639High7.8—2026-09-08In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code.
CVE-2026-28636High7.8—2026-09-08In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.
CVE-2026-28634High7.8—2026-09-08In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code.
CVE-2026-28631High7.8—2026-09-08In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack.
CVE-2026-28624High7.8—2026-09-08In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.
CVE-2026-28620High7.8—2026-09-08In multiple locations, there is a possible unauthorized URI access due to a permissions bypass.
CVE-2026-28616High7.8—2026-09-08In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy.
CVE-2026-28614High7.8—2026-09-08In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy.
CVE-2026-28612High7.8—2026-09-08In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code.
CVE-2026-28611High7.8—2026-09-08In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check.
CVE-2026-28607High7.8—2026-09-08In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy.
CVE-2026-28603High7.8—2026-09-08In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy.
CVE-2026-28602High7.8—2026-09-08In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code.
CVE-2026-28600High7.8—2026-09-08In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy.
CVE-2026-28599High7.8—2026-09-08In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code.
CVE-2026-28594High7.8—2026-09-08In multiple locations, there is a possible use after free due to a logic error in the code.
CVE-2026-28593High7.8—2026-09-08In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.
CVE-2026-28590High7.8—2026-09-08In multiple locations, there is a possible improper encryption key validation due to a logic error in the code.
CVE-2026-28583High7.8—2026-09-08In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code.
CVE-2026-28572High7.8—2026-09-08In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack.
CVE-2026-0084High7.8—2026-09-08In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code.
CVE-2026-0065High7.8—2026-09-08In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code.
CVE-2026-87608High7.5—2026-09-09Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic.
CVE-2026-87601High7.5—2026-09-09Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-87450High7.5—2026-09-09Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension.
CVE-2026-87431High7.5—2026-09-09Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension.
CVE-2026-19201High7.5—2026-09-09An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service (DoS).
CVE-2026-28604High7.5—2026-09-08In multiple locations, there is a possible use after free due to a race condition.
CVE-2026-85045High7.5—2026-09-03Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-45528High7.3—2026-09-08In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.
CVE-2026-28656High7.3—2026-09-08In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.
CVE-2026-28626High7.3—2026-09-08In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection .
CVE-2026-28613High7.3—2026-09-08In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation.
CVE-2026-58848High7.0—2026-09-08In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.
CVE-2026-87631Medium6.5—2026-09-09Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page.
CVE-2026-87629Medium6.5—2026-09-09Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page.
CVE-2026-87627Medium6.5—2026-09-09Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file.
CVE-2026-87626Medium6.5—2026-09-09Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic.
CVE-2026-87623Medium6.5—2026-09-09Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.
CVE-2026-87620Medium6.5—2026-09-09Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87610Medium6.5—2026-09-09Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page.
CVE-2026-87603Medium6.5—2026-09-09Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87600Medium6.5—2026-09-09Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87593Medium6.5—2026-09-09Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87591Medium6.5—2026-09-09Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension.
CVE-2026-87589Medium6.5—2026-09-09Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page.
CVE-2026-87584Medium6.5—2026-09-09Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page.
CVE-2026-87580Medium6.5—2026-09-09Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page.
CVE-2026-87565Medium6.5—2026-09-09Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page.
CVE-2026-87549Medium6.5—2026-09-09Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87545Medium6.5—2026-09-09Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page.
CVE-2026-87541Medium6.5—2026-09-09Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87535Medium6.5—2026-09-09Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87532Medium6.5—2026-09-09Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87522Medium6.5—2026-09-09Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic.
CVE-2026-87519Medium6.5—2026-09-09Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87515Medium6.5—2026-09-09Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87513Medium6.5—2026-09-09Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87503Medium6.5—2026-09-09Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87493Medium6.5—2026-09-09Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87490Medium6.5—2026-09-09Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87483Medium6.5—2026-09-09Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87478Medium6.5—2026-09-09Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87477Medium6.5—2026-09-09Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page.
CVE-2026-87476Medium6.5—2026-09-09Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87475Medium6.5—2026-09-09Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page.
CVE-2026-87473Medium6.5—2026-09-09Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87468Medium6.5—2026-09-09Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page.
CVE-2026-87459Medium6.5—2026-09-09Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87454Medium6.5—2026-09-09Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87447Medium6.5—2026-09-09Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension.
CVE-2026-87446Medium6.5—2026-09-09Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension.
CVE-2026-87443Medium6.5—2026-09-09Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page.
CVE-2026-87441Medium6.5—2026-09-09Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension.
CVE-2026-87437Medium6.5—2026-09-09Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page.
CVE-2026-87436Medium6.5—2026-09-09Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension.
CVE-2026-87429Medium6.5—2026-09-09Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page.
CVE-2026-55256Medium6.5—2026-09-08In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation.
CVE-2026-85044Medium6.5—2026-09-03Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page.
CVE-2026-84327Medium6.5—2026-09-02Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.
CVE-2026-87640Medium6.1—2026-09-09Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87590Medium5.9—2026-09-09Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic.
CVE-2026-87482Medium5.9—2026-09-09Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic.
CVE-2026-87552Medium5.5—2026-09-09Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app.
CVE-2026-49883Medium5.5—2026-09-08In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check.
CVE-2026-28633Medium5.5—2026-09-08In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion.
CVE-2026-28617Medium5.5—2026-09-08In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion.
CVE-2026-28596Medium5.5—2026-09-08In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion.
CVE-2026-28584Medium5.5—2026-09-08In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code.
CVE-2026-87656Medium5.4—2026-09-09Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87655Medium5.4—2026-09-09Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87653Medium5.4—2026-09-09UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87649Medium5.4—2026-09-09UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87645Medium5.4—2026-09-09Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87635Medium5.4—2026-09-09UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87615Medium5.4—2026-09-09Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87599Medium5.4—2026-09-09Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87583Medium5.4—2026-09-09UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87575Medium5.4—2026-09-09Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
CVE-2026-87571Medium5.4—2026-09-09Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic.
CVE-2026-87540Medium5.4—2026-09-09Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87507Medium5.4—2026-09-09UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87501Medium5.4—2026-09-09UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-87496Medium5.4—2026-09-09UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87484Medium5.4—2026-09-09UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87462Medium5.4—2026-09-09UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87458Medium5.4—2026-09-09UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87445Medium5.4—2026-09-09UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.
CVE-2026-84330Medium5.4—2026-09-02UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page.
CVE-2026-87605Medium5.3—2026-09-09Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML pa…
CVE-2026-87594Medium5.3—2026-09-09Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page.
CVE-2026-87566Medium5.3—2026-09-09Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page.
CVE-2026-87523Medium5.3—2026-09-09Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.
CVE-2026-87518Medium5.3—2026-09-09Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.
CVE-2026-87453Medium5.3—2026-09-09Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page.
CVE-2026-87439Medium5.3—2026-09-09Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page.
CVE-2026-87435Medium5.3—2026-09-09Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page.
CVE-2026-87597Medium4.8—2026-09-09UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app.
CVE-2026-87463Medium4.8—2026-09-09Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic.
CVE-2026-87602Medium4.7—2026-09-09Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page.
CVE-2026-87555Medium4.7—2026-09-09Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.
CVE-2026-62139Medium4.3—2026-09-11Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.
CVE-2026-83530Medium4.3—2026-09-09A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be ch…
CVE-2026-87658Medium4.3—2026-09-09Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension.
CVE-2026-87651Medium4.3—2026-09-09Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.
CVE-2026-87642Medium4.3—2026-09-09Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2026-87632Medium4.3—2026-09-09Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87630Medium4.3—2026-09-09Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
CVE-2026-87622Medium4.3—2026-09-09Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87619Medium4.3—2026-09-09Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2026-87598Medium4.3—2026-09-09Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87596Medium4.3—2026-09-09Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87592Medium4.3—2026-09-09Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.
CVE-2026-87586Medium4.3—2026-09-09Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87577Medium4.3—2026-09-09Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page.
CVE-2026-87574Medium4.3—2026-09-09Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.
CVE-2026-87573Medium4.3—2026-09-09Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87568Medium4.3—2026-09-09Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic.
CVE-2026-87567Medium4.3—2026-09-09UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name.
CVE-2026-87564Medium4.3—2026-09-09Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
CVE-2026-87563Medium4.3—2026-09-09Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.
CVE-2026-87562Medium4.3—2026-09-09Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page.
CVE-2026-87561Medium4.3—2026-09-09Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension.
CVE-2026-87560Medium4.3—2026-09-09Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87557Medium4.3—2026-09-09Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page.
CVE-2026-87556Medium4.3—2026-09-09Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87551Medium4.3—2026-09-09Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic.
CVE-2026-87550Medium4.3—2026-09-09Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.
CVE-2026-87548Medium4.3—2026-09-09Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87546Medium4.3—2026-09-09Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file.
CVE-2026-87543Medium4.3—2026-09-09Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-87516Medium4.3—2026-09-09Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2026-87511Medium4.3—2026-09-09Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension.
CVE-2026-87508Medium4.3—2026-09-09Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87497Medium4.3—2026-09-09Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
CVE-2026-87495Medium4.3—2026-09-09Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2026-87469Medium4.3—2026-09-09Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic.
CVE-2026-87466Medium4.3—2026-09-09Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-87461Medium4.3—2026-09-09Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension.
CVE-2026-87449Medium4.3—2026-09-09Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
CVE-2026-45527Medium4.3—2026-09-08In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow.
CVE-2026-28627Medium4.3—2026-09-08In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code.
CVE-2026-87641Medium4.2—2026-09-09Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page.
CVE-2026-87624Medium4.2—2026-09-09UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page.
CVE-2026-87559Medium4.2—2026-09-09UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87538Medium4.2—2026-09-09Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87502Medium4.2—2026-09-09Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page.
CVE-2026-87472Medium4.2—2026-09-09Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page.
CVE-2026-87465Medium4.2—2026-09-09Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page.
CVE-2026-87432Medium4.2—2026-09-09Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page.
CVE-2026-87486Medium4.0—2026-09-09Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app.
CVE-2026-49895Low3.5—2026-09-08In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check.
CVE-2026-87647Low3.4—2026-09-09Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87576Low3.4—2026-09-09Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87456Low3.4—2026-09-09Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
CVE-2026-55290Low3.3—2026-09-08In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check.
CVE-2026-45525Low3.3—2026-09-08In multiple locations, there is a possible improper data sanitization due to a logic error in the code.
CVE-2026-45521Low3.3—2026-09-08In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check.
CVE-2026-45519Low3.3—2026-09-08In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy.
CVE-2026-28671Low3.3—2026-09-08In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition.
CVE-2026-28660Low3.3—2026-09-08In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code.
CVE-2026-28638Low3.3—2026-09-08In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code.
CVE-2026-28630Low3.3—2026-09-08In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack.
CVE-2026-28623Low3.3—2026-09-08In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check.
CVE-2026-28622Low3.3—2026-09-08In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass.
CVE-2026-28582Low3.3—2026-09-08In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check.
CVE-2026-0054Low3.3—2026-09-08In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check.
CVE-2026-87657Low3.1—2026-09-09Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.
CVE-2026-87652Low3.1—2026-09-09Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
CVE-2026-87614Low3.1—2026-09-09Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
CVE-2026-87611Low3.1—2026-09-09Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page.
CVE-2026-87539Low3.1—2026-09-09Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.
CVE-2026-87531Low3.1—2026-09-09Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page.
CVE-2026-87521Low3.1—2026-09-09Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page.
CVE-2026-87517Low3.1—2026-09-09Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page.
CVE-2026-87498Low3.1—2026-09-09Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
CVE-2026-87485Low3.1—2026-09-09Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
CVE-2026-87452Low3.1—2026-09-09Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.
CVE-2026-87451Low3.1—2026-09-09Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page.
CVE-2026-87442Low3.1—2026-09-09Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page.
CVE-2026-87434Low3.1—2026-09-09Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
CVE-2026-28652Low3.1—2026-09-08In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check.
CVE-2026-85052Low3.1—2026-09-03Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
CVE-2026-87525Low2.7—2026-09-09Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program.

N/a · 214 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-51366Critical9.9—2026-08-19SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter
CVE-2026-52630Critical9.8—2026-09-11SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php
CVE-2026-79396Critical9.8—2026-09-11Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing…
CVE-2026-79395Critical9.8—2026-09-11An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass au…
CVE-2026-71644Critical9.8—2026-09-11An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops pub…
CVE-2026-38626Critical9.8—2026-09-10Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.
CVE-2026-71805Critical9.8—2026-09-09An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.
CVE-2026-71801Critical9.8—2026-09-09An issue was discovered in s-pms SPMS-Server through v1.0.
CVE-2026-36433Critical9.8—2026-09-09An issue in Actions Semiconductor Co.
CVE-2026-79570Critical9.8—2026-09-08mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.
CVE-2026-79569Critical9.8—2026-09-08Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.
CVE-2026-79574Critical9.8—2026-09-08An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.
CVE-2026-79577Critical9.8—2026-09-08An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.
CVE-2026-79576Critical9.8—2026-09-08An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password.
CVE-2026-50894Critical9.8—2026-09-04easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and gain server privileges via a crafted file…
CVE-2025-67066Critical9.8—2026-09-04SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path
CVE-2026-79391Critical9.8—2026-09-04No authentication exists in the MQTT service of Trueview 6.0.23.4.
CVE-2026-71625Critical9.8—2026-09-04An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
CVE-2026-71624Critical9.8—2026-09-04An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components
CVE-2026-78745Critical9.8—2026-09-04An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge (ADB) daemon (adbd)
CVE-2026-75430Critical9.8—2026-09-04PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port.
CVE-2026-31020Critical9.8—2026-09-04In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions.
CVE-2026-52111Critical9.8—2026-09-01An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey
CVE-2026-37751Critical9.8—2026-08-28An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input.
CVE-2026-37236Critical9.8—2026-08-28grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.
CVE-2026-75337Critical9.8—2026-08-28The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal.
CVE-2026-37006Critical9.8—2026-08-27A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.
CVE-2026-37003Critical9.8—2026-08-27Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.
CVE-2026-35869Critical9.8—2026-08-27A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.
CVE-2026-35868Critical9.8—2026-08-27A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4.
CVE-2026-75338Critical9.8—2026-08-26disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control.
CVE-2026-52103Critical9.8—2026-08-26A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sen…
CVE-2025-70293Critical9.8—2026-08-26An issue was discovered in Denx U-Boot before 2026.04.
CVE-2025-70290Critical9.8—2026-08-26An issue was discovered in Denx U-Boot before 2026.04.
CVE-2026-75325Critical9.8—2026-08-26DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.
CVE-2023-42179Critical9.8—2026-08-26Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.
CVE-2021-43717Critical9.8—2026-08-18An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6.
CVE-2021-43716Critical9.8—2026-08-18Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20.
CVE-2026-67919Critical9.8—2026-08-17An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components
CVE-2026-38165Critical9.8—2026-08-17A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.
CVE-2026-67868Critical9.8—2026-08-17A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing.
CVE-2026-67967Critical9.8—2026-08-17Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code.
CVE-2026-67917Critical9.8—2026-08-17zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.
CVE-2026-39255Critical9.8—2026-08-17Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dup_wcs components
CVE-2026-39254Critical9.8—2026-08-17Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components
CVE-2026-68004Critical9.8—2026-08-17An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_…
CVE-2026-50775Critical9.8—2026-08-17A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.
CVE-2026-50774Critical9.8—2026-08-17An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.
CVE-2026-50769Critical9.8—2026-08-17The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability.
CVE-2026-52466Critical9.8—2026-08-06Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.
CVE-2026-52102Critical9.8—2026-08-03An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.
CVE-2026-51775Critical9.8—2026-08-03SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component
CVE-2026-51190Critical9.8—2026-08-03The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spawn() with shell: true.
CVE-2026-78997Critical9.3—2026-09-08UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin.
CVE-2026-51106Critical9.3—2026-08-26An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component
CVE-2026-71640Critical9.1—2026-09-10An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline
CVE-2026-68006Critical9.1—2026-09-10An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
CVE-2026-79571Critical9.1—2026-09-08Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel…
CVE-2026-75431Critical9.1—2026-09-04PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication.
CVE-2026-75160Critical9.1—2026-09-04An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi.
CVE-2026-75340Critical9.1—2026-08-26The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).
CVE-2025-51679Critical9.1—2026-08-26An issue was discovered in openRISC OR1200 commit 83ac6b.
CVE-2026-51346Critical9.1—2026-08-17SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.
CVE-2026-79362High8.8—2026-09-11Certain Woltlab products are affected by RCE via Cache Poisoning.
CVE-2026-71808High8.8—2026-09-09A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands via the ${} string concatenation in AdminMapper.java and multiple other Mapper files (including Merc…
CVE-2026-78834High8.8—2026-09-08A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.
CVE-2026-79376High8.8—2026-09-08An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
CVE-2026-79423High8.8—2026-09-04An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request.
CVE-2026-75169High8.8—2026-09-04An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths.
CVE-2026-75166High8.8—2026-09-04Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password.
CVE-2026-75161High8.8—2026-09-04An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility…
CVE-2026-51974High8.8—2026-09-01An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of…
CVE-2026-75339High8.8—2026-08-28The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks.
CVE-2025-56798High8.8—2026-08-26Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy.
CVE-2026-71694High8.8—2026-08-19An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic…
CVE-2026-50768High8.8—2026-08-17File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.
CVE-2026-71614High8.4—2026-09-09An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, descriptorTime_slice_fec_identifier() and gf_m2ts_ipdatagram_reader() components.
CVE-2026-71612High8.4—2026-09-09Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function.
CVE-2026-52491High8.4—2026-08-25An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
CVE-2026-67986High8.4—2026-08-13amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep.
CVE-2026-71809High8.1—2026-09-09Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator.
CVE-2026-78839High8.1—2026-09-04An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.
CVE-2026-50979High8.1—2026-08-28A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter
CVE-2026-52521High8.1—2026-08-03A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.
CVE-2026-79591High7.8—2026-09-10A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index.
CVE-2026-71613High7.8—2026-09-09Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function.
CVE-2026-52489High7.8—2026-08-25Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function
CVE-2026-67846High7.8—2026-08-18Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations.
CVE-2026-67961High7.8—2026-08-17An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
CVE-2026-79394High7.5—2026-09-11An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticate…
CVE-2026-79393High7.5—2026-09-11A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to caus…
CVE-2026-71646High7.5—2026-09-11An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback() in swarm_exploration/exploration_manager/…
CVE-2026-71641High7.5—2026-09-11An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between traj_server, poscmd_2_odom, and the EGOReplanFSM emergency…
CVE-2026-71647High7.5—2026-09-10An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in ego_replan_fsm.cpp
CVE-2026-71645High7.5—2026-09-10An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine
CVE-2026-71643High7.5—2026-09-10An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component
CVE-2025-57231High7.5—2026-09-10Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url.
CVE-2026-79592High7.5—2026-09-10An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets.
CVE-2026-52482High7.5—2026-09-09An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet
CVE-2026-79572High7.5—2026-09-08An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.
CVE-2026-79575High7.5—2026-09-08The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.
CVE-2026-78837High7.5—2026-09-08A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.
CVE-2026-79378High7.5—2026-09-08An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
CVE-2026-79377High7.5—2026-09-08A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
CVE-2026-75438High7.5—2026-09-04Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function
CVE-2026-79390High7.5—2026-09-04Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883.
CVE-2026-71626High7.5—2026-09-04An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components
CVE-2021-44320High7.5—2026-09-04Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks.
CVE-2021-44319High7.5—2026-09-04Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service.
CVE-2026-79407High7.5—2026-08-31A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() in metagpt/ext/spo/utils/load.py.
CVE-2026-38638High7.5—2026-08-28An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-38636High7.5—2026-08-28An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-37736High7.5—2026-08-28An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-38350High7.5—2026-08-28An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
CVE-2026-38349High7.5—2026-08-28An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.
CVE-2026-38348High7.5—2026-08-28An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file.
CVE-2026-38347High7.5—2026-08-28A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-38346High7.5—2026-08-28An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.
CVE-2026-38344High7.5—2026-08-28A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.
CVE-2026-37198High7.5—2026-08-27An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet.
CVE-2026-26456High7.5—2026-08-27A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5.
CVE-2026-75328High7.5—2026-08-26In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:
CVE-2026-75413High7.5—2026-08-26DocSys V2.02.80 is vulnerable to Any File Download.
CVE-2025-61480High7.5—2026-08-26An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers.
CVE-2025-61479High7.5—2026-08-26An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into…
CVE-2025-61478High7.5—2026-08-26An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets.
CVE-2025-51675High7.5—2026-08-26An issue was discovered in openRISC OR1200 commit 83ac6b.
CVE-2026-75465High7.5—2026-08-25The /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue.
CVE-2026-51367High7.5—2026-08-19An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_chat parameter
CVE-2026-52481High7.5—2026-08-18An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function
CVE-2026-67918High7.5—2026-08-17Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint
CVE-2026-68005High7.5—2026-08-17An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function
CVE-2026-50776High7.5—2026-08-17Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code.
CVE-2026-67991High7.5—2026-08-13crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x.
CVE-2026-67865High7.5—2026-08-05S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling.
CVE-2026-67977High7.5—2026-08-03An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-71622High7.4—2026-09-04SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component
CVE-2026-86810High7.3—2026-09-08A vulnerability was detected in Open-Web-Analytics up to 1.9.1.
CVE-2026-86214High7.3—2026-09-06A vulnerability was determined in Mstfakts College-Management-System.
CVE-2026-79426High7.2—2026-09-04An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.
CVE-2026-38710High7.2—2026-07-31TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface.
CVE-2026-78807High7.1—2026-09-11An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c
CVE-2022-35499High7.1—2026-09-04In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.
CVE-2025-29419High7.1—2026-08-26CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.
CVE-2026-52097Medium6.8—2026-09-10An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), OpenFilex.open, localPathRegex (common_patterns.dart) components
CVE-2026-50719Medium6.8—2026-08-19The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification.
CVE-2026-52486Medium6.6—2026-09-08An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module
CVE-2026-79590Medium6.5—2026-09-10A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0.
CVE-2026-38998Medium6.5—2026-09-09A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26) allows attackers to cause a Denial of Service (DoS) via sending a series of crafted RTSP and HT…
CVE-2026-79573Medium6.5—2026-09-08L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters.
CVE-2026-79379Medium6.5—2026-09-08A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.
CVE-2026-78838Medium6.5—2026-09-08A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into…
CVE-2026-78970Medium6.5—2026-09-04JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component.
CVE-2026-75165Medium6.5—2026-09-04An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods (ugw-ping, ugw-traceroute) that are not…
CVE-2026-75164Medium6.5—2026-09-04An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesy…
CVE-2026-75163Medium6.5—2026-09-04An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 returns detailed system version fields (operatingsystem, gatewayversion) to any authenticated us…
CVE-2026-75162Medium6.5—2026-09-04An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any remote authenticated user, including users with the low-privileged Standard role…
CVE-2026-38345Medium6.5—2026-08-28A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-38343Medium6.5—2026-08-28An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.
CVE-2026-37009Medium6.5—2026-08-27A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.
CVE-2025-70340Medium6.5—2026-08-26A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms comments functionality.
CVE-2026-75466Medium6.5—2026-08-26libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader.
CVE-2026-52371Medium6.5—2026-07-31A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.
CVE-2026-50720Medium6.4—2026-08-19The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data.
CVE-2026-86514Medium6.3—2026-09-08A weakness has been identified in vgmstream up to r2117.
CVE-2026-75168Medium6.3—2026-09-04An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/…
CVE-2026-71616Medium6.2—2026-09-09An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object().
CVE-2026-79035Medium6.1—2026-09-11A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL in…
CVE-2026-75308Medium6.1—2026-09-09yshopmall <=3.3 is vulnerable to Cross Site Scripting (XSS).
CVE-2026-75307Medium6.1—2026-09-09zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) via SVG file upload through the /equipmentFile/upload endpoint.
CVE-2026-78742Medium6.1—2026-09-08Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.
CVE-2026-78741Medium6.1—2026-09-08Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.
CVE-2026-78738Medium6.1—2026-09-08Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.
CVE-2026-75170Medium6.1—2026-09-04Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the lang…
CVE-2026-50980Medium6.1—2026-08-28Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record
CVE-2026-37710Medium6.1—2026-08-28Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function
CVE-2022-30983Medium6.1—2026-08-24A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter.
CVE-2026-30250Medium6.1—2026-08-18Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW!
CVE-2026-50771Medium6.1—2026-08-17Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.
CVE-2026-52370Medium6.1—2026-08-04A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.
CVE-2026-52232Medium6.1—2026-07-31A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.
CVE-2026-37171Medium5.9—2026-08-07A lack of tenant separation in SuperTokens Inc.
CVE-2026-39020Medium5.5—2026-09-09An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file
CVE-2025-51619Medium5.5—2026-09-09A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems.
CVE-2026-36392Medium5.4—2026-09-10FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-26962Medium5.4—2026-09-10Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter.
CVE-2026-71803Medium5.4—2026-09-09money-pos 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability.
CVE-2026-71802Medium5.4—2026-09-09A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement preview component of REBUILD 4.4.3.
CVE-2026-52307Medium5.4—2026-09-08An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field.
CVE-2022-26961Medium5.4—2026-09-04Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter.
CVE-2026-38961Medium5.4—2026-09-04Cross-Site Scripting (XSS) vulnerability in the RSS Widget of Netgate pfSense Plus (versions 26.03, 25.11.1) and pfSense CE (version 2.8.1) allows remote authenticated attackers to inject arbitrary JavaScript via malicious content in an RS…
CVE-2026-38725Medium5.4—2026-08-28xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php.
CVE-2026-67990Medium5.4—2026-08-13basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers.
CVE-2026-37067Medium5.3—2026-08-27Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request.
CVE-2021-43718Medium5.3—2026-08-18An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP..
CVE-2025-69904Medium4.9—2026-09-11Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input.
CVE-2026-86271Medium4.7—2026-09-07A vulnerability was found in FluentCMS up to 0.0.5.
CVE-2026-78971Medium4.6—2026-09-08In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.
CVE-2026-67673Medium4.6—2026-08-03A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0.
CVE-2026-71807Medium4.3—2026-09-09In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user.
CVE-2026-79515Medium4.3—2026-09-09An out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via sending a crafted TTF file.
CVE-2026-79387Medium4.3—2026-09-09SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (including passwords and roles) via crafted parameters to the User/mod interface, enabling account ta…
CVE-2026-79588Medium4.3—2026-09-08U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.
CVE-2026-86515Medium4.3—2026-09-08A security vulnerability has been detected in vgmstream up to r2117.
CVE-2026-86289Medium4.3—2026-09-07A vulnerability was found in Ollama up to 0.31.1.
CVE-2026-86285Medium4.3—2026-09-07A vulnerability was detected in BookStack up to 26.05.2.
CVE-2026-86244Medium4.3—2026-09-07A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta.
CVE-2026-86228Medium4.3—2026-09-06A security vulnerability has been detected in JeecgBoot up to 3.9.3.
CVE-2026-86212Medium4.3—2026-09-06A vulnerability has been found in Open5GS 2.7.7/2.8.0.
CVE-2026-71642Medium4.0—2026-09-10An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback()
CVE-2026-79516Medium4.0—2026-09-09An out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via sending a crafted input.
CVE-2026-75421Medium4.0—2026-08-25aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.
CVE-2026-39113Medium4.0—2026-08-25Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11)…
CVE-2026-38093Low3.3—2026-08-28file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation.

Adobe · 174 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82004Critical10.0—2026-09-08Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75650Critical10.0KEV2026-09-07Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48273Critical9.9—2026-09-08ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-19232Critical9.9—2026-09-08Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or…
CVE-2026-76201Critical9.3—2026-09-08Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-76200Critical9.3—2026-09-08Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75746Critical9.1—2026-09-08ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81996High8.8—2026-09-08Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-77111High8.7—2026-09-08Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-76199High8.6—2026-09-08Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-76190High8.6—2026-09-08ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75991High8.6—2026-09-08Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75990High8.6—2026-09-08Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-77774High8.6—2026-09-08Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-77109High8.6—2026-09-08Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-75993High8.5—2026-09-08ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75999High8.4—2026-09-08ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81994High8.2—2026-09-08Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read.
CVE-2026-76202High8.2—2026-09-08Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-76191High8.2—2026-09-08Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81992High7.8—2026-09-08Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81990High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81989High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81988High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81987High7.8—2026-09-08Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81986High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81985High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81983High7.8—2026-09-08Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81981High7.8—2026-09-08Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81980High7.8—2026-09-08Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81979High7.8—2026-09-08Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81976High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81975High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-81973High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-80161High7.8—2026-09-08Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-79909High7.8—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-79908High7.8—2026-09-08Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-79907High7.8—2026-09-08Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-82007High7.8—2026-09-08Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-82006High7.8—2026-09-08Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-82005High7.8—2026-09-08Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75992High7.8—2026-09-08Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75863High7.8—2026-09-08Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75862High7.8—2026-09-08Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75771High7.8—2026-09-08Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-75631High7.8—2026-09-08Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-83959High7.8—2026-09-03Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-71382High7.8—2026-08-25Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-77110High7.6—2026-09-08Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass.
CVE-2026-75998High7.5—2026-09-08ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read.
CVE-2026-77108High7.5—2026-09-08Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-71360High7.5—2026-08-25CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-76196High7.4—2026-09-08Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation.
CVE-2026-83961High7.1—2026-09-03ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation.
CVE-2026-76000Medium6.5—2026-09-08ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-81997Medium6.3—2026-09-08Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-76002Medium6.1—2026-09-08ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability.
CVE-2026-82001Medium5.5—2026-09-08Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-81993Medium5.5—2026-09-08Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-81991Medium5.5—2026-09-08Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-81984Medium5.5—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-81982Medium5.5—2026-09-08Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-81978Medium5.5—2026-09-08Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-81977Medium5.5—2026-09-08Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-80162Medium5.5—2026-09-08Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-80160Medium5.5—2026-09-08Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-79910Medium5.5—2026-09-08Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-71441Medium5.5—2026-08-25Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-79905Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75742Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75741Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75740Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75739Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75738Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75737Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75736Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75735Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75734Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75733Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75731Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75730Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75729Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75727Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75725Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75724Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75722Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75720Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75719Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75718Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75717Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75716Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75715Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75714Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75713Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75712Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75711Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75710Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75709Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75708Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75707Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75706Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75705Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75704Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75702Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75701Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75700Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75696Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75695Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75694Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75693Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75692Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75691Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75690Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75687Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75685Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75683Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75681Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75680Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75679Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75678Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75677Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75675Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75674Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75672Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75671Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75670Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75669Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75668Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75667Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75666Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75661Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75660Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75659Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75657Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75652Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75651Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75647Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75646Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75644Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75643Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75642Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-75640Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75639Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75637Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75636Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75635Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-75629Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-72627Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-72626Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-71565Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-71440Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-71388Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-71357Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-71356Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-27227Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-19713Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-19644Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-19612Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-19479Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2025-64868Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64866Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64854Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64838Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64830Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64618Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64610Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64589Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64588Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64584Medium5.4—2026-09-08Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2025-64542Medium5.4—2026-09-08Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVE-2026-79904Medium5.0—2026-09-08Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass.
CVE-2026-21269Medium4.6—2026-08-11ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-80159Medium4.0—2026-09-08Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation.
CVE-2026-75726Low3.5—2026-09-08Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

Unattributed · 149 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14560Critical10.0—2026-09-11The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary…
CVE-2026-14563Critical9.8—2026-09-11The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenticated action, allowing unauthenticated attackers to log in as…
CVE-2026-9163Critical9.8—2026-09-10Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection.
CVE-2026-61516Critical9.8—2026-09-08Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management i…
CVE-2026-62645Critical9.8—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-86304Critical9.8—2026-09-06MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor.
CVE-2026-86219Critical9.8—2026-09-06Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.
CVE-2026-85148Critical9.8—2026-09-04SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability.
CVE-2026-53552Critical9.6—2026-08-31Goploy is an open-source automation deployment system.
CVE-2026-47187Critical9.3—2026-08-19SSHFS is a network filesystem client for connecting to SSH servers.
CVE-2026-89009Critical9.1—2026-09-11WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the…
CVE-2026-89042Critical9.1—2026-09-10passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses.
CVE-2026-86542Critical9.1—2026-09-07knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory.
CVE-2026-78328Critical9.1—2026-09-04A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.
CVE-2026-52723Critical9.1—2026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record.
CVE-2022-4993Critical9.1—2026-08-13HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation…
CVE-2026-85982Critical9.0—2026-09-08The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel.
CVE-2026-90444High8.8—2026-09-11A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters.
CVE-2026-89176High8.8—2026-09-11WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability.
CVE-2026-86439High8.8—2026-09-07knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory.
CVE-2026-71961High8.8—2026-08-19Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT comm…
CVE-2026-82466High8.7—2026-08-29Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account.
CVE-2026-81822High8.4—2026-09-08The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevati…
CVE-2026-81821High8.4—2026-09-08The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.
CVE-2026-86541High8.3—2026-09-07knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root.
CVE-2026-83527High8.1—2026-09-08An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.
CVE-2026-42807High8.0—2026-09-10A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) or potentially execute arbitrary code.
CVE-2026-44629High7.9—2026-08-28Improper access control to the Synergis Softwire installation folder.
CVE-2026-89066High7.8—2026-09-11Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integ…
CVE-2026-80116High7.8—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to modify hardware configurat…
CVE-2026-80114High7.8—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary ph…
CVE-2026-80112High7.8—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local…
CVE-2026-81302High7.8—2026-09-04PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product.
CVE-2026-89262High7.5—2026-09-11MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields instead of the authenticated principal.
CVE-2026-15667High7.5—2026-09-09The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'event_layout' parameter parameter.
CVE-2026-16025High7.5—2026-09-08Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc.
CVE-2026-86538High7.5—2026-09-07knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files.
CVE-2026-86287High7.5—2026-09-07Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths.
CVE-2026-16028High7.5—2026-09-07Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table.
CVE-2026-19080High7.5—2026-09-04Observable response discrepancy vulnerability in Menulux Software Inc.
CVE-2026-85147High7.5—2026-09-04SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability.
CVE-2026-84382High7.5—2026-09-02HTTPX2 is a next generation HTTP client for Python.
CVE-2026-76640High7.5—2026-08-27Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials…
CVE-2026-62646High7.4—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-50577High7.4—2026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record.
CVE-2026-87922High7.3—2026-09-09A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.
CVE-2026-86292High7.3—2026-09-07A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0.
CVE-2026-86282High7.3—2026-09-07A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132.
CVE-2026-86160High7.3—2026-09-06A vulnerability has been found in SourceCodester Online Voting System 1.0.
CVE-2026-85378High7.3—2026-09-03A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.
CVE-2026-86539High7.2—2026-09-07knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation.
CVE-2026-77233High7.2—2026-09-05The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite in all versions up to, and including, 3.13.4 due to i…
CVE-2026-75123High7.2—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.
CVE-2026-75122High7.2—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi.
CVE-2026-80118High7.1—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users throu…
CVE-2026-80117High7.1—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT…
CVE-2026-19051High7.1—2026-09-04Plaintext storage of a password vulnerability in Menulux Software Inc.
CVE-2026-83545Medium6.8—2026-09-11The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes wh…
CVE-2026-50576Medium6.8—2026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record.
CVE-2026-85981Medium6.7—2026-09-08The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication.
CVE-2026-90447Medium6.5—2026-09-11A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control.
CVE-2026-90445Medium6.5—2026-09-11An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory.
CVE-2026-89261Medium6.5—2026-09-11MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search service without authentication, allowing remote attackers to delete, recreate, or alter the blog search index.
CVE-2026-66632Medium6.5—2026-09-10Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions.
CVE-2026-19859Medium6.5—2026-09-06The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a…
CVE-2026-75793Medium6.5—2026-09-06The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registratio…
CVE-2026-85703Medium6.5—2026-09-04A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
CVE-2026-74236Medium6.5—2026-09-04GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the diagnostic file deletion handler.
CVE-2026-49455Medium6.5—2026-09-03Waku is the minimal React framework.
CVE-2026-84205Medium6.5—2026-09-01GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the path parameter without confirming they reference the same…
CVE-2026-54624Medium6.5—2026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django.
CVE-2026-54622Medium6.5—2026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django.
CVE-2026-15820Medium6.4—2026-09-10The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping.
CVE-2026-8623Medium6.4—2026-09-05The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and includin…
CVE-2026-85084Medium6.3—2026-09-03Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers.
CVE-2020-37268Medium6.3—2026-08-24Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type.
CVE-2026-87733Medium6.2—2026-09-09An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml.
CVE-2026-85630Medium6.1—2026-09-08HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method.
CVE-2026-85485Medium6.1—2026-09-08HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.
CVE-2026-85484Medium6.1—2026-09-08HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping.
CVE-2026-19872Medium6.1—2026-09-08HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message.
CVE-2026-75136Medium6.1—2026-09-02UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt.
CVE-2026-75135Medium6.1—2026-09-02UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn…
CVE-2026-73524Medium6.1—2026-09-01Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header.
CVE-2026-87737Medium5.9—2026-09-09An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml.
CVE-2026-55860Medium5.9—2026-08-28MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java.
CVE-2026-55857Medium5.9—2026-08-28MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.
CVE-2026-55856Medium5.9—2026-08-28MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.
CVE-2026-84380Medium5.6—2026-09-02HTTPX2 is a next generation HTTP client for Python.
CVE-2026-90443Medium5.4—2026-09-11A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach.
CVE-2026-18957Medium5.4—2026-09-04Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc.
CVE-2026-89263Medium5.3—2026-09-11MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users.
CVE-2026-89175Medium5.3—2026-09-11Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability.
CVE-2026-89173Medium5.3—2026-09-11Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability.
CVE-2026-14562Medium5.3—2026-09-11The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attack…
CVE-2026-19733Medium5.3—2026-09-09Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.
CVE-2026-12956Medium5.3—2026-09-09The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the create_item() handler for the /wp-json/eventin/v2/orders REST endpoint.
CVE-2026-81823Medium5.3—2026-09-08The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure.
CVE-2026-86318Medium5.3—2026-09-07A flaw has been found in java-json-tools json-patch up to 1.13.
CVE-2026-86275Medium5.3—2026-09-07A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-85701Medium5.3—2026-09-04A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
CVE-2026-85149Medium5.3—2026-09-04SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability.
CVE-2026-85381Medium5.3—2026-09-04A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.
CVE-2026-84379Medium5.3—2026-09-02HTTPX2 is a next generation HTTP client for Python.
CVE-2026-74235Medium4.9—2026-09-04GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration download handler.
CVE-2026-75126Medium4.9—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi.
CVE-2026-75125Medium4.9—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi.
CVE-2026-86240Medium4.7—2026-09-07A security flaw has been discovered in liufee FeehiCMS up to 2.1.1.
CVE-2026-19861Medium4.7—2026-09-05The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a form field's value before including it in the HTML notification emails it sends, allowing unauthenticated users to inj…
CVE-2026-90446Medium4.3—2026-09-11An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents.
CVE-2026-89265Medium4.3—2026-09-11MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to enforce role-based permissions.
CVE-2026-89264Medium4.3—2026-09-11MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user.
CVE-2026-14566Medium4.3—2026-09-11The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order, allowing any authenticated user such as a subsc…
CVE-2026-15823Medium4.3—2026-09-10The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up to, and including, 3.0.2.
CVE-2026-84062Medium4.3—2026-09-10BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key.
CVE-2026-86241Medium4.3—2026-09-07A weakness has been identified in liufee FeehiCMS up to 2.1.1.
CVE-2026-19081Medium4.3—2026-09-04Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs.
CVE-2026-82309Medium4.3—2026-09-04Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries.
CVE-2026-85392Medium4.3—2026-09-03Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for any user by supplying arbitrary user IDs.
CVE-2026-84113Medium4.1—2026-09-09The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.
CVE-2026-78150Low2.7—2026-09-05The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a dra…
CVE-2026-16172———2026-09-10Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client.
CVE-2026-76652———2026-09-10An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8.
CVE-2026-15419———2026-09-10In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
CVE-2026-15417———2026-09-10In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash.
CVE-2026-68484———2026-09-09Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.
CVE-2026-21111———2026-09-09Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
CVE-2026-21110———2026-09-09Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
CVE-2026-21109———2026-09-09Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
CVE-2026-21106———2026-09-09Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
CVE-2026-82755———2026-09-07Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant's OAuth discovery metadata to another tenant's clients.
CVE-2026-82753———2026-09-07Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to exhaust database storage and memory.
CVE-2026-53604———2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-53602———2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-53706———2026-09-02PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer.
CVE-2026-53671———2026-09-02PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer.
CVE-2026-63383———2026-08-20Libevent is an event notification library.
CVE-2026-63381———2026-08-20Libevent is an event notification library.
CVE-2026-63380———2026-08-20Libevent is an event notification library.
CVE-2026-45274———2026-08-19MyBooks is anebook management web server also known as Talebook.
CVE-2026-45272———2026-08-19MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook.
CVE-2026-76242———2026-08-19stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-band fingerprint approval step.
CVE-2026-76241———2026-08-19stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second explicit acknowledgment.
CVE-2026-76240———2026-08-19stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting.
CVE-2026-53458———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.
CVE-2026-53457———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.
CVE-2026-53456———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.
CVE-2026-53455———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.
CVE-2026-53454———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

Ibm · 116 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81204Critical9.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.
CVE-2026-79724Critical9.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
CVE-2026-78573Critical9.8—2026-09-10IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.
CVE-2026-85025Critical9.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow se…
CVE-2026-18658Critical9.8—2026-09-04IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection.
CVE-2026-82107Critical9.6—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication.
CVE-2026-82100Critical9.6—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVE-2026-19274Critical9.6—2026-09-04IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated Kubernetes tenant to hijack or permanently destroy another tenant's cluster-level RBAC permissions, caused by clus…
CVE-2026-80424Critical9.1—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.
CVE-2026-19646Critical9.1—2026-09-10IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header.
CVE-2026-84889High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVE-2026-82099High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-82098High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-82097High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2026-82095High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-82092High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
CVE-2026-81941High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tool…
CVE-2026-81940High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names.
CVE-2026-81554High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
CVE-2026-81551High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal vulnerability.
CVE-2026-81550High8.8—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-81211High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.
CVE-2026-79742High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.
CVE-2026-78575High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration.
CVE-2026-78571High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.
CVE-2026-78569High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
CVE-2026-76059High8.8—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tra…
CVE-2026-75777High8.8—2026-09-10IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container.
CVE-2026-75624High8.8—2026-09-10IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-19298High8.8—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process.
CVE-2026-81213High8.6—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs.
CVE-2026-19305High8.6—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-81540High8.5—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability.
CVE-2026-81207High8.5—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is…
CVE-2026-80436High8.5—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization.
CVE-2026-80378High8.5—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization.
CVE-2026-87958High8.1—2026-09-10IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.
CVE-2026-81268High8.1—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation.
CVE-2026-18221High8.1—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.
CVE-2026-18175High8.1—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher.
CVE-2026-19303High8.1—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory.
CVE-2026-2310High7.8—2026-09-10IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data.
CVE-2026-81210High7.7—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no project ACL — pure IDOR plus traversal.
CVE-2026-19306High7.7—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material (secret_key, JWT signing keys, the application database, /proc/self/environ, and o…
CVE-2026-19283High7.7—2026-09-04IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying e…
CVE-2026-81832High7.7—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML external entity (XXE) attack.
CVE-2026-86093High7.5—2026-09-10IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that impro…
CVE-2026-81265High7.5—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5.
CVE-2026-13297High7.5—2026-09-04IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.
CVE-2026-19300High7.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields.
CVE-2026-8862High7.5—2026-09-03IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry.
CVE-2026-80434High7.4—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference.
CVE-2026-19651High7.4—2026-09-08IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
CVE-2026-80380High7.1—2026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery.
CVE-2026-9176Medium6.7—2026-09-10IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls.
CVE-2026-5522Medium6.7—2026-09-04IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of…
CVE-2026-79725Medium6.5—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.
CVE-2026-9225Medium6.5—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component.
CVE-2026-9336Medium6.5—2026-09-10IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint.
CVE-2026-17622Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-17273Medium6.5—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.
CVE-2026-17207Medium6.5—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow.
CVE-2026-17057Medium6.5—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.
CVE-2026-14470Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system.
CVE-2026-78658Medium6.5—2026-09-04IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible…
CVE-2026-19645Medium6.5—2026-09-04IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingf…
CVE-2026-19302Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links.
CVE-2026-19299Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.
CVE-2026-18887Medium6.5—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE.
CVE-2026-9186Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files (~/.cursor/mcp…
CVE-2026-9138Medium6.5—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the server due to improper input validation in the SaveToFileComponent.
CVE-2026-9745Medium6.5—2026-09-03IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter.
CVE-2026-9327Medium6.3—2026-09-10IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration.
CVE-2026-18341Medium6.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.
CVE-2026-16689Medium6.2—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of creden…
CVE-2026-19649Medium6.2—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of databa…
CVE-2026-81859Medium6.2—2026-09-04CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.
CVE-2026-19795Medium6.2—2026-09-03Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads.
CVE-2026-8447Medium6.1—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat interface.
CVE-2026-9036Medium5.9—2026-09-03IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2026-16180Medium5.7—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improp…
CVE-2026-17440Medium5.5—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-17621Medium5.4—2026-09-04IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system.
CVE-2026-17274Medium5.4—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.
CVE-2026-16892Medium5.4—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.
CVE-2026-9667Medium5.3—2026-09-10IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.
CVE-2026-9338Medium5.3—2026-09-10IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request.
CVE-2026-19625Medium5.3—2026-09-08When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that is secured by the OIDC Provider 2, and an optional t…
CVE-2026-17470Medium5.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
CVE-2026-17469Medium5.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser.
CVE-2026-17444Medium5.3—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML exte…
CVE-2026-17443Medium5.3—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML exte…
CVE-2026-16826Medium5.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16660Medium5.3—2026-09-04IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-14350Medium5.3—2026-09-04IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
CVE-2026-78543Medium5.3—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-9744Medium5.3—2026-09-03IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2026-9736Medium5.3—2026-09-03IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
CVE-2026-17442Medium5.1—2026-09-04IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written…
CVE-2026-79723Medium5.0—2026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints.
CVE-2026-17631Medium5.0—2026-09-04IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability.
CVE-2026-19301Medium5.0—2026-09-04IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17627Medium4.9—2026-09-04IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization.
CVE-2026-18073Medium4.4—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.
CVE-2026-17499Medium4.4—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16693Medium4.4—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys.
CVE-2026-18567Medium4.4—2026-09-04IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory.
CVE-2026-86087Medium4.3—2026-09-10IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.
CVE-2026-18078Medium4.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow.
CVE-2026-18076Medium4.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.
CVE-2026-17483Medium4.3—2026-09-04IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.
CVE-2026-17270Medium4.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-17259Medium4.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-17255Medium4.3—2026-09-04IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.
CVE-2026-16941Medium4.3—2026-09-04IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.
CVE-2026-18858Low3.3—2026-09-04IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.

Dell · 115 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81467Critical9.8—2026-09-10Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-80172Critical9.8—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability.
CVE-2026-81048Critical9.6—2026-09-10Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVE-2026-81046Critical9.4—2026-09-10Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.
CVE-2026-61410Critical9.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability.
CVE-2026-80238Critical9.3—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability.
CVE-2026-81468Critical9.1—2026-09-10Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-78491High8.2—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79645High8.2—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability.
CVE-2026-80132High8.1—2026-09-07ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability.
CVE-2026-80166High7.8—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability.
CVE-2026-79637High7.7—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80134High7.7—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-79639High7.6—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79950High7.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-79740High7.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-79738High7.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-78490High7.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.
CVE-2026-79641High7.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-78480High7.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability.
CVE-2026-80135High7.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability.
CVE-2026-79963High7.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability.
CVE-2026-78492High7.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-78494High7.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79644High7.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80164High7.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80131High7.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVE-2026-80133High7.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability.
CVE-2026-79695High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability.
CVE-2026-79692High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability.
CVE-2026-78485High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVE-2026-79635High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2026-80122High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80123High7.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2026-79691High7.3—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79643High7.3—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability.
CVE-2026-61409High7.3—2026-09-07Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-23855High7.2—2026-09-09Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
CVE-2026-79972High7.2—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.
CVE-2026-80127High7.2—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-80130High7.1—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability.
CVE-2026-79636High7.0—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability.
CVE-2026-81052Medium6.8—2026-09-10Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability.
CVE-2026-70425Medium6.7—2026-09-09Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability.
CVE-2026-81051Medium6.6—2026-09-10Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability.
CVE-2026-79728Medium6.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability.
CVE-2026-78481Medium6.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-80177Medium6.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.
CVE-2026-80126Medium6.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability.
CVE-2026-78488Medium6.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-80170Medium6.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-80129Medium6.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVE-2026-79974Medium6.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability.
CVE-2026-80128Medium6.4—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability.
CVE-2026-79973Medium6.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerability.
CVE-2026-78483Medium5.9—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-78489Medium5.9—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80125Medium5.9—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79734Medium5.9—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79968Medium5.6—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
CVE-2026-79970Medium5.6—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerability.
CVE-2026-79730Medium5.6—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
CVE-2026-79967Medium5.6—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79642Medium5.6—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79947Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-79945Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-78493Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-78484Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-78482Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-79694Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code vulnerability.
CVE-2026-80124Medium5.5—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability.
CVE-2026-80167Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-80058Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability.
CVE-2026-79975Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-80054Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
CVE-2026-80057Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-80056Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability.
CVE-2026-78487Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-80178Medium5.5—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability.
CVE-2026-40635Medium5.4—2026-09-09Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability.
CVE-2026-79640Medium5.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.
CVE-2026-79946Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerability.
CVE-2026-79741Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVE-2026-79689Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVE-2026-79941Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.
CVE-2026-79971Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability.
CVE-2026-79964Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability.
CVE-2026-79952Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability.
CVE-2026-79969Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability.
CVE-2026-79965Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability.
CVE-2026-79962Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability.
CVE-2026-79961Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability.
CVE-2026-79638Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerability.
CVE-2026-80174Medium5.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability.
CVE-2026-79943Medium4.8—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability.
CVE-2026-80171Medium4.7—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability.
CVE-2026-80176Medium4.7—2026-09-07Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability.
CVE-2026-81049Medium4.4—2026-09-10Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability.
CVE-2026-79735Medium4.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-79731Medium4.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability.
CVE-2026-78486Medium4.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVE-2026-80055Medium4.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability.
CVE-2026-79736Low3.7—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79732Low3.7—2026-09-09Dell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability.
CVE-2026-79729Low3.7—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-79690Low3.7—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability.
CVE-2026-46460Low3.5—2026-09-09Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability.
CVE-2026-79944Low3.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability.
CVE-2026-79942Low3.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability.
CVE-2026-79693Low3.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability.
CVE-2026-80169Low3.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability.
CVE-2026-79966Low3.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability.
CVE-2026-79727Low3.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability.
CVE-2026-80175Low3.3—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability.
CVE-2026-80239Low2.4—2026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability.

Unknown · 110 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77770Critical10.0—2026-09-10The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor…
CVE-2026-14559Critical9.8—2026-09-11The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only th…
CVE-2026-78362Critical9.8—2026-09-05The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline…
CVE-2026-82923Critical9.8—2026-09-04The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to install and activate plugins and themes, import content from a URL…
CVE-2026-78361Critical9.1—2026-09-10The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing un…
CVE-2026-85677High8.8—2026-09-11The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted co…
CVE-2026-18480High8.8—2026-09-06The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email a…
CVE-2026-77826High8.8—2026-09-05The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose…
CVE-2026-84068High8.6—2026-09-09The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.
CVE-2026-14962High8.6—2026-09-09The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data…
CVE-2026-82304High8.6—2026-09-05The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
CVE-2026-82925High8.1—2026-09-10The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out the site's WordPress nonce key, which makes the key publicly computable on instal…
CVE-2026-84935High8.0—2026-09-05The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minima…
CVE-2026-84934High8.0—2026-09-05The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX actions and lets the request choose which internal action runs, allowing any authenticated users such as Subscribers to imp…
CVE-2026-77771High7.5—2026-09-10The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can ch…
CVE-2026-19439High7.5—2026-09-10The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to retrieve the gift cards attached to arbitrary orders and disc…
CVE-2026-19436High7.5—2026-09-10The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit…
CVE-2026-16960High7.5—2026-09-09The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles…
CVE-2026-84219High7.5—2026-09-06The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a p…
CVE-2026-19858High7.5—2026-09-05The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perform authorisation checks when resolving request-derived data during page rendering, allowing unauthenticated users to read arbitrary user, post a…
CVE-2026-74925High7.2—2026-09-11The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site.
CVE-2026-81431High7.2—2026-09-10The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controll…
CVE-2026-19224High7.2—2026-09-04The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire…
CVE-2026-81404High7.1—2026-09-05The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users…
CVE-2026-16281High7.1—2026-09-04The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subsc…
CVE-2026-86780Medium6.8—2026-09-11The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting at…
CVE-2026-85678Medium6.8—2026-09-11The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaSc…
CVE-2026-83546Medium6.8—2026-09-11The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the…
CVE-2026-83541Medium6.8—2026-09-09The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cr…
CVE-2025-15690Medium6.8—2026-09-09The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-S…
CVE-2026-84028Medium6.8—2026-09-06The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributor role and above to inject arbitrary web scripts that execu…
CVE-2026-84937Medium6.8—2026-09-05The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Contributor role and above to perform SQL injection attacks a…
CVE-2026-84931Medium6.8—2026-09-05The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing users with the Author role and above to inject arbitrary HTM…
CVE-2026-84930Medium6.8—2026-09-05The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, allowing users with the Author role and above to inject arb…
CVE-2026-84899Medium6.8—2026-09-05The VikWidgetsLoader WordPress plugin before 1.12.0 does not sanitise or escape a block attribute before outputting it inside an inline script, allowing users with the Contributor role to store arbitrary JavaScript that executes in the br…
CVE-2026-84896Medium6.8—2026-09-05The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that execut…
CVE-2026-84221Medium6.8—2026-09-05The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including…
CVE-2026-84022Medium6.8—2026-09-05The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before outputting them in HTML attributes, allowing users with the Contributor role and above to inject arbitrary web scripts tha…
CVE-2026-84021Medium6.8—2026-09-05The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowing users with the Contributor role and above to inject arbit…
CVE-2026-83544Medium6.8—2026-09-05The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that…
CVE-2026-82846Medium6.8—2026-09-05The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, allowing users with a course-author role to perform Stored Cross-Site Scripting…
CVE-2026-74853Medium6.8—2026-09-04The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary files from the server, including files outside the web root.
CVE-2026-84898Medium6.6—2026-09-05The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.
CVE-2026-85116Medium6.5—2026-09-11The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execu…
CVE-2026-86812Medium6.5—2026-09-11The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose gu…
CVE-2026-19840Medium6.5—2026-09-10The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a role as low as contributor to modify arbitrary Wor…
CVE-2026-85117Medium6.5—2026-09-09The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes regist…
CVE-2026-19855Medium6.5—2026-09-09The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor to have arbitrary shortcodes registered on the site executed…
CVE-2026-75861Medium6.5—2026-09-09The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to…
CVE-2026-82215Medium5.9—2026-09-11The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant…
CVE-2026-80341Medium5.9—2026-09-09The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated user, such as a subscriber, to bind another customer's stor…
CVE-2026-81347Medium5.9—2026-09-04The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthenticated attackers to delete index.php and .htaccess files outs…
CVE-2026-80438Medium5.9—2026-09-04The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plugin before 3.15.2-specific capability as equivalent to full site administration, which allows any…
CVE-2026-86815Medium5.5—2026-09-11The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-…
CVE-2026-86782Medium5.5—2026-09-11The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not…
CVE-2026-82194Medium5.5—2026-09-04The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files o…
CVE-2026-82193Medium5.5—2026-09-04The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations o…
CVE-2026-14565Medium5.4—2026-09-11The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated us…
CVE-2026-85418Medium5.4—2026-09-09The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the render…
CVE-2026-85133Medium5.4—2026-09-09The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to t…
CVE-2026-15247Medium5.4—2026-09-05The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite…
CVE-2026-86809Medium5.3—2026-09-11The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete…
CVE-2026-82213Medium5.3—2026-09-11The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references…
CVE-2026-86781Medium5.3—2026-09-11The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing…
CVE-2026-82305Medium5.3—2026-09-11The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wishlist on the site.
CVE-2026-83537Medium5.3—2026-09-09The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.
CVE-2026-85037Medium5.3—2026-09-09The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price d…
CVE-2026-84222Medium5.3—2026-09-09The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly…
CVE-2026-82848Medium5.3—2026-09-09The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner's enrolment status, timestamps and c…
CVE-2026-82184Medium5.3—2026-09-09The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to ov…
CVE-2026-81022Medium5.3—2026-09-09The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, allowing unauthenticated users to read the contents of any support ticket.
CVE-2026-81021Medium5.3—2026-09-09The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauthenticated attackers to read protected customer-uploaded attachments by enumerati…
CVE-2026-80340Medium5.3—2026-09-09The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the se…
CVE-2026-80339Medium5.3—2026-09-09The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the bi…
CVE-2026-18042Medium5.3—2026-09-09The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allowing unauthenticated attackers to cancel the payment on any…
CVE-2026-85038Medium5.3—2026-09-06The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form…
CVE-2026-84936Medium5.3—2026-09-05The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeated billable third-party API requests using the site's own co…
CVE-2026-81424Medium5.3—2026-09-05The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at…
CVE-2026-78149Medium5.3—2026-09-05The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected…
CVE-2026-84045Medium5.3—2026-09-04The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate th…
CVE-2026-84044Medium5.3—2026-09-04The Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 does not verify that a PayPal payment notification genuinely originates from PayPal, allowing unauthenticated attackers to forge a payment notification and mark their own…
CVE-2026-84043Medium5.3—2026-09-04The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signatur…
CVE-2026-84146Medium5.3—2026-09-04The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated vis…
CVE-2026-79632Medium5.3—2026-09-04The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to…
CVE-2026-79631Medium5.3—2026-09-04The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in fo…
CVE-2026-79630Medium5.3—2026-09-04The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product…
CVE-2026-17517Medium5.3—2026-09-04The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as d…
CVE-2026-84901Medium4.9—2026-09-05The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event th…
CVE-2026-86813Medium4.8—2026-09-11The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such…
CVE-2026-80440Medium4.8—2026-09-09The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeate…
CVE-2026-80439Medium4.8—2026-09-06The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action's settings and then processes those setti…
CVE-2026-80437Medium4.8—2026-09-06The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from being executed when it substitutes them into content it later processes for shortcodes, allowing unauthenticated users t…
CVE-2026-19862Medium4.8—2026-09-06The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from address values it sources from submitted form fields before adding them to the headers of the e-mails it sends, allowing unauthenticated users t…
CVE-2026-81741Medium4.7—2026-09-09The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirec…
CVE-2026-85132Medium4.3—2026-09-09The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule t…
CVE-2026-82185Medium4.3—2026-09-09The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown t…
CVE-2026-13159Medium4.3—2026-09-06The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org re…
CVE-2026-81423Medium4.3—2026-09-05The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged…
CVE-2026-83543Medium4.1—2026-09-05The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the r…
CVE-2026-82186Medium4.1—2026-09-04The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks.
CVE-2026-13146Low3.7—2026-09-09The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit slip submission, allowing an unauthenticated attacker who knows the target customer's email address to…
CVE-2026-13144Low3.7—2026-09-09The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, allowing an unauthenticated attacker who knows the target cus…
CVE-2026-81348Low3.7—2026-09-05The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site t…
CVE-2025-15695Low3.5—2026-09-11The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript…
CVE-2026-84066Low3.1—2026-09-04The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing u…
CVE-2026-86779Low2.7—2026-09-11The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above t…
CVE-2026-84927Low2.7—2026-09-05The EmbedPress WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entries…
CVE-2026-84926Low2.7—2026-09-05The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to administrators, allowing any authenticated user with contributor-level access or above to read the site administra…
CVE-2026-84745Low2.7—2026-09-05The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowing users with a low-privilege role such as contributor to read the full contents…
CVE-2026-84225Low2.2—2026-09-05The Kirki WordPress plugin before 6.3.0 does not check that a user is allowed to act on a collaboration comment before changing its state, allowing users whom an administrator has granted content-level access to the page builder to modify…

Wwbn · 73 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85154Critical9.8—2026-09-03WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-revocable bearer token that grants full administrator session access to the video owner's account.
CVE-2026-84480Critical9.8—2026-09-01WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely.
CVE-2026-88869Critical9.3—2026-09-10AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the AD_Server plugin's log.php endpoint that fails to escape the label parameter before storage.
CVE-2026-86190Critical9.1—2026-09-05WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash param…
CVE-2026-84479Critical9.1—2026-09-01WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent header.
CVE-2026-72748Critical9.1—2026-08-11AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without…
CVE-2026-84482High8.8—2026-09-01WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions that fail to properly validate referer origins.
CVE-2026-89256High8.7—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML.
CVE-2026-89255High8.7—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element.
CVE-2026-89254High8.7—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the CustomizeUser plugin where the field_name parameter is stored raw without sanitization.
CVE-2026-89253High8.7—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field.
CVE-2026-89249High8.7—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet values are base64-encoded but not HTML-escaped before storage in w…
CVE-2026-88868High8.7—2026-09-10AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are stored without sanitization.
CVE-2026-88867High8.7—2026-09-10WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a stored cross-site scripting vulnerability.
CVE-2026-88866High8.7—2026-09-10WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to encode the User-Agent header before storing it in login history.
CVE-2026-84187High8.2—2026-09-01AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers.
CVE-2026-89243High8.1—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name() that fails to sanitize group_name input.
CVE-2026-88865High8.1—2026-09-10AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate restream ownership in getRestream.json.php, allowing authenticated users with canStream permission to mint tokens for arbitrary restreams.
CVE-2026-86723High8.1—2026-09-08AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comparison (==) instead of strict comparison (===) against unset session values.
CVE-2026-86722High8.1—2026-09-08AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalidates.
CVE-2026-86720High8.1—2026-09-08WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in resendRestreamer.json.php, allowing authenticated users with canStream to access other users' restream destinations.
CVE-2026-85160High8.1—2026-09-03AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive.php that allows attackers to delete directories by exploiting missing token validation and unsanitized key parameter concate…
CVE-2026-83595High8.1—2026-09-01AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass CSRF protection.
CVE-2026-89250High7.5—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory.
CVE-2026-88876High7.5—2026-09-10AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/PlayerSkins/seo.php that allows unauthenticated attackers to access password-protected video sources by calling getSo…
CVE-2026-88874High7.5—2026-09-10AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Live stream password check on the stats endpoint or on the HLS origin.
CVE-2026-86728High7.5—2026-09-08AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users.
CVE-2026-86727High7.5—2026-09-08AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication.
CVE-2026-86721High7.5—2026-09-08AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in saveLive.php and related endpoints.
CVE-2026-85155High7.5—2026-09-03WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APIName=channels that allows unauthenticated attackers to order results by arbitrary database columns including users.passwor…
CVE-2026-84476High7.5—2026-09-01WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit().
CVE-2026-84208High7.5—2026-09-01AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's regions.json.php and cities.json.php endpoints.
CVE-2026-86729High7.4—2026-09-08WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as a second, undocumented login path.
CVE-2026-84478High7.3—2026-09-01WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directory traversal sequences in the code parameter.
CVE-2026-89242High7.2—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability in the _json_decode function that fetches remote URLs and local file paths without SSRF validation.
CVE-2026-86188High7.2—2026-09-05AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to execute arbitrary JavaScript in other users' browsers via the websocket callback mechanism.
CVE-2026-72747High7.2—2026-08-11AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database.
CVE-2026-88873High7.1—2026-09-10WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated attackers to archive application logs by making GET requests wi…
CVE-2026-88872High7.1—2026-09-10AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user's channel password by sending…
CVE-2026-88870High7.1—2026-09-10WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF token validation.
CVE-2026-86725High7.1—2026-09-08AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authenticated users to modify other users' OAuth token records.
CVE-2026-86718High7.1—2026-09-08WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers to mutate live history by making…
CVE-2026-85164High7.1—2026-09-03WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API endpoint that fails to validate profileImg and backgroundImg URLs before fetching them.
CVE-2026-89252Medium6.5—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links.
CVE-2026-89251Medium6.5—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_Server/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video…
CVE-2026-89245Medium6.5—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.php that allows attackers to delete playlists by skipping CSRF protection checks.
CVE-2026-86726Medium6.5—2026-09-08AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identities of all other streamers' active restreams.
CVE-2026-86724Medium6.5—2026-09-08AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session c…
CVE-2026-86186Medium6.5—2026-09-05AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection.
CVE-2026-85163Medium6.5—2026-09-03AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authenticated uploaders to fetch arbitrary internal URLs.
CVE-2026-85162Medium6.5—2026-09-03AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin/Live/saveLive.php that lacks forbidIfNotPost and forbidIfInvalidToken protections.
CVE-2026-89247Medium6.1—2026-09-11WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/AD_Server/VMAP.php, which is reachable without authentication when the AD_Server plugin is enabled.
CVE-2026-89244Medium6.1—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php when SubCategorys is enabled.
CVE-2026-89241Medium6.1—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that copies REQUEST_URI into a form action attribute without encoding.
CVE-2026-89240Medium6.1—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php.
CVE-2026-89239Medium6.1—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in the showAlertMessage() function that inserts the raw Referer header into a JavaScript comment without encoding.
CVE-2026-86187Medium5.9—2026-09-05WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing only 31-bit integers.
CVE-2026-89257Medium5.4—2026-09-11AVideo through 29.0 contains an insecure direct object reference (IDOR) vulnerability in objects/categoryDeleteAssets.json.php.
CVE-2026-89246Medium5.4—2026-09-11WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that fails to sanitize spreadsheet formula prefixes in comment text.
CVE-2026-89148Medium5.4—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php.
CVE-2026-86719Medium5.4—2026-09-08WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/CustomizeUser/swapUser.json.php.
CVE-2026-85577Medium5.4—2026-09-04AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attackers to inject arbitrary JavaScript by closing the script tag with </script>.
CVE-2026-85159Medium5.4—2026-09-03AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php where the cancelUri parameter is echoed in an href attribute after isSafeRedirectURL checks protocol only, not HTML characters.
CVE-2026-85158Medium5.4—2026-09-03AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in videoEmbeded.php that echoes the link parameter inside an HTML comment with zero escaping.
CVE-2026-84477Medium5.4—2026-09-01AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts.
CVE-2026-89248Medium5.3—2026-09-11AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php.
CVE-2026-85157Medium5.3—2026-09-03WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a program_id parameter is supplied.
CVE-2026-85156Medium5.3—2026-09-03WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property.
CVE-2026-84483Medium5.3—2026-09-01WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time.
CVE-2026-88875Medium4.3—2026-09-10AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) incompletely sanitizes sensitive user fields in the APIName=video response.
CVE-2026-88871Medium4.3—2026-09-10WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint.
CVE-2026-85161Medium4.3—2026-09-03AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbidIfNotPost or forbidIfInvalidToken checks.
CVE-2026-84481———2026-09-01WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors.

Mongodb · 51 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19001Critical9.8—2026-08-12The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function.
CVE-2026-81532High8.8—2026-08-28A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer.
CVE-2026-88036High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifi…
CVE-2026-88034High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identi…
CVE-2026-88033High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ident…
CVE-2026-88030High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ident…
CVE-2026-88029High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ide…
CVE-2026-88025High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identif…
CVE-2026-88024High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ident…
CVE-2026-88023High8.3—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ident…
CVE-2026-88031High8.1—2026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identif…
CVE-2026-82071High8.1—2026-09-08Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata.
CVE-2026-82067High8.1—2026-09-08Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup.
CVE-2026-82061High8.1—2026-09-08A use-after-free security issue exists in the server's query execution memory tracking subsystem.
CVE-2026-82053High8.1—2026-09-08A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations.
CVE-2026-19004High8.1—2026-08-12An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure.
CVE-2026-19002High8.1—2026-08-12A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process.
CVE-2026-19003High7.8—2026-08-12A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer.
CVE-2026-88022High7.7—2026-09-10Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted as a query condition rather than as a literal value.
CVE-2026-89099High7.5—2026-09-11A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption.
CVE-2026-82075High7.5—2026-09-08An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process.
CVE-2026-82064High7.5—2026-09-08A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member.
CVE-2026-88027High7.1—2026-09-10Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted as a query condition…
CVE-2026-81533High7.1—2026-08-28An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause.
CVE-2026-88028Medium6.5—2026-09-10Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation identifier to be interpreted as a query condition rather than…
CVE-2026-88026Medium6.5—2026-09-10Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected a…
CVE-2026-82076Medium6.5—2026-09-08An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit.
CVE-2026-82074Medium6.5—2026-09-08MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework.
CVE-2026-82073Medium6.5—2026-09-08A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are i…
CVE-2026-82070Medium6.5—2026-09-08A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations.
CVE-2026-82068Medium6.5—2026-09-08A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands.
CVE-2026-82065Medium6.5—2026-09-08A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service.
CVE-2026-82058Medium6.5—2026-09-08A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server.
CVE-2026-82057Medium6.5—2026-09-08A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process.
CVE-2026-82055Medium6.5—2026-09-08A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference.
CVE-2026-82054Medium6.5—2026-09-08A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing.
CVE-2026-82052Medium6.5—2026-09-08The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod).
CVE-2026-18888Medium6.5—2026-08-12The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer.
CVE-2026-84970Medium6.2—2026-09-03A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library.
CVE-2026-88032Medium5.9—2026-09-10A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled.
CVE-2026-82062Medium5.5—2026-09-08A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client…
CVE-2026-82060Medium5.4—2026-09-08In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections.
CVE-2026-82063Medium5.3—2026-09-08A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service.
CVE-2026-82059Medium5.3—2026-09-08An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations.
CVE-2026-82056Medium5.3—2026-09-08A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths.
CVE-2026-84968Medium5.3—2026-09-03An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is re…
CVE-2026-88035Medium4.7—2026-09-10A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer.
CVE-2026-82066Medium4.3—2026-09-08A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server.
CVE-2026-84967Medium4.3—2026-09-03A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal.
CVE-2026-84969Low3.7—2026-09-03A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length…
CVE-2026-82069Low2.7—2026-09-08A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations.

Red Hat · 51 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78234Critical9.9—2026-09-08A flaw was found in hawtio-operator.
CVE-2026-18922Critical9.8—2026-09-07A flaw was found in 389 Directory Server.
CVE-2026-76578Critical9.8—2026-09-07A flaw was found in FreeIPA.
CVE-2026-18963Critical9.1—2026-08-18A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak.
CVE-2026-10059Critical9.1—2026-08-05A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller.
CVE-2026-10090Critical9.0—2026-08-05A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernetes (ACM).
CVE-2026-87766High8.8—2026-09-09A flaw was found in bubblewrap.
CVE-2026-86404High8.8—2026-09-07EAP's Artemis deserialization configuration permits deserialization by default.
CVE-2026-19546High8.8—2026-08-11A flaw was found in DBI.
CVE-2026-74860High8.5—2026-09-08A flaw was found in libxml2 with Python bindings enabled.
CVE-2026-19843High8.4—2026-09-07A flaw was found in 389-ds-base.
CVE-2026-77968High8.2—2026-09-08A flaw was found in hawtio-operator.
CVE-2026-87874High8.1—2026-09-09A flaw was found in the memcached cache plugin of the community.general Ansible collection.
CVE-2026-18147High8.1—2026-09-09A flaw was found in FreeIPA.
CVE-2026-79678High8.1—2026-09-07A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced.
CVE-2026-76139High8.0—2026-08-19A flaw was found in acm-operator-bundle.
CVE-2026-84042High7.8—2026-09-10A flaw was found in crun.
CVE-2026-7867High7.8—2026-08-06A flaw was found in udisks2.
CVE-2026-89060High7.7—2026-09-11A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources out…
CVE-2026-87853High7.5—2026-09-09A flaw was found in SSSD's IdP authentication provider.
CVE-2026-18453High7.5—2026-09-07A flaw was found in 389 Directory Server.
CVE-2026-18355High7.5—2026-09-07A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).
CVE-2026-76560High7.5—2026-09-07A flaw was found in 389 Directory Server.
CVE-2026-81624High7.5—2026-08-31Undertow is a flexible performant web server used in JBoss EAP and WildFly.
CVE-2026-76561High7.2—2026-09-08A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.
CVE-2026-87872Medium6.8—2026-09-09A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection.
CVE-2026-74859Medium6.8—2026-09-08The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths.
CVE-2026-84828Medium6.5—2026-09-10A flaw was found in PCS (Pacemaker Configuration System).
CVE-2026-88770Medium6.5—2026-09-10A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution.
CVE-2026-86332Medium6.5—2026-09-07A flaw was found in odh-dashboard in Red Hat OpenShift AI.
CVE-2026-85769Medium6.5—2026-09-04A flaw was found in libtpms, a library that provides software TPM 2.0 emulation.
CVE-2026-88859Medium6.3—2026-09-10A flaw was found in Evolution.
CVE-2026-89329Medium6.2—2026-09-11A flaw was found in `multipathd`.
CVE-2026-18874Medium6.2—2026-08-19A flaw was found in volsync-addon-controller.
CVE-2026-18495Medium6.1—2026-09-11A flaw was found in libtiff.
CVE-2026-18090Medium6.1—2026-09-08A flaw was found in gdk-pixbuf.
CVE-2026-88763Medium5.9—2026-09-10A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services.
CVE-2026-85534Medium5.9—2026-09-04A flaw was found in libsoup.
CVE-2026-84185Medium5.9—2026-09-03A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards.
CVE-2026-76925Medium5.8—2026-09-04A flaw was found in Flatpak.
CVE-2026-88265Medium5.6—2026-09-10A flaw was found in crun.
CVE-2026-77159Medium5.5—2026-09-11A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function.
CVE-2026-16730Medium5.5—2026-07-24A flaw was found in dbus-broker.
CVE-2026-86469Medium5.3—2026-09-07A flaw was found in GLib2.
CVE-2026-89298Medium4.9—2026-09-11A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution.
CVE-2026-19729Medium4.9—2026-09-09A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak.
CVE-2026-88914Medium4.4—2026-09-11A flaw was found in GStreamer's gst-plugins-good isomp4 plugin.
CVE-2026-87875Medium4.3—2026-09-09The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read.
CVE-2026-86564Low3.3—2026-09-08A flaw was found in DPDK lib/vhost.
CVE-2026-87876Low3.0—2026-09-09Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain…
CVE-2026-18743Low2.5—2026-09-01A flaw was found in popt.

Grokability · 43 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86738High8.7—2026-09-08Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters.
CVE-2026-86751High8.5—2026-09-09Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests.
CVE-2026-86741High8.5—2026-09-09Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails.
CVE-2026-86770High8.1—2026-09-09Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames.
CVE-2026-86762High8.1—2026-09-09Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the `api` middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens.
CVE-2026-86750High7.7—2026-09-09Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not validate company assignment authorization before persisting user records via the REST API.
CVE-2026-86771High7.6—2026-09-09Snipe-IT versions before 8.7.0 fail to HTML-escape the employee_num field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML() function.
CVE-2026-86754High7.3—2026-09-09Snipe-IT before 8.7.0 fails to properly gate Laravel Passport's OAuth client management routes, allowing any authenticated user to register OAuth clients with attacker-controlled redirect URIs.
CVE-2026-86733High7.2—2026-09-08Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-mode flag, so the client interprets lines beginning with backslash commands such…
CVE-2026-86759High7.1—2026-09-09Snipe-IT versions before 8.7.0 fail to authorize the POST /hardware/history endpoint, allowing any authenticated user to reassign arbitrary assets and modify audit logs.
CVE-2026-86766Medium6.5—2026-09-09Snipe-IT versions up to and including 8.6.3 contain a race condition (TOCTOU) in the consumable checkout API endpoint (POST /api/v1/consumables/{consumable_id}/checkout).
CVE-2026-86765Medium6.5—2026-09-09Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint.
CVE-2026-86764Medium6.5—2026-09-09Snipe-IT through 8.6.4 (fixed in 8.7.0) does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware/<asset-id>/assigned/components.
CVE-2026-86758Medium6.5—2026-09-09Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys.
CVE-2026-86757Medium6.5—2026-09-09Snipe-IT before 8.7.0 fails to properly gate access to encrypted custom-field values in asset form templates for listbox, textarea, markdown-textarea, and date/datetime picker elements.
CVE-2026-86745Medium6.5—2026-09-09Snipe-IT is an IT asset management application.
CVE-2026-86742Medium6.5—2026-09-09Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export.
CVE-2026-86734Medium6.5—2026-09-08Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint, allowing authenticated users to submit unbounded input that reaches synchronous CommonMark rendering.
CVE-2026-86746Medium6.4—2026-09-09Snipe-IT before 8.7.0 contains an authorization bypass vulnerability in Livewire components that enforce authorization only at the route level, not within component lifecycle methods.
CVE-2026-86774Medium6.3—2026-09-09Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files() method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Mo…
CVE-2026-86749Medium6.3—2026-09-09Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not check the return value of storage write operations in ImageUploadRequest::handleImages().
CVE-2026-86756Medium6.1—2026-09-09Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (SamlController::acs, POST /saml/acs).
CVE-2026-86748Medium6.1—2026-09-09Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint.
CVE-2026-88894Medium5.4—2026-09-10Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the checkout target.
CVE-2026-86773Medium5.4—2026-09-09Snipe-IT through version 8.6.3 fails to perform object-level authorization in the updateLicense, updateConsumable, updateAccessory, and updateModel endpoints and in the storeModel endpoint for Predefined Kits.
CVE-2026-86772Medium5.4—2026-09-09Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink() where department names are rendered unescaped in the fallback branch for users without departments.view permissi…
CVE-2026-86768Medium5.4—2026-09-09Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targets.
CVE-2026-86760Medium5.4—2026-09-09Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0) contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update().
CVE-2026-86755Medium5.4—2026-09-09Snipe-IT versions 4.2.0 through 8.6.3 expose Laravel Passport's auto-registered personal-access-token routes (GET, POST, DELETE /oauth/personal-access-tokens*) with only 'web' and 'auth:web' middleware, without the self.api permission gate…
CVE-2026-86752Medium5.4—2026-09-09snipe-it versions before 8.7.0 fail to enforce per-instance FMCS scoping in asset audit endpoints, relying solely on query-layer filtering instead of policy-layer authorization checks.
CVE-2026-86747Medium5.4—2026-09-09Snipe-IT is an open source IT asset management system.
CVE-2026-86767Medium5.0—2026-09-09Snipe-IT versions before 8.7.0 fail to apply company scope filtering to the GET /hardware/requested endpoint when Full Multiple Company Support is enabled, allowing authenticated users with assets.view permission to read pending asset requ…
CVE-2026-86743Medium5.0—2026-09-09Snipe-IT versions before 8.7.0 fail to properly scope asset acceptance report queries by company, allowing authenticated reports.view users to read pending acceptances across all companies.
CVE-2026-86735Medium5.0—2026-09-08snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets.
CVE-2026-86769Medium4.3—2026-09-09Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the created_by column instead of the authenticated caller's id.
CVE-2026-86761Medium4.3—2026-09-09snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks.
CVE-2026-86753Medium4.3—2026-09-09snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/asset_model/{modelId} endpoint.
CVE-2026-86737Medium4.3—2026-09-08snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint.
CVE-2026-86736Medium4.3—2026-09-08snipe-it before 8.7.0 contains an incorrect calculation vulnerability in checkout request handling that allows authenticated users to corrupt the assets.requests_counter through duplicate submissions and cancellations without active reques…
CVE-2026-86740Low3.8—2026-09-09Snipe-IT before 8.7.0 fails to check the return value of Storage::delete() in UploadedFilesController::destroy() and Api\\UploadedFilesController::destroy(), allowing deletion requests to report success while files remain on disk.
CVE-2026-86763Low3.5—2026-09-09Snipe-IT versions >= 7.0.12 and <= 8.6.3 contain an authorization bypass in the Livewire importer component (App\Livewire\Importer, mounted at the imports.index route).
CVE-2026-86739Low3.1—2026-09-09Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put() when writing the signature PNG and the generated acceptance PDF in Account\AcceptanceController::store().
CVE-2026-86744Low2.2—2026-09-09Snipe-IT 8.6.3 and earlier (and develop pre-release commits prior to the fix) contain a race condition in the asset checkout paths.

Getgrav · 37 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85604High8.8—2026-09-04Grav before 2.0.18 (affected versions <= 2.0.17) contains a remote code execution vulnerability in the Twig sort filter.
CVE-2026-62666High8.8—2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-75836High8.8—2026-08-18The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the authorize requirement in MenubarController::executeAction().
CVE-2026-72827High8.8—2026-08-14Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands.
CVE-2026-72826High8.8—2026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey.
CVE-2026-63407High8.2—2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-62667High8.1—2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-75829High8.1—2026-08-18grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled.
CVE-2026-72825High7.6—2026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint (ReportsController).
CVE-2026-63408High7.5—2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-62669High7.4—2026-08-19Grav Login Plugin adds login, basic ACL, and session wide messages to Grav.
CVE-2026-85599High7.2—2026-09-04Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered pages without escaping.
CVE-2026-75830High7.1—2026-08-18grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy() method.
CVE-2026-61842Medium6.5—2026-08-19Grav is a file-based Web platform.
CVE-2026-61690Medium6.5—2026-08-19Grav is a file-based Web platform.
CVE-2026-62670Medium6.3—2026-08-19Grav Flex Objects Plugin allows you to build custom collections of objects.
CVE-2026-85601Medium5.4—2026-09-04Grav Admin before 2.0.20 fails to sanitize output from marked.parse() before injecting it into the DOM via Svelte's {@html} directive in MarkdownEditor and MarkdownModal components.
CVE-2026-85600Medium5.4—2026-09-04Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml() function (src/lib/stores/i18n.svelte.ts), which substitutes untrusted parameters such as usernames into translati…
CVE-2026-62671Medium5.4—2026-08-19Grav Login Plugin adds login, basic ACL, and session wide messages to Grav.
CVE-2026-75107Medium5.4—2026-08-18Grav Form Plugin before 9.1.19 fails to escape field-definition properties including prepend, append, spacer text, section text, and select option labels in form templates.
CVE-2026-85602Medium5.3—2026-09-04The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload.
CVE-2026-72820Medium4.9—2026-08-14Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list.
CVE-2026-61607Medium4.6—2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-74908Medium4.6—2026-08-18Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks for the exact extension 'svg', allowing .svgz and .xhtml files to bypass sanitization and be stored unsanitized.
CVE-2026-75835Medium4.3—2026-08-18Grav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize() (AbstractApiController.php).
CVE-2026-75832Medium4.3—2026-08-18The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15) contains a missing authorization vulnerability in BlueprintPathResolver::resolveUserScope().
CVE-2026-75833Medium4.2—2026-08-18The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo().
CVE-2026-86196———2026-09-05Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password endpoint, allowing unauthenticated attackers to redirect reset tokens to attacker-controlled domains.
CVE-2026-86195———2026-09-05grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where the stripSuperFlags() method only removes nested super flags but fails to strip dot-keyed equivalents like api.super.
CVE-2026-86193———2026-09-05grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing non-super user managers to modify super-admin accounts.
CVE-2026-64852———2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-64851———2026-08-19Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode.
CVE-2026-64850———2026-08-19Grav is a file-based Web platform.
CVE-2026-62673———2026-08-19Grav is a file-based Web platform.
CVE-2026-62672———2026-08-19Grav is a file-based Web platform.
CVE-2026-62668———2026-08-19Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content.
CVE-2026-53654———2026-08-19Grav is a file-based Web platform.

Jetbrains · 37 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86480Critical9.8—2026-09-07In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges
CVE-2026-86478Critical9.8—2026-09-07In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address
CVE-2026-86482High8.8—2026-09-07In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
CVE-2026-86492High8.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens
CVE-2026-86502High8.4—2026-09-07In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts
CVE-2026-75060High8.4—2026-08-17In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
CVE-2026-86479High8.1—2026-09-07In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR
CVE-2026-86504High7.8—2026-09-07In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution
CVE-2026-75056High7.8—2026-08-17In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
CVE-2026-86498High7.7—2026-09-07In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
CVE-2026-86494High7.7—2026-09-07In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
CVE-2026-86497Medium6.8—2026-09-07In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials
CVE-2026-86495Medium6.5—2026-09-07In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects
CVE-2026-86493Medium6.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards
CVE-2026-86490Medium6.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint
CVE-2026-86489Medium6.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations
CVE-2026-86488Medium6.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches
CVE-2026-75054Medium6.3—2026-08-17In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects
CVE-2026-75057Medium6.2—2026-08-17In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
CVE-2026-86506Medium5.9—2026-09-07In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data
CVE-2026-86500Medium5.5—2026-09-07In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin
CVE-2026-75058Medium5.5—2026-08-17In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
CVE-2026-75055Medium5.5—2026-08-17In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
CVE-2026-86483Medium5.4—2026-09-07In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible
CVE-2026-75053Medium5.4—2026-08-17In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
CVE-2026-86484Medium4.6—2026-09-07In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS
CVE-2026-75059Medium4.4—2026-08-17In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible
CVE-2026-86499Medium4.3—2026-09-07In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
CVE-2026-86496Medium4.3—2026-09-07In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses
CVE-2026-86481Medium4.3—2026-09-07In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons
CVE-2026-86486Low3.7—2026-09-07In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank
CVE-2026-86491Low3.5—2026-09-07In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads
CVE-2026-86505Low3.3—2026-09-07In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
CVE-2026-86503Low3.3—2026-09-07In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
CVE-2026-86485Low3.3—2026-09-07In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
CVE-2026-86487Low3.1—2026-09-07In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas content
CVE-2026-86501Low2.8—2026-09-07In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log

Dokploy · 36 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72902Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72901Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72886Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72882Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72880Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72876Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72872Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72869Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72868Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72867Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72865Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72864Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72863Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72862Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72740Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72738Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72736Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72735Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72878Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72877Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72737Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72883High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72875High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72866High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72734High8.4—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-45790High8.0—2026-08-17Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72871High7.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72873Medium6.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72739Medium6.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-45791Medium5.9—2026-08-17Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72885———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72884———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72881———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72879———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72874———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72870———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).

Pmmp · 28 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86201High7.5—2026-09-09PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization.
CVE-2026-86199High7.5—2026-09-09PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication.
CVE-2024-58381High7.5—2026-09-09PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data.
CVE-2023-54393High7.5—2026-09-09PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency.
CVE-2023-54390High7.5—2026-09-09PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays.
CVE-2023-54355High7.5—2026-09-09PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve.
CVE-2022-51017High7.5—2026-09-07PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG_String limit.
CVE-2026-86204Medium6.5—2026-09-09PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service.
CVE-2025-71417Medium6.5—2026-09-09PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUS_SEND_PACKS handling, allowing authenticated clients to trigger duplicate pack transmissions.
CVE-2024-58380Medium6.5—2026-09-09PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided.
CVE-2023-54396Medium6.5—2026-09-09PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization.
CVE-2023-54392Medium6.5—2026-09-09PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in BlockActorDataPacket.
CVE-2022-51018Medium6.5—2026-09-07PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length.
CVE-2022-51015Medium6.5—2026-09-07PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) or in UseItemTransactionData (typically within InventoryTransactionPacket).
CVE-2022-51014Medium6.5—2026-09-07PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients.
CVE-2022-51013Medium6.5—2026-09-07PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients.
CVE-2022-51012Medium6.5—2026-09-07PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients.
CVE-2022-51010Medium6.5—2026-09-07PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data.
CVE-2022-51016Medium6.1—2026-09-07PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token.
CVE-2026-86200Medium5.3—2026-09-09PocketMine-MP versions before 5.42.1 contain a denial of service vulnerability in the LoginPacket handler that allows remote attackers to flood warning messages by injecting numerous junk properties into the clientData JWT.
CVE-2025-71418Medium5.3—2026-09-09PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources.
CVE-2022-51008Medium5.3—2026-09-06PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket.
CVE-2026-86202Medium4.3—2026-09-09PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players.
CVE-2023-54395Medium4.3—2026-09-09PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads.
CVE-2023-54394Medium4.3—2026-09-09PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attackers to trigger excessive inventory synchronization.
CVE-2022-51011Medium4.3—2026-09-07PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines.
CVE-2026-86198Medium4.2—2026-09-09PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUS_COMPLETED status during resource pack handling.
CVE-2026-86203Low3.7—2026-09-09PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients.

Misp · 27 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85216Critical9.8—2026-09-03MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials.
CVE-2026-86419Critical9.1—2026-09-07Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality.
CVE-2026-85221Critical9.1—2026-09-03MISP contains an improper TLS certificate validation vulnerability in CurlClient.
CVE-2026-85236High8.8—2026-09-03A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP.
CVE-2026-85237High8.1—2026-09-03A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts.
CVE-2026-86452High7.5—2026-09-07Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting.
CVE-2026-85238Medium6.8—2026-09-03MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow.
CVE-2026-86408Medium6.5—2026-09-07Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view().
CVE-2026-86347Medium6.5—2026-09-07Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wildcard *.
CVE-2026-85239Medium6.5—2026-09-03A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field.
CVE-2026-86351Medium6.1—2026-09-07Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with /.
CVE-2026-85227Medium6.1—2026-09-03MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder.
CVE-2026-86440Medium5.4—2026-09-07Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget.
CVE-2026-85230Medium5.4—2026-09-03A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration.
CVE-2026-86451Medium4.3—2026-09-07Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data() without first checking whether the requester is authorized to view the object the reference belon…
CVE-2026-86441Medium4.3—2026-09-07Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information.
CVE-2026-86418Medium4.3—2026-09-07Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view.
CVE-2026-86417Medium4.3—2026-09-07Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates().
CVE-2026-86342Medium4.3—2026-09-07Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality.
CVE-2026-85226Medium4.3—2026-09-03MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restric…
CVE-2026-88921———2026-09-10MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references (attributes, objects, and tags) into inline HTML during PDF report export via the conve…
CVE-2026-88915———2026-09-10Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates.
CVE-2026-86283———2026-09-06MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applying the caller's access control list (ACL).
CVE-2026-85547———2026-09-04A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disabled based on whether an incoming request was identified as a REST request.
CVE-2026-85546———2026-09-04MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality.
CVE-2026-85538———2026-09-04An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required perm_modify or perm_modify_org permissions.
CVE-2026-85533———2026-09-04An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was authorized to use the referenced Sharing Group.

Apache · 26 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82617Critical9.8—2026-09-11The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and DEFAULT_REGEX_NAME_FINDER.URL - contain ambiguous nested quantifiers.
CVE-2026-80352Critical9.8—2026-09-10Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K.
CVE-2026-80351Critical9.8—2026-09-10Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K.
CVE-2026-57967Critical9.8—2026-09-10An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session.
CVE-2026-56207Critical9.8—2026-09-09Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user.
CVE-2026-41871Critical9.8—2026-09-09Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API).
CVE-2026-84939Critical9.1—2026-09-10Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled (it's by default en…
CVE-2026-67593Critical9.1—2026-09-10A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter.
CVE-2026-49364Critical9.1—2026-09-10An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake.
CVE-2026-41869Critical9.1—2026-09-09Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API).
CVE-2026-75156Critical9.1—2026-09-08Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `id_token`s during OAuth login.
CVE-2026-57866High8.8—2026-09-09Server side request forgery in Apache Impala versions 4.4.x and 4.5.x.  Authenticated Impala users with permissions to execute the ai_generate_text() function can exfiltrate secrets provided by the credential providers configured in the `h…
CVE-2026-41870High8.8—2026-09-09Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in A…
CVE-2026-80354High8.1—2026-09-10Authorization bypass through User-Controlled key vulnerability in Apache Camel K.
CVE-2026-73334High8.1—2026-09-09Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18.
CVE-2026-65181High8.1—2026-09-09Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code.
CVE-2026-67211High7.5—2026-09-11OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellcheck extension was introduced in 3.0.0-M4.
CVE-2026-49363High7.5—2026-09-10An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBSCRIBE_TOPOLOGY request prior to authentication.
CVE-2026-49362High7.5—2026-09-10An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service.
CVE-2026-74761High7.5—2026-09-09Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms.
CVE-2026-78254High7.4—2026-09-07The ftp and scp tasks of Apache Ant can download files from a remote server.
CVE-2026-66256High7.2—2026-08-13** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig.
CVE-2026-75880Medium6.5—2026-09-10An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service.
CVE-2026-57822Medium6.5—2026-09-10When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserializa…
CVE-2026-32773Medium6.1—2026-09-02There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser.
CVE-2026-54048Medium5.3—2026-09-09Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that…

Geovision Inc. · 26 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88278Critical9.8—2026-09-10GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.
CVE-2026-88285Critical9.4—2026-09-10GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
CVE-2026-18754Critical9.1—2026-08-04The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination.
CVE-2026-18753Critical9.1—2026-08-04The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination.
CVE-2026-88277High8.8—2026-09-10GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.
CVE-2026-88271High8.8—2026-09-10GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.
CVE-2026-88290High7.5—2026-09-10GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.
CVE-2026-88289High7.5—2026-09-10GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the…
CVE-2026-88287High7.5—2026-09-10GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.
CVE-2026-88286High7.5—2026-09-10GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.
CVE-2026-18755High7.3—2026-08-04A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code.
CVE-2026-88282High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.
CVE-2026-88276High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.
CVE-2026-88275High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.
CVE-2026-88274High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.
CVE-2026-88273High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.
CVE-2026-88272High7.2—2026-09-10GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.
CVE-2026-88288Medium6.5—2026-09-10GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.
CVE-2026-88270Medium6.5—2026-09-10GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.
CVE-2026-88269Medium6.5—2026-09-10GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.
CVE-2026-88268Medium6.5—2026-09-10GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.
CVE-2026-88284Medium4.9—2026-09-10GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
CVE-2026-88283Medium4.9—2026-09-10GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
CVE-2026-88281Medium4.9—2026-09-10GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.
CVE-2026-88280Medium4.9—2026-09-10GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.
CVE-2026-88279Medium4.9—2026-09-10GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.

Samsung · 25 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21096Critical9.8—2026-09-09Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21095Critical9.8—2026-09-09Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21094High8.8—2026-09-09Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
CVE-2026-21091High7.8—2026-09-09Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21090High7.8—2026-09-09Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21089High7.8—2026-09-09Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21088High7.8—2026-09-09Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21087High7.8—2026-09-09Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
CVE-2026-21086High7.8—2026-09-09Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.
CVE-2026-21100High7.1—2026-09-09Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
CVE-2026-21104Medium6.7—2026-09-09Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21102Medium6.7—2026-09-09Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
CVE-2026-21101Medium6.7—2026-09-09Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
CVE-2026-21097Medium6.7—2026-09-09Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
CVE-2026-21093Medium6.7—2026-09-09Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21085Medium6.7—2026-09-09Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21103Medium6.1—2026-09-09Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
CVE-2026-21098Medium6.1—2026-09-09Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
CVE-2026-21113Medium5.5—2026-09-09Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
CVE-2026-21112Medium5.5—2026-09-09Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege.
CVE-2026-21108Medium5.5—2026-09-09Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
CVE-2026-21107Medium5.5—2026-09-09Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
CVE-2026-21105Medium5.5—2026-09-09Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
CVE-2026-21099Medium5.5—2026-09-09Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21092Medium5.3—2026-09-09Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

Rclone · 23 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88018Critical9.8—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88044Critical9.1—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-71312High8.0—2026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88045High7.5—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88017High7.3—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88016High7.1—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-71313Medium6.9—2026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-79781Medium6.5—2026-08-25rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys.
CVE-2026-79775Medium6.5—2026-08-25rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency.
CVE-2026-71311Medium6.4—2026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88014Medium6.3—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-71310Medium5.9—2026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88046Medium5.3—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-88015Medium5.3—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-79780Medium5.3—2026-08-25rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes.
CVE-2026-79779Medium5.3—2026-08-25rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects.
CVE-2026-79778Medium5.3—2026-08-25rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors.
CVE-2026-79776Medium5.3—2026-08-25rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler.
CVE-2026-88013Low3.7—2026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers.
CVE-2026-79783Low3.6—2026-08-25rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files.
CVE-2026-79782Low3.1—2026-08-25rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host.
CVE-2026-79777Low2.7—2026-08-25rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur.
CVE-2026-71309———2026-08-05rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Frappe · 22 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65974Critical9.9—2026-08-17ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72911Critical9.9—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-65822High7.6—2026-08-17ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72910High7.1—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-82634Medium6.5—2026-08-30Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-privileged users to render arbitrary Jinja templates by supplying raw template strings.
CVE-2026-72908Medium6.5—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72907Medium6.5—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72906Medium4.3—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-53761———2026-09-04Frappe CRM is an open-source customer relationship management tool.
CVE-2026-66003———2026-08-26Frappe is a full-stack web application framework written in Python and JavaScript.
CVE-2026-66002———2026-08-20Frappe is a full-stack web application framework.
CVE-2026-63654———2026-08-20Frappe is a full-stack web application framework.
CVE-2026-62315———2026-08-20Frappe is a full-stack web application framework.
CVE-2026-53569———2026-08-20Frappe is a full-stack web application framework.
CVE-2026-72909———2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-66000———2026-08-07Frappe is a full-stack web application framework.
CVE-2026-66058———2026-08-07Frappe is a full-stack web application framework.
CVE-2026-66059———2026-08-07Frappe is a full-stack web application framework.
CVE-2026-49391———2026-08-06Frappe is a full-stack web application framework.
CVE-2026-47765———2026-08-06Frappe is a full-stack web application framework.
CVE-2026-47194———2026-08-06Frappe is a full-stack web application framework.
CVE-2026-47185———2026-08-06Frappe is a full-stack web application framework.

Sourcecodester · 22 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86298High7.3—2026-09-07A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86290High7.3—2026-09-07A weakness has been identified in SourceCodester Online Voting System 1.0.
CVE-2026-86277High7.3—2026-09-07A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-86276High7.3—2026-09-07A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-86225High7.3—2026-09-06A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86224High7.3—2026-09-06A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86223High7.3—2026-09-06A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86222High7.3—2026-09-06A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86221High7.3—2026-09-06A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86220High7.3—2026-09-06A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86210High7.3—2026-09-06A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86209High7.3—2026-09-06A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86208High7.3—2026-09-06A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-86162High7.3—2026-09-06A vulnerability was determined in SourceCodester Online Voting System 1.0.
CVE-2026-86161High7.3—2026-09-06A vulnerability was found in SourceCodester Online Voting System 1.0.
CVE-2026-86159High7.3—2026-09-06A flaw has been found in SourceCodester Online Voting System 1.0.
CVE-2026-86293Medium6.5—2026-09-07A flaw has been found in SourceCodester Simple Traffic Offense System 1.0.
CVE-2026-86279Medium6.3—2026-09-07A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-86280Medium5.3—2026-09-07A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-86294Medium4.3—2026-09-07A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0.
CVE-2026-86281Medium4.3—2026-09-07A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.
CVE-2026-86278Medium4.3—2026-09-07A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0.

Tobit Laboratories Ag · 22 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54218———2026-08-07Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox.
CVE-2026-54217———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability.
CVE-2026-54216———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability.
CVE-2026-54215———2026-08-07Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter.
CVE-2026-54214———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Content-Type header in HTTP responses.
CVE-2026-54213———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is accessed.
CVE-2026-54212———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition.
CVE-2026-54211———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer overflow vulnerability in multiple form data parameters.
CVE-2026-54210———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition.
CVE-2026-54209———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path, writing the new password to the specified "Archive.ini" file.
CVE-2026-54208———2026-08-07Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content.
CVE-2026-54207———2026-08-07Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g., “\\Server\Share”).
CVE-2026-54206———2026-08-07Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc.
CVE-2026-54205———2026-08-07Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Share”).
CVE-2026-54204———2026-08-07Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Share”).
CVE-2026-54203———2026-08-07Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information.
CVE-2026-54202———2026-08-07Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality.
CVE-2026-54201———2026-08-07Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files.
CVE-2026-54200———2026-08-07Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc.
CVE-2026-54199———2026-08-07Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 H…
CVE-2026-12071———2026-08-07The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response.
CVE-2026-12070———2026-08-07Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc.

Concrete Cms · 21 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81907High7.1—2026-09-11Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function (POST /index.php/dashboard/system/express/entities/delete_entries) because the controller records but does not enforce…
CVE-2026-81910Medium6.5—2026-09-11Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style Values.
CVE-2026-81913Medium6.1—2026-09-11Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter.
CVE-2026-81912Medium5.7—2026-09-11Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature.
CVE-2026-81917Medium5.4—2026-09-11Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in…
CVE-2026-81911Medium5.4—2026-09-11Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog.
CVE-2026-81915Medium5.3—2026-09-11Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated.
CVE-2026-81918Medium4.8—2026-09-11Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block.
CVE-2026-68535Medium4.3—2026-09-11Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate() method on submitted data, which, for file-referencing blocks such as hero_image and gallery, is where the refere…
CVE-2026-81916Medium4.3—2026-09-11Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the dashboard route.
CVE-2026-68526Medium4.3—2026-09-11Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller (concrete/controllers/dialog/event/duplicate.php) submit() action, which duplicated a calendar event after checking only canAcc…
CVE-2026-81909———2026-09-11Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route (Process::alias() in concrete/controllers/backend/block/process.php).It does not verify that the referenced block is genuinely orphaned on the tar…
CVE-2026-81908———2026-09-11Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint.
CVE-2026-68528———2026-09-11Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting.
CVE-2026-18122———2026-09-11Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Missing Authorization; the Concrete CMS REST API's Express entry collection endpoint disabled the per-entry view permission check.
CVE-2026-81906———2026-09-11Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session.
CVE-2026-81905———2026-09-11Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password reset, and persistent login) in a single table with a type column, but the redemption path resolves a hash by value alone…
CVE-2026-18121———2026-09-11Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend calendar lightbox endpoint (/ccm/calendar/view_event/{bID}/{occurrence_id}) does not verify that the caller is permitted to view the calendar…
CVE-2026-84432———2026-09-10Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog controller (concrete/controllers/dialog/board/custom_slot.php) saveTemplate() action.
CVE-2026-68527———2026-09-10Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog (concrete/controllers/dialog/event/edit.php).
CVE-2026-81904———2026-09-08Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block.

Mervinpraison · 21 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48168Critical10.0—2026-08-05PraisonAI is a multi-agent teams system.
CVE-2026-55536Critical9.1—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55539High8.6—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55534High8.6—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55526High8.5—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55533High8.2—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55528High8.2—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55522High7.8—2026-08-05PraisonAI is a multi-agent teams system.
CVE-2026-55532High7.6—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55525High7.5—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55524High7.5—2026-08-05PraisonAI is a multi-agent teams system.
CVE-2026-55538High7.3—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55540High7.1—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55537High7.1—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55527High7.1—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55529Medium6.9—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55535Medium6.8—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55531Medium6.5—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55530Medium6.1—2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55541———2026-08-25PraisonAI is a multi-agent teams system.
CVE-2026-55523———2026-08-05PraisonAI is a multi-agent teams system.

Tanium · 21 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87030High8.5—2026-09-09Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87023High8.5—2026-09-09Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87034High8.3—2026-09-09Tanium addressed a SQL injection vulnerability in Comply.
CVE-2026-87075High8.1—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87036High8.1—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87084High7.7—2026-09-09Tanium addressed a server-side request forgery vulnerability in Enforce.
CVE-2026-87021High7.2—2026-09-09Tanium addressed an unauthorized code execution vulnerability in Comply.
CVE-2026-87072High7.1—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87088High7.0—2026-09-09Tanium addressed an unauthorized code execution vulnerability in Enforce.
CVE-2026-14505Medium6.6—2026-09-09Tanium addressed a path traversal vulnerability in Tanium Data Service.
CVE-2026-87073Medium6.5—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87047Medium6.3—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87048Medium5.4—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87037Medium5.4—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87033Medium5.4—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87025Medium5.4—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87046Medium4.3—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87035Medium4.3—2026-09-09Tanium addressed an information disclosure vulnerability in Comply.
CVE-2026-87032Medium4.3—2026-09-09Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-87019Medium4.3—2026-09-09Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-14892Medium4.3—2026-09-09Tanium addressed an improper access controls vulnerability in Tanium Server.

Siemens · 20 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50093Critical9.0—2026-09-08A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0…
CVE-2026-62650High8.8—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-80465High8.7—2026-09-03A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.27).
CVE-2026-67367High8.6—2026-09-08A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE Fleetmanager V4.0 (All versions < V4.0.1)…
CVE-2026-34223High8.2—2026-09-08A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versio…
CVE-2026-50064High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50063High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50062High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50061High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50060High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50059High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50058High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-62649High7.5—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-62648High7.5—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-62647High7.4—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-62654Medium6.8—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-62653Medium6.8—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-58113Medium6.1—2026-09-08A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607).
CVE-2026-62652Medium5.3—2026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
CVE-2026-54548Low3.3—2026-08-26kas is a setup tool for bitbake based projects.

Siyuan-note · 20 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86712High8.8—2026-09-08SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer.
CVE-2026-85175High8.8—2026-09-03SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/path_guard.go), which only blocks conf/conf.json by exact match and does not restrict the TLS private key (conf/ke…
CVE-2026-85174High8.8—2026-09-03SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds.
CVE-2026-87815High8.7—2026-09-09SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter.
CVE-2026-87807High7.5—2026-09-09siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter.
CVE-2026-85585High7.5—2026-09-04SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middleware that retains mutex entries for every unique request path without eviction.
CVE-2026-85584High7.5—2026-09-04SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attempt state using attacker-controlled usernames without enforcing capacity limits or eviction policies.
CVE-2026-85581High7.5—2026-09-04SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication.
CVE-2026-87814High7.3—2026-09-09SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the search asset preview feature that fails to escape indexed asset content before inserting it into the DOM using innerHTML.
CVE-2026-87813High7.3—2026-09-09SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping.
CVE-2026-87811High7.3—2026-09-09SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding.
CVE-2026-87812Medium6.8—2026-09-09SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping.
CVE-2026-87809Medium6.5—2026-09-09Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints.
CVE-2026-86192Medium6.5—2026-09-05SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint.
CVE-2026-85582Medium6.5—2026-09-04SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory.
CVE-2026-85580Medium6.5—2026-09-04SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems.
CVE-2026-87810Medium5.3—2026-09-09Siyuan before v3.8.2 contains an information disclosure vulnerability in the POST /api/search/fullTextSearchBlock endpoint that filters private blocks from results but returns unfiltered match counts.
CVE-2026-87808Medium4.9—2026-09-09SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh-x834-p3r7).
CVE-2026-86191Medium4.3—2026-09-05SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint that allows publish readers to enumerate private attribute view key definitions without verifying parent database visibi…
CVE-2026-85579Medium4.3—2026-09-04SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-accessible POST /api/transactions/undoState endpoint.

Itsourcecode · 19 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86268High7.3—2026-09-07A vulnerability was detected in itsourcecode School Management System 1.0.
CVE-2026-86675Medium6.3—2026-09-08A vulnerability was identified in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86517Medium6.3—2026-09-08A flaw has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86310Medium6.3—2026-09-07A vulnerability has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86309Medium6.3—2026-09-07A flaw has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86291Medium6.3—2026-09-07A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86270Medium6.3—2026-09-07A vulnerability has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86269Medium6.3—2026-09-07A flaw has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86267Medium6.3—2026-09-07A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0.
CVE-2026-86265Medium6.3—2026-09-07A vulnerability has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86245Medium6.3—2026-09-07A vulnerability was detected in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86236Medium6.3—2026-09-07A vulnerability has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86235Medium6.3—2026-09-07A flaw has been found in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86234Medium6.3—2026-09-07A vulnerability was detected in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86233Medium6.3—2026-09-07A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86232Medium6.3—2026-09-06A weakness has been identified in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86164Medium6.3—2026-09-06A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0.
CVE-2026-86163Medium6.3—2026-09-06A vulnerability was identified in itsourcecode Sales and Inventory System 1.0.
CVE-2026-85383Medium6.3—2026-09-04A flaw has been found in itsourcecode Sales and Inventory System 1.0.

N8n · 19 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85165Critical9.9—2026-09-03n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals.
CVE-2026-86083High8.8—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86076High8.8—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86073High7.6—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86075High7.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86074High7.1—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86082Medium6.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86079Medium6.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86078Medium6.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86077Medium6.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-85167Medium6.5—2026-09-03n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values…
CVE-2026-85166Medium6.5—2026-09-03n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes that execute an inline sub-workflow (e.g., the Workflow Tool node).
CVE-2026-86084Medium5.5—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86996Medium5.4—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86080Medium5.3—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86993Medium4.9—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86085Medium4.9—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86995Medium4.3—2026-09-08n8n is an open source workflow automation platform.
CVE-2026-86994Medium4.3—2026-09-08n8n is an open source workflow automation platform.

Palo Alto Networks · 19 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-0298High8.1—2026-08-13An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitr…
CVE-2026-0297High8.1—2026-08-13A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privil…
CVE-2026-0294High7.8—2026-08-13A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.
CVE-2026-0296High7.4—2026-08-13Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications.
CVE-2026-0295High7.0—2026-08-13A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.
CVE-2026-0289Medium6.5—2026-08-13A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
CVE-2026-0293Medium6.0—2026-08-13A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.
CVE-2026-0292Medium6.0—2026-08-13An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary n…
CVE-2026-0290Medium5.5—2026-08-13An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
CVE-2026-0291Medium4.4—2026-08-13An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Acc…
CVE-2026-0304———2026-09-10A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
CVE-2026-0303———2026-09-10A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
CVE-2026-0302———2026-09-10An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
CVE-2026-0310———2026-09-10A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (D…
CVE-2026-0309———2026-09-10A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.
CVE-2026-0308———2026-09-10A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.
CVE-2026-0307———2026-09-10Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux.
CVE-2026-0306———2026-09-10A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data.
CVE-2026-0305———2026-09-10An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials.

Mybb · 18 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45117Critical9.8—2026-08-18MyBB is free and open source forum software.
CVE-2026-45118Critical9.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45116High8.7—2026-08-18MyBB is free and open source forum software.
CVE-2026-45115High8.7—2026-08-18MyBB is free and open source forum software.
CVE-2026-45120Medium5.4—2026-08-18MyBB is free and open source forum software.
CVE-2026-46482Medium5.3—2026-08-18### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted value.
CVE-2026-45734Medium5.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45125Medium5.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45129Medium4.6—2026-08-18MyBB is free and open source forum software.
CVE-2026-45119Medium4.6—2026-08-18MyBB is free and open source forum software.
CVE-2026-47245Medium4.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45124Medium4.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45123Medium4.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45122Medium4.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45121Medium4.3—2026-08-18MyBB is free and open source forum software.
CVE-2026-45128Low3.5—2026-08-18MyBB is free and open source forum software.
CVE-2026-45127Low3.5—2026-08-18MyBB is free and open source forum software.
CVE-2026-45126Low3.5—2026-08-18MyBB is free and open source forum software.

Open-webui · 18 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87995High8.7—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87016High8.1—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87996High7.7—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87011High7.5—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87999High7.1—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87998High7.1—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87015Medium6.8—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-88006Medium6.5—2026-09-10Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-88005Medium6.5—2026-09-10Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-88002Medium6.5—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-88000Medium6.5—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87014Medium6.5—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-88001Medium5.0—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87997Medium4.3—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87994Medium4.3—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87017Medium4.3—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87013Medium4.3—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.
CVE-2026-87012Medium4.3—2026-09-09Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

Budibase · 17 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73300Critical9.6—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73305High8.8—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73410High8.5—2026-08-17Budibase is an open-source low-code platform.
CVE-2026-64657High8.4—2026-08-17Budibase is an open-source low-code platform.
CVE-2026-73303High8.2—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73408High7.6—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73406High7.5—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-54356High7.1—2026-08-17Budibase is an open-source low-code platform.
CVE-2026-73308Medium5.7—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73306Medium5.3—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73304Medium4.9—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73301Medium4.3—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-35219———2026-08-17Budibase is an open-source low-code platform.
CVE-2026-73302———2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73409———2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73407———2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73307———2026-08-12Budibase is an open-source low-code platform.

Erlang · 17 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55953High7.4—2026-07-27The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello.
CVE-2026-75538———2026-09-01An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up…
CVE-2026-74994———2026-09-01The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace.
CVE-2026-74835———2026-09-01The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request.
CVE-2026-73812———2026-09-01httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt.
CVE-2026-73276———2026-09-01Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities.
CVE-2026-73270———2026-09-01Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by requesting them with different casing, on deployments whose files…
CVE-2026-71562———2026-09-01Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits.
CVE-2026-71380———2026-09-01Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stallin…
CVE-2026-70409———2026-09-01Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits.
CVE-2026-70405———2026-09-01Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large.
CVE-2026-70399———2026-09-01Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large number of connections.
CVE-2026-66835———2026-09-01Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra slash.
CVE-2026-66357———2026-09-01httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines).
CVE-2026-59696———2026-09-01Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits.
CVE-2026-55951———2026-09-01The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server.
CVE-2026-59250———2026-07-27Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single…

Okta · 17 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78626High8.1—2026-09-08The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected…
CVE-2026-78623High7.7—2026-09-08The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration.
CVE-2026-78574High7.5—2026-09-08The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification.
CVE-2026-78627High7.3—2026-09-08The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property.
CVE-2026-78579Medium6.8—2026-09-08The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration.
CVE-2026-78630Medium6.7—2026-09-08The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands.
CVE-2026-78625Medium6.7—2026-09-08The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files.
CVE-2026-78550Medium6.6—2026-09-08The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session.
CVE-2026-78545Medium6.6—2026-09-08The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file.
CVE-2026-78622Medium6.0—2026-09-08The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges.
CVE-2026-78552Medium6.0—2026-09-08The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field.
CVE-2026-78620Medium5.9—2026-09-08The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents.
CVE-2026-78629Medium5.6—2026-09-08The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user.
CVE-2026-78631Medium5.3—2026-09-08The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion.
CVE-2026-78635Medium5.0—2026-09-08The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments.
CVE-2026-78624Medium4.9—2026-09-08The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload.
CVE-2026-78560Medium4.8—2026-09-08The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation.

Sap_se · 17 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44756Critical10.0—2026-09-08A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library.
CVE-2026-58240Critical9.8—2026-09-08SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration.
CVE-2026-76969Critical9.4—2026-09-08@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled.
CVE-2026-66768Critical9.0—2026-09-08SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system.
CVE-2026-76958High8.5—2026-09-08SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components.
CVE-2026-76967High7.8—2026-09-08SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup.
CVE-2026-66767High7.7—2026-09-08SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session un…
CVE-2026-76971Medium6.5—2026-09-08Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests.
CVE-2026-76968Medium6.5—2026-09-08SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state…
CVE-2026-44766Medium6.5—2026-09-08SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation.
CVE-2026-76959Medium4.6—2026-09-08SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page.
CVE-2026-76977Medium4.3—2026-09-08SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist.
CVE-2026-76963Medium4.3—2026-09-08Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information.
CVE-2026-76962Medium4.3—2026-09-08SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality.
CVE-2026-76961Low3.5—2026-09-08SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page.
CVE-2026-76960Low3.5—2026-09-08SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page.
CVE-2026-58234Low2.2—2026-09-08SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system res…

Open-reception · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48086Critical9.9—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48087Critical9.8—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48085Critical9.8—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48088Critical9.4—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48081High8.1—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48080High8.0—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48084High7.4—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48079High7.4—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48083Medium6.5—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48076Medium6.5—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48075Medium6.5—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48071Medium5.8—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48078Medium5.3—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48077Medium5.3—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48082Low3.7—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.
CVE-2026-48074Low2.7—2026-08-06OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform.

Rsyncproject · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70458High8.2—2026-08-13rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is in…
CVE-2026-70456High8.2—2026-08-13rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list.
CVE-2026-70460High8.1—2026-08-13rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options.
CVE-2026-53790High8.1—2026-08-13rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment va…
CVE-2026-53783High8.1—2026-08-13rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions by substituting a symlink f…
CVE-2026-70454High8.0—2026-08-13rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise inv…
CVE-2026-70464High7.5—2026-08-13rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggerin…
CVE-2026-70453High7.5—2026-08-13rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list.
CVE-2026-70452High7.4—2026-08-13rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation.
CVE-2026-53793High7.4—2026-08-13rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contain…
CVE-2026-53785High7.1—2026-08-13rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode.
CVE-2026-70462Medium6.5—2026-08-13rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSG_IO_TIMEOUT messages carrying non-positive (zero o…
CVE-2026-53792Medium6.5—2026-08-13rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block w…
CVE-2026-53788Medium6.5—2026-08-13rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters.
CVE-2026-53796Medium6.3—2026-08-13rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to r…
CVE-2026-53794Medium5.3—2026-08-13rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather than enforcing a zero-byte cap.

Academysoftwarefoundation · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68515High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-68513High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59981High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.
CVE-2026-59982High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59189High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59187High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59186High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59184High7.1—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-68514Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.
CVE-2026-61555Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59985Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59984Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-59983Medium5.5—2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVE-2026-62986Medium4.3—2026-08-25OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.
CVE-2026-65979———2026-08-25OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

Admidio · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47231High8.1—2026-08-12Admidio is an open-source user management solution.
CVE-2026-69091High7.5—2026-08-03Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode.
CVE-2026-47233Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47230Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47227Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47226Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-69092Medium6.5—2026-08-03Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response.
CVE-2026-47229Medium5.4—2026-08-12Admidio is an open-source user management solution.
CVE-2026-53760Medium5.2—2026-09-04Admidio is an open-source user management solution.
CVE-2026-47228Medium5.2—2026-08-12Admidio is an open-source user management solution.
CVE-2026-69090Medium4.9—2026-08-03Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations.
CVE-2026-69093Medium4.6—2026-08-03Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy).
CVE-2026-47234Medium4.4—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47232Medium4.3—2026-08-12Admidio is an open-source user management solution.
CVE-2026-69094Medium4.3—2026-08-03Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the save_temporary mode of mylist_function.php that allows authenticated users to hijack list configurations.

Baptistearno · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48765Critical9.9—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47705Critical9.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48763High8.2—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48767High7.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48766High7.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48495High7.1—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-42142High7.1—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48762Medium5.4—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48483Medium5.4—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-62865———2026-08-25Typebot is an open-source chatbot builder.
CVE-2026-62862———2026-08-25Typebot is an open-source chatbot builder.
CVE-2026-62861———2026-08-25TypeBot is a chatbot builder tool.
CVE-2026-48494———2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47704———2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47702———2026-08-11TypeBot is a chatbot builder tool.

Code-projects · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86180High7.3—2026-09-06A vulnerability has been found in code-projects Task Management System In PHP 1.0.
CVE-2026-86168High7.3—2026-09-06A security flaw has been discovered in code-projects Content Management System 1.0.
CVE-2026-85516High7.3—2026-09-04A vulnerability was detected in code-projects Vehicle Management System 1.0.
CVE-2026-85402High7.3—2026-09-04A vulnerability was detected in code-projects Doctor Appointment System 1.0.
CVE-2026-85399High7.3—2026-09-04A security flaw has been discovered in code-projects Hospital Information System 1.0.
CVE-2026-86518Medium6.3—2026-09-08A vulnerability has been found in code-projects Student Crud Operation 1.0.
CVE-2026-86519Medium5.3—2026-09-08A vulnerability was found in code-projects Student Crud Operation 1.0.
CVE-2026-86302Medium5.3—2026-09-07A vulnerability was found in code-projects Hospital Information System 1.0.
CVE-2026-86217Medium5.3—2026-09-06A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0.
CVE-2026-86179Medium5.3—2026-09-06A flaw has been found in code-projects Daily Expense Manager 1.0.
CVE-2026-85517Medium5.3—2026-09-04A flaw has been found in code-projects Vehicle Management System 1.0.
CVE-2026-85643Medium4.7—2026-09-04A flaw has been found in code-projects Online Shopping System 1.0.
CVE-2026-86216Medium4.3—2026-09-06A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0.
CVE-2026-86301Low3.5—2026-09-07A vulnerability has been found in code-projects Hospital Information System 1.0.
CVE-2026-86181Low3.5—2026-09-06A vulnerability was found in code-projects Task Management System 1.0.

Fortinet · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-26084Critical9.9—2026-09-08A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive in…
CVE-2026-84390Critical9.8—2026-09-11A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>
CVE-2026-26035Critical9.8—2026-08-12An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow…
CVE-2026-84393High8.1—2026-09-08A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>
CVE-2026-70468High8.1—2026-08-12A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5…
CVE-2026-70465High8.1—2026-08-12A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter…
CVE-2026-84387High7.2—2026-09-08A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthoriz…
CVE-2026-84391Medium6.5—2026-09-08A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>
CVE-2026-84385Medium5.4—2026-09-08A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSO…
CVE-2026-70466Medium5.3—2026-08-12A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper acc…
CVE-2026-84386Medium5.1—2026-09-08A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.
CVE-2026-22575Medium4.9—2026-09-08An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, Forti…
CVE-2026-70467Low3.8—2026-08-12A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7…
CVE-2026-84389Low3.1—2026-09-08A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
CVE-2026-84392Low2.7—2026-09-08A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5…

Oisf · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45764Critical9.1—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45770High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45769High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45768High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45766High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45765High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45762High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45759High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-46387High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45747High7.5—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45752Medium5.9—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45751Medium5.9—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45763Medium5.9—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45767Medium4.4—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
CVE-2026-45761Low3.3—2026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.

@Xmldom · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83619———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83618———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83617———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83616———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83615———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83614———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83613———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83612———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83611———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83610———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83609———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83608———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83607———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
CVE-2026-83606———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.

Commvault · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77098Critical9.8—2026-09-08Private Metrics Server contained an SQL injection condition affecting database operations.
CVE-2026-77092Critical9.8—2026-09-08Content Extractor contained a deserialization of untrusted data issue affecting privilege management.
CVE-2026-77089Critical9.8—2026-09-08Command Center API contained an authentication bypass issue affecting privilege management.
CVE-2026-13739Critical9.8—2026-08-11A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs.
CVE-2026-13738Critical9.8—2026-08-11CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations.
CVE-2026-13737Critical9.8—2026-08-11CommServe contained an allowlist bypass vulnerability affecting command execution authorization.
CVE-2026-77106High8.8—2026-09-08Cvlaunchd contained a missing authorization issue affecting command execution authorization.
CVE-2026-77105High8.8—2026-09-08CommServe contained a cryptographic signature verification issue affecting privilege management.
CVE-2026-77097High8.2—2026-09-08Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability.
CVE-2026-77091High7.8—2026-09-08DataCube contained a path traversal issue affecting security feature enforcement.
CVE-2026-77104High7.5—2026-09-08CommServe contained a path traversal issue affecting information disclosure.
CVE-2026-77103High7.5—2026-09-08CommServe contained an authentication bypass issue affecting access authorization and information disclosure.
CVE-2026-77102High7.5—2026-09-08CommServe contained a heap-based buffer overflow issue affecting service availability.
CVE-2026-77101High7.5—2026-09-08CommServe contained a stack-based buffer overflow issue affecting service availability.

Xenforo · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73315High8.6—2026-09-08XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a…
CVE-2026-73316High7.5—2026-09-08XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check.
CVE-2026-73314High7.5—2026-09-08XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported auth_al…
CVE-2026-73312High7.4—2026-09-08XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired.
CVE-2026-73311High7.4—2026-09-08XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code.
CVE-2026-73309High7.4—2026-09-08XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client_secret and code_verifier parameters.
CVE-2026-74239High7.2—2026-09-08XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extr…
CVE-2026-73313Medium6.8—2026-09-08XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential dur…
CVE-2026-73321Medium6.5—2026-09-08XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags.
CVE-2026-73320Medium6.1—2026-09-08XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint.
CVE-2026-73319Medium6.1—2026-09-08XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the board origin by crafting a malicious javascript: URI that bypa…
CVE-2026-73310Medium5.9—2026-09-08XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded…
CVE-2026-73318Low3.8—2026-09-08XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions.
CVE-2026-73317Low2.7—2026-09-08XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying a…

Discourse · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72730High8.7—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72731High7.1—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72726Medium6.5—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72720Medium6.4—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72728Medium6.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72725Medium5.4—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72723Medium5.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72721Medium5.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72732Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72724Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72722Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72729———2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72727———2026-08-10Discourse is an open-source discussion platform.

Ellite · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77348High8.2—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-61641High8.1—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-54598High7.5—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-77353Medium4.6—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-77352Medium4.3—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-50199Medium4.3—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-50198Medium4.3—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-77351Low3.5—2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-61640———2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-61639———2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-61638———2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-54600———2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.
CVE-2026-54599———2026-08-31Wallos is an open-source, self-hostable personal subscription tracker.

Mediatek, Inc. · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-20517Medium6.7—2026-09-07In geniezone, there is a possible escalation of privilege due to use after free.
CVE-2026-20512Medium6.7—2026-09-07In Audio HAL, there is a possible escalation of privilege due to improper input validation.
CVE-2026-20511Medium6.7—2026-09-07In SurfaceFlinger, there is a possible memory corruption due to use after free.
CVE-2026-20510Medium6.7—2026-09-07In camera middleware, there is a possible escalation of privilege due to double free.
CVE-2026-20509Medium6.7—2026-09-07In Power HAL, there is a possible out of bounds write due to a missing bounds check.
CVE-2026-20508Medium6.7—2026-09-07In Power HAL, there is a possible escalation of privilege due to type confusion.
CVE-2026-20507Medium6.7—2026-09-07In Audio HAL, there is a possible escalation of privilege due to use after free.
CVE-2026-20506Medium6.7—2026-09-07In Audio HAL, there is a possible escalation of privilege due to use after free.
CVE-2026-20516Medium5.5—2026-09-07In MiracastService, there is a possible escalation of privilege due to a confused deputy.
CVE-2026-20515Medium5.5—2026-09-07In gpu, there is a possible system crash due to use after free.
CVE-2026-20518Medium4.4—2026-09-07In geniezone, there is a possible information disclosure due to a missing bounds check.
CVE-2026-20514Medium4.4—2026-09-07In Audio HAL, there is a possible information disclosure due to a missing permission check.
CVE-2026-20513Medium4.4—2026-09-07In Audio HAL, there is a possible information disclosure due to improper input validation.

Netflix · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55166Critical9.9—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71308High8.1—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71307High7.7—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71303High7.7—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-70666High7.4—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71417High7.3—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71317Medium6.5—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-70667Medium6.3—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-55163Medium6.3—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-55162Medium6.3—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-55164Medium4.9—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-55165Medium4.8—2026-08-18Lemur manages TLS certificate creation.
CVE-2026-71322Medium4.3—2026-08-18Lemur manages TLS certificate creation.

Openstack · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71193Critical9.6—2026-08-12In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only.
CVE-2026-71194Medium6.8—2026-08-12In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests.
CVE-2026-90461Medium6.3—2026-09-11OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.
CVE-2026-54422Medium5.5—2026-07-24In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.
CVE-2026-71201Medium5.0—2026-08-05In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.
CVE-2026-74248Medium4.3—2026-08-14OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization.
CVE-2026-90460———2026-09-11An issue was discovered in OpenStack Keystone before 29.0.3.
CVE-2026-80183———2026-08-27In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the GET /v3/ro…
CVE-2026-80182———2026-08-25In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and ou…
CVE-2026-76878———2026-08-19In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false.
CVE-2026-71192———2026-08-05In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true.
CVE-2026-71191———2026-08-05In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests.
CVE-2026-71190———2026-08-05In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS).

Sap · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27690Critical9.1—2026-07-14Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization.
CVE-2026-44745High8.1—2026-07-14SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations.
CVE-2026-58230High7.0—2026-08-11SAP Approuter does not sufficiently validate certain token content under specific configurations.
CVE-2026-66760Medium6.4—2026-08-11SAP Approuter does not correctly validate client certificates in certain callback flows.
CVE-2026-66777Medium5.9—2026-08-11SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations.
CVE-2026-66776Medium5.9—2026-08-11SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions.
CVE-2026-58238Medium5.9—2026-08-11SAP Approuter does not sufficiently handle certain requests under specific conditions.
CVE-2026-58237Medium5.9—2026-08-11WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality.
CVE-2026-66778Medium5.3—2026-08-11SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components.
CVE-2026-66775Medium4.3—2026-08-11SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default.
CVE-2026-66761Medium4.3—2026-08-11SAP Approuter does not enforce sufficient flow control in certain functionality.
CVE-2026-66774Low3.7—2026-08-11SAP Approuter does not consistently handle certain error conditions.
CVE-2026-58239Low3.7—2026-08-11SAP Approuter does not sufficiently validate tenant context in inbound requests.

Yeswiki · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46670Critical9.8—2026-08-11YesWiki is a wiki system written in PHP.
CVE-2026-52766Critical9.1—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52775High8.8—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52771High8.3—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52769High8.3—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52767High8.2—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52770High7.5—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52763Medium6.5—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52774Medium6.1—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52773Medium6.1—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52772Medium5.5—2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52777———2026-09-05YesWiki is a wiki system written in PHP.
CVE-2026-52762———2026-09-05YesWiki is a wiki system written in PHP.

Arcadedata · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76224High8.8—2026-08-19ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in its Gremlin query engine.
CVE-2026-75853High8.8—2026-08-18ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authentication (SASL PLAIN) but performs no authorization: it never checks database access permissions (canAccessToDatabase) and never b…
CVE-2026-75855High8.7—2026-08-18ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured…
CVE-2026-76225High7.7—2026-08-19ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs.
CVE-2026-75842High7.7—2026-08-18ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM clause that allows authenticated users to read local files.
CVE-2026-75840High7.5—2026-08-18ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names.
CVE-2026-67340High7.2—2026-08-01ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to the allowed packages.
CVE-2026-76223High7.1—2026-08-19ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce the UPDATE_SCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library.
CVE-2026-75846High7.1—2026-08-18ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement.
CVE-2026-75845Medium6.3—2026-08-18ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP server-level tool.
CVE-2026-75841Medium4.3—2026-08-18ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory.
CVE-2026-75850Medium4.2—2026-08-18ArcadeDB before 26.8.1 fails to bind the authenticated principal (setCurrentUser) on its batch and time-series HTTP handlers.

Asus · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75811———2026-09-08Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing cri…
CVE-2026-75810———2026-09-08Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts (SMIs).
CVE-2026-75809———2026-09-08Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe config…
CVE-2026-75808———2026-09-08Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authentication and allocating an unrestricted amount…
CVE-2026-19397———2026-09-08Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session.
CVE-2026-18023———2026-09-08Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verific…
CVE-2026-16006———2026-09-08Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially provi…
CVE-2026-16005———2026-09-08Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash (BS…
CVE-2026-16004———2026-09-08Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification.
CVE-2026-16003———2026-09-08Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' S…
CVE-2026-12962———2026-09-08A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the…
CVE-2026-19398———2026-08-27An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.R…

Freerdp · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67305High8.8—2026-08-01FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without validating the server-provided size against the destination buf…
CVE-2026-67304High7.5—2026-08-01FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails.
CVE-2026-67301High7.5—2026-08-01FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders.
CVE-2026-67299High7.5—2026-08-01FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when AsyncUpdate is enabled (e.g.
CVE-2026-67297High7.5—2026-08-01FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body().
CVE-2026-67296High7.5—2026-08-01FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation.
CVE-2026-85089Medium6.5—2026-09-03FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved padding fields.
CVE-2026-67292Medium6.5—2026-08-01FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gateway/websocket.c).
CVE-2026-67294Medium5.9—2026-08-01FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-side server TLS authentication.
CVE-2026-85090Medium5.4—2026-09-03FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during AVC444 chroma plane reconstruction.
CVE-2026-67306Medium5.4—2026-08-01FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planar_decompress_plane_rle and planar_decompress_plane_rle_only in libfreerdp/codec/planar.c.
CVE-2026-67302Medium4.3—2026-08-01FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client.

Orval-labs · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62680High7.1—2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-72717———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-72716———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71871———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71869———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71868———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71867———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71866———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71865———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-71864———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-62682———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.
CVE-2026-62681———2026-08-19Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications.

Renovatebot · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88881High8.6—2026-09-10Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configur…
CVE-2026-88880High8.6—2026-09-10Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests.
CVE-2026-88883High7.7—2026-09-10Renovate is an automated dependency update tool.
CVE-2020-37267High7.5—2026-08-19Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction.
CVE-2019-25766High7.5—2026-08-19Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios.
CVE-2026-88885High7.0—2026-09-10Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode.
CVE-2026-76233Medium6.7—2026-08-19Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam deps update commands without proper sanitization.
CVE-2026-76232Medium6.7—2026-08-19Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to helm registry login commands without proper sanitization.
CVE-2026-76231Medium6.7—2026-08-19Renovate versions from 32.135.0 before 40.33.0 contain a command injection vulnerability in the hermit manager where user-provided dependency names are appended to install and uninstall commands without proper sanitization.
CVE-2026-76230Medium6.7—2026-08-19Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization.
CVE-2026-76229Medium6.7—2026-08-19Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization.
CVE-2026-88884Medium5.8—2026-09-10Renovate is a dependency update automation tool.

Ash-project · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78230———2026-09-08AshAi exposes Ash read actions to language-model tool calls.
CVE-2026-78216———2026-09-08AshLua exposes Ash read actions to Lua scripts run through an eval action.
CVE-2026-82710———2026-09-08Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject terminal control sequences into the output of mix usage_rules.search_docs.
CVE-2026-82758———2026-09-07Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token.
CVE-2026-82757———2026-09-07Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses.
CVE-2026-82756———2026-09-07Improper Encoding or Escaping of Output vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header.
CVE-2026-82754———2026-09-07Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix.
CVE-2026-82586———2026-09-07Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lua script to read attributes that are not on the exposed-field allow-list.
CVE-2026-82584———2026-09-07Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmation prompt.
CVE-2026-81638———2026-09-07Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit several distinct string spellings of the same identifier.
CVE-2026-82752———2026-09-05Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it.

Canonical · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66897Critical9.9—2026-08-24A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root.
CVE-2026-66898Critical9.9—2026-08-12A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations.
CVE-2026-63300Critical9.9—2026-08-12An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on a restricted project to bypass project-level security restr…
CVE-2026-63299Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits.
CVE-2026-63298Critical9.9—2026-08-12An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives.
CVE-2026-63297Critical9.9—2026-08-12An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies.
CVE-2026-63296Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration.
CVE-2026-63294Critical9.9—2026-08-12A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system.
CVE-2026-62420Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations.
CVE-2026-16033High8.5—2026-08-12A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation.
CVE-2026-63295Medium4.3—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions.

Coturn · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68553High7.1—2026-08-19Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-65981High7.1—2026-07-31Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-68555Medium6.5—2026-08-19Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73216Medium6.5—2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-68552Medium5.3—2026-08-19Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-68554———2026-08-19Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73215———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73214———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73213———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73212———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-62959———2026-07-31Coturn is a free open source implementation of TURN and STUN Server.

Huawei · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49310High8.6—2026-09-09Permission control vulnerability in the event notification module.
CVE-2026-49314High7.3—2026-09-09OOB write vulnerability in the rendering and composition module.
CVE-2026-49315High7.1—2026-09-09DoS vulnerability in the input device module.
CVE-2026-49311Medium6.2—2026-09-09Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41987Medium6.2—2026-09-09Permission control vulnerability in the app management module.
CVE-2026-81646Medium5.9—2026-09-09Out-of-bounds read vulnerability in the graphics module.
CVE-2026-49313Medium5.5—2026-09-09Permission control vulnerability in the app lock module.
CVE-2026-81647Medium5.3—2026-09-09Out-of-bounds read vulnerability in the graphics module.
CVE-2026-49309Medium4.8—2026-09-09Permission control vulnerability in the Settings module.
CVE-2026-81644Medium4.3—2026-09-09DoS vulnerability in the preview service module.
CVE-2026-49312Medium4.0—2026-09-09Permission control vulnerability in the window module.

Netgear · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11814Medium6.8—2026-08-11A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of th…
CVE-2026-9215Medium6.7—2026-09-08A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations wi…
CVE-2026-11739Medium6.4—2026-08-11A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality…
CVE-2026-11736Medium4.9—2026-08-11A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
CVE-2026-11735Medium4.9—2026-08-11A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-11733Medium4.9—2026-08-11A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
CVE-2026-9214Medium4.5—2026-08-11Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVE-2026-11737Medium4.5—2026-08-11Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
CVE-2026-11738Medium4.4—2026-08-11Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVE-2026-9216Low3.5—2026-09-08An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI.
CVE-2026-11734Low2.7—2026-08-11A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Strongswan · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78133High7.5—2026-09-11libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
CVE-2026-78132High7.5—2026-09-11strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
CVE-2026-78130High7.5—2026-09-11strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
CVE-2026-78134High7.1—2026-09-11strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.
CVE-2026-78129Medium5.9—2026-09-11strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVE-2026-78126Medium5.9—2026-09-11strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
CVE-2026-78123Medium5.9—2026-09-11strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
CVE-2026-78135Medium5.6—2026-09-11libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.
CVE-2026-78131Low3.7—2026-09-11strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CVE-2026-78127Low3.7—2026-09-11libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
CVE-2026-78124Low3.7—2026-09-11strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

Thephpleague · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2024-58382High7.5—2026-09-09league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to cause denial of service.
CVE-2026-86435High7.5—2026-09-07commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions.
CVE-2026-86434High7.5—2026-09-07league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNormalizer::normalize(), which restarts its numeric-suffix search from 1 on every slug collision, resulting in O(K^2)…
CVE-2026-86433High7.5—2026-09-07commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning.
CVE-2026-86430High7.5—2026-09-07league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input.
CVE-2026-86429High7.5—2026-09-07The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension.
CVE-2026-86428High7.5—2026-09-07commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes.
CVE-2026-71488High7.5—2026-08-06league/commonmark is a PHP library for parsing and rendering CommonMark Markdown.
CVE-2026-86431High7.2—2026-09-07league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension.
CVE-2026-71478Medium6.1—2026-08-06league/commonmark is a PHP library for parsing and rendering CommonMark Markdown.
CVE-2026-86432Medium5.3—2026-09-07commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag.

Arm Ltd · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9034High7.8—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operatio…
CVE-2026-7477High7.8—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…
CVE-2026-7476High7.8—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing o…
CVE-2026-5729High7.8—2026-09-08Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory.
CVE-2026-9040High7.7—2026-09-08A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing…
CVE-2026-0860High7.5—2026-09-08Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory pro…
CVE-2026-12387Medium5.1—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…
CVE-2026-11891Medium5.1—2026-09-08Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to…
CVE-2026-0001Medium4.4—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…
CVE-2026-12285Medium4.0—2026-09-08Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

Aws · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89049Critical9.9—2026-09-10A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms mi…
CVE-2026-87911Critical9.6—2026-09-09An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a sel…
CVE-2026-85781High8.7—2026-09-04Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion o…
CVE-2026-85012High8.0—2026-09-03Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in…
CVE-2026-85028High7.8—2026-09-03Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might allow local users to execute arbitrary code with root privil…
CVE-2026-89065High7.1—2026-09-11Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the e…
CVE-2026-89090Medium5.9—2026-09-11An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response fr…
CVE-2026-87913Medium5.9—2026-09-10A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state c…
CVE-2026-87912Medium5.9—2026-09-10A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and…
CVE-2026-85788Medium5.5—2026-09-09Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQ…

Cisa · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-90456High8.1—2026-09-11An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password.
CVE-2026-90449Medium6.5—2026-09-11When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first.
CVE-2026-90448Medium6.5—2026-09-11A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed.
CVE-2026-90457Medium6.2—2026-09-11The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local us…
CVE-2026-90451Medium5.9—2026-09-11An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component.
CVE-2026-90452Medium5.3—2026-09-11Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate.
CVE-2026-90454Medium4.3—2026-09-11A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, an…
CVE-2026-90450Medium4.3—2026-09-11The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny.
CVE-2026-90455Low3.7—2026-09-11A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component.
CVE-2026-90453Low3.5—2026-09-11A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin.

Jenkins · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84650High8.8—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, t…
CVE-2026-84648High8.8—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timestamp) resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers in cont…
CVE-2026-84645High8.8—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins (such as the global configuration and jobs) can appear as nested field va…
CVE-2026-84652High7.3—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me" cookie, allowing attackers able to serve content on the same site as Jenkins to set a known sessi…
CVE-2026-70429Medium6.5—2026-08-05Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups with names that case-insensitively match other characters to…
CVE-2026-84651Medium6.3—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submi…
CVE-2026-84646Medium4.3—2026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.
CVE-2026-70428Medium4.3—2026-08-05Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations o…
CVE-2026-70427Medium4.3—2026-08-05Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide cra…
CVE-2026-70430Low2.7—2026-08-05Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbit…

Klever-io · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54755Critical9.6—2026-08-28Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-54754Critical9.6—2026-08-28Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-52880High7.5—2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-52879High7.5—2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-52878High7.5—2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-47249High7.5—2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-49343Medium5.9—2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-55764———2026-08-28Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-55763———2026-08-28Klever-Go is the Go implementation of the Klever blockchain protocol.
CVE-2026-58262———2026-08-07Klever-Go is the Go implementation of the Klever blockchain protocol.

Openpanel-dev · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85610High8.8—2026-09-04OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the native JavaScript Function constructor through mathjs matrix o…
CVE-2026-85614High8.6—2026-09-04OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL parameter with no private IP filtering or DNS-rebinding protect…
CVE-2026-88890High8.5—2026-09-10OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers before interpolating them into ClickHouse WHERE clauses.
CVE-2026-88891High8.3—2026-09-10OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data.
CVE-2026-85613High8.2—2026-09-04OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint GET /misc/favicon that allows remote attackers to execute scripts by supplying an SVG file URL.
CVE-2026-88893High7.5—2026-09-10OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers.
CVE-2026-85609High7.5—2026-09-04Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in the GET /tools/site-checker endpoint (apps/api/src/controllers/tools.controller.ts).
CVE-2026-85615Medium6.4—2026-09-04Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to the authorized projectId.
CVE-2026-85611Medium6.4—2026-09-04OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to scope dashboard queries to the caller's project.
CVE-2026-88892Medium5.0—2026-09-10In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard (apps/api/src/utils/safe-fetch.ts).

Roundcube · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-74997High8.8—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values.
CVE-2026-74998High7.2—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.
CVE-2026-75002High7.1—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection.
CVE-2026-75010Medium6.4—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via crafted session data.
CVE-2026-75006Medium5.8—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts.
CVE-2026-75003Medium5.8—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation.
CVE-2026-75000Medium5.8—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remote image blocking bypass, which in turn may lead to information disclosure or privilege escalation.
CVE-2026-75007Medium5.4—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.
CVE-2026-74999Medium5.4—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS.
CVE-2026-75004Medium4.3—2026-08-17In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypass via a crafted rule name in a Sieve script.

Silabs.com · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19293High8.8—2026-08-13SMP security request (from peripheral) does not include the maximum encryption key size supported.
CVE-2026-19292High8.8—2026-08-13Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier.
CVE-2026-19291High8.8—2026-08-13Bluetooth re-pairing with an existing device can use a lower security level.
CVE-2026-16101High8.8—2026-08-13Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device.
CVE-2026-16769———2026-09-08An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917.
CVE-2026-65936———2026-08-13A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.  See vulnerability B-E4 in the related paper below.
CVE-2026-65935———2026-08-13Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.  See vulnerability B-E3 in the related paper below.
CVE-2026-65934———2026-08-13An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E10 in the related paper below.
CVE-2026-65933———2026-08-13A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information.
CVE-2026-65932———2026-08-13The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service.

Tenda · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86152Critical10.0—2026-09-06A flaw has been found in Tenda CP3 27.5.57.101.
CVE-2026-86167Critical9.9—2026-09-06A vulnerability was identified in Tenda HG10 300001138.
CVE-2026-86165Critical9.8—2026-09-06A vulnerability was found in Tenda HG10 300001138.
CVE-2026-86153Critical9.1—2026-09-06A vulnerability has been found in Tenda CP3 27.5.57.101.
CVE-2026-86151Critical9.1—2026-09-06A vulnerability was detected in Tenda CP3 27.5.57.101.
CVE-2026-86149Critical9.1—2026-09-05A weakness has been identified in Tenda CP3 27.5.57.101.
CVE-2026-86148Critical9.1—2026-09-05A security flaw has been discovered in Tenda CP3 27.5.57.101.
CVE-2026-86166High8.8—2026-09-06A vulnerability was determined in Tenda HG10 300001138.
CVE-2026-86300High7.3—2026-09-07A flaw has been found in Tenda AC9 15.03.05.14.
CVE-2026-86150Medium4.1—2026-09-05A security vulnerability has been detected in Tenda CP3 27.5.57.101.

Tesseract-ocr · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88053High7.8—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88052High7.8—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88051High7.8—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88047High7.8—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88048High7.1—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88054Medium5.5—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88050Medium5.5—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-88049Medium5.5—2026-09-10Tesseract is an open source OCR engine.
CVE-2026-73067———2026-08-11Tesseract is an open source OCR engine.
CVE-2026-73066———2026-08-11Tesseract is an open source OCR engine.

Tryghost · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70594Medium6.7—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70593Medium6.6—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70592Medium5.5—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70588Medium5.0—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70590Medium4.8—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70589Medium4.8—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70596Medium4.3—2026-08-05Ghost is a Node.js content management system.
CVE-2026-70591Medium4.1—2026-08-04Ghost is a Node.js content management system.
CVE-2026-70595Medium4.0—2026-08-05Ghost is a Node.js content management system.
CVE-2026-25552Low3.7—2026-07-31Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration.

Zcashfoundation · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52829High7.5—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52733Medium6.5—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52731Medium6.5—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52739Medium5.9—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52737Medium5.3—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52734Medium5.3—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52732Medium5.3—2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52738———2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52736———2026-08-18ZEBRA is a Zcash node written entirely in Rust.
CVE-2026-52735———2026-08-18ZEBRA is a Zcash node written entirely in Rust.

Decidim · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45414High8.5—2026-08-06Decidim is a participatory democracy framework.
CVE-2026-45378High7.5—2026-08-06Decidim is a participatory democracy framework.
CVE-2026-45377Medium6.5—2026-07-31Decidim is a participatory democracy framework.
CVE-2026-45573Medium6.4—2026-08-06Decidim is a participatory democracy framework.
CVE-2026-45415Medium6.0—2026-08-06Decidim is a participatory democracy framework.
CVE-2026-45376Medium5.5—2026-07-31Decidim is a participatory democracy framework.
CVE-2026-45086Medium5.4—2026-07-31Decidim is a participatory democracy framework.
CVE-2026-45330Medium4.9—2026-07-31Decidim is a participatory democracy framework.
CVE-2026-45572Medium4.8—2026-08-06Decidim is a participatory democracy framework.

Elastic · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82302High8.1—2026-09-03Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).
CVE-2026-78583High8.1—2026-09-03Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153).
CVE-2024-14047High7.2—2026-09-01A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users.
CVE-2026-82299Medium6.5—2026-09-03Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).
CVE-2026-78602Medium5.3—2026-09-02Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information disclosure via Path Traversal (CAPEC-126).
CVE-2026-82298Medium4.3—2026-09-03Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).
CVE-2026-78596Medium4.3—2026-09-03Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122).
CVE-2026-78595Medium4.3—2026-09-03Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122).
CVE-2026-78593Medium4.3—2026-09-03An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting i…

Hmbown · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75913Critical9.3—2026-08-18CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerability in the git_show tool.
CVE-2026-75856High8.6—2026-08-18CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks.
CVE-2026-75911High7.8—2026-08-18CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml f…
CVE-2026-75858High7.8—2026-08-18CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vulnerability in the rlm_eval tool.
CVE-2026-75915High7.5—2026-08-18CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_execution tool that fails to scrub parent process environment variables before spawning Node.js.
CVE-2026-75914High7.5—2026-08-18CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files.
CVE-2026-75859High7.5—2026-08-18CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system.
CVE-2026-75912High7.4—2026-08-18CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_blame tool that allows attackers to read arbitrary files by injecting git options into the unvalidated rev parameter.
CVE-2026-75857High7.0—2026-08-18CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Auto.

Honojs · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84365Medium6.5—2026-09-01Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-84363Medium5.9—2026-09-01Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-81888Medium5.4—2026-08-31@hono/oauth-providers is Authentication middleware for Hono.
CVE-2026-84364Medium5.3—2026-09-01Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-73565Medium5.3—2026-08-13@hono/node-server allows running the Hono application on Node.js.
CVE-2026-69207Medium5.3—2026-08-07Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-71848Medium5.3—2026-08-07Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-71850Medium4.8—2026-08-07Hono is a Web application framework that provides support for any JavaScript runtime.
CVE-2026-71849Low3.7—2026-08-07Hono is a Web application framework that provides support for any JavaScript runtime.

Ivanti · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12650Critical9.9—2026-09-08A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12647Critical9.9—2026-09-08A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12646Critical9.9—2026-09-08A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12645Critical9.9—2026-09-08A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12745Critical9.8—2026-09-08A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
CVE-2026-12744Critical9.8—2026-09-08A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
CVE-2026-18851High8.8—2026-09-08Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.
CVE-2026-12651High8.8—2026-09-08A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12648High8.8—2026-09-08A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Knowns-dev · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88899Critical9.8—2026-09-10knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint.
CVE-2026-86543Critical9.8—2026-09-07knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations.
CVE-2026-88937High8.8—2026-09-10knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root.
CVE-2026-86775High8.6—2026-09-09knowns (npm package) versions <= 0.29.1 contain a path traversal vulnerability in the Document API.
CVE-2026-88939High8.3—2026-09-10knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions.
CVE-2026-86544High8.1—2026-09-07knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations.
CVE-2026-86540High7.8—2026-09-07knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file.
CVE-2026-88938Medium6.5—2026-09-10knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host.
CVE-2026-88940Medium5.3—2026-09-10knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem.

Openvpn · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82325———2026-09-07A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
CVE-2026-84732———2026-09-07Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow
CVE-2026-84256———2026-09-07An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject
CVE-2026-84226———2026-09-07OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps
CVE-2026-82312———2026-09-07OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects
CVE-2026-81830———2026-09-07The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
CVE-2026-81738———2026-09-07OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
CVE-2026-78221———2026-09-07An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs.
CVE-2026-78043———2026-09-07The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths

Spring · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47884Critical9.8—2026-08-27Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly specified.
CVE-2026-47879High7.7—2026-08-27Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor.
CVE-2026-47889High7.5—2026-08-27A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute.
CVE-2026-47888High7.5—2026-08-27A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame.
CVE-2026-47886High7.5—2026-08-27Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or BigInteger operand and a large exponent v…
CVE-2026-47885High7.5—2026-08-27The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1.
CVE-2026-47887Medium6.1—2026-08-27A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect.
CVE-2026-47883Medium6.1—2026-08-27UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns.
CVE-2026-47880Medium5.4—2026-08-27A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or json__TypeId__ which are copied verbatim into the Spring Integratio…

Traefik · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88877Critical9.8—2026-09-10Traefik is a HTTP reverse proxy and load balancer.
CVE-2026-88008Critical9.1—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88007Critical9.1—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88009High8.2—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88879High8.2—2026-09-10Traefik is an HTTP reverse proxy and load balancer.
CVE-2026-88011High8.1—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88004High7.4—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88012Medium5.3—2026-09-10Traefik is an open source HTTP reverse proxy and load balancer.
CVE-2026-88878Medium5.3—2026-09-10Traefik is an HTTP reverse proxy and load balancer.

Weblateorg · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55228High8.1—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-61792High7.7—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-62326Medium6.5—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-77507Medium5.3—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-61790Medium4.4—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-62249Medium4.3—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-55227Medium4.3—2026-08-26Weblate is a web-based localization tool.
CVE-2026-77573Low3.5—2026-08-26Weblate is a web-based continuous localization platform used to manage software translations.
CVE-2026-77508Low3.5—2026-08-26Weblate is a web based localization tool.

Yamcs · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55565Critical9.9—2026-08-28Yamcs is a mission control framework.
CVE-2026-55559Critical9.8—2026-08-28Yamcs is a mission control framework.
CVE-2026-55511Critical9.1—2026-08-28Yamcs is a mission control framework.
CVE-2026-55521High8.8—2026-08-28Yamcs is a mission control framework.
CVE-2026-55552High7.5—2026-08-28Yamcs is a mission control framework.
CVE-2026-55549Medium6.5—2026-08-28Yamcs is a mission control framework.
CVE-2026-55545Medium6.5—2026-08-28Yamcs is a mission control framework.
CVE-2026-55566Medium4.3—2026-08-28Yamcs is a mission control framework.
CVE-2026-55547Medium4.3—2026-08-28Yamcs is a mission control framework.

Eclipse Foundation · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86464———2026-09-08In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included insecure default configurations and credentials for security-sensitive services.
CVE-2026-84197———2026-09-08In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the…
CVE-2026-19203———2026-09-08A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.
CVE-2026-12611———2026-09-08A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive.
CVE-2026-86590———2026-09-08In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering.
CVE-2026-85201———2026-09-07In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO.
CVE-2026-19204———2026-09-07A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap.
CVE-2026-84173———2026-09-07In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wildcard.

Electerm · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49255High8.8—2026-08-19electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73226High8.8—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73224High8.8—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73227High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73225High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73223High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-86711High7.4—2026-09-08electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation.
CVE-2026-49253High7.1—2026-08-19electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.

Filebrowser · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72839Critical9.8—2026-08-13filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting.
CVE-2026-72837High8.8—2026-08-14File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths.
CVE-2026-73613High8.2—2026-08-13filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope.
CVE-2026-72836High8.1—2026-08-14FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration.
CVE-2026-73612High8.1—2026-08-13File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls.
CVE-2026-72835Medium6.8—2026-08-14filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths.
CVE-2026-72838Medium6.5—2026-08-14FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk.
CVE-2026-72834Medium4.3—2026-08-14filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint.

Frangoteam · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47719High8.2—2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-47721Medium6.3—2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-47720Medium5.3—2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-67442Low2.0—2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-67443———2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-67440———2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-65985———2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-65984———2026-08-18FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.

Givanz · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49228High8.8—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49221High8.8—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49225High8.3—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49224High8.3—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49226High8.3—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49223High7.6—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49222High7.6—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
CVE-2026-49227High7.6—2026-08-18Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.

Lenovo · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75940Critical9.1—2026-09-10A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information.
CVE-2026-63427High7.8—2026-09-10An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
CVE-2026-19136High7.8—2026-09-10A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially craf…
CVE-2026-11813High7.8—2026-09-10A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
CVE-2026-63425High7.8—2026-08-13During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-63424High7.3—2026-08-13During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
CVE-2026-18994High7.1—2026-09-10A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files with…
CVE-2026-63426High7.1—2026-08-13During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

Librenms · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86426Critical9.8—2026-09-07LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens.
CVE-2026-86427High8.8—2026-09-07LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping.
CVE-2026-84191Medium6.1—2026-09-01LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization.
CVE-2026-45694Medium5.4—2026-08-26LibreNMS is a network monitoring system.
CVE-2026-84194———2026-09-01LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS command injection vulnerability in libvirt discovery.
CVE-2026-84193———2026-09-01LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descriptions, VRF names, process information, and SLA tags.
CVE-2026-55182———2026-08-26LibreNMS is a network monitoring system.
CVE-2026-80214———2026-08-26LibreNMS’s Virtualization Discovery module is vulnerable to command line injection.

Opensips · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45538Critical9.8—2026-08-04OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45537Critical9.1—2026-08-04OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45100Critical9.1—2026-08-04OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45103High7.5—2026-08-04OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45705Medium5.3—2026-08-05OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-46334———2026-08-05OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45809———2026-08-05OpenSIPS is a Session Initiation Protocol (SIP) server implementation.
CVE-2026-45084———2026-08-04OpenSIPS is a Session Initiation Protocol (SIP) server implementation.

Openssl · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63073Critical9.8—2026-08-25Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`.
CVE-2026-75803Critical9.1—2026-08-25Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function.
CVE-2026-63076High7.5—2026-08-25Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter.
CVE-2026-63075High7.5—2026-08-25Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection.
CVE-2026-63072High7.5—2026-08-25Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bou…
CVE-2026-54874High7.5—2026-08-25Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires.
CVE-2026-14457High7.5—2026-08-25Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicit…
CVE-2026-63074Medium5.9—2026-08-25Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid).

Pjsip · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57163Critical9.1—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57162Critical9.1—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57161High8.2—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57159High7.5—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57164Medium5.9—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57166Medium5.3—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57165Medium5.3—2026-09-04PJSIP is a free and open source multimedia communication library written in C.
CVE-2026-57160Medium5.3—2026-09-04PJSIP is a free and open source multimedia communication library written in C.

Rustfs · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73284High8.8—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73289High8.1—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73286High8.1—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73285High7.5—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73265Medium6.5—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73287Medium5.4—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73290Medium5.3—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73288———2026-08-12RustFS is a distributed object storage system built in Rust.

Samanhappy · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79748Critical9.9—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79744High8.8—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79746High8.1—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79750High7.7—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79747High7.1—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79745High7.1—2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79749———2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
CVE-2026-79743———2026-08-31MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.

Amazon · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85228Critical9.1—2026-09-10An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or ca…
CVE-2026-85656High7.8—2026-09-04An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded…
CVE-2026-85654High7.8—2026-09-04Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the gene…
CVE-2026-85786High7.5—2026-09-04Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due t…
CVE-2026-85787Medium6.5—2026-09-04An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into…
CVE-2026-18061Medium5.9—2026-09-11Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files fro…
CVE-2026-89332Medium5.5—2026-09-11Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation.

Apache Software Foundation · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80181Critical9.1—2026-09-04Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).
CVE-2026-52691High8.8—2026-09-04** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Griffin Hive Metastore Module.  This issue affects Apache Griffin Hive Metastore Module: all ve…
CVE-2026-81270High7.5—2026-09-04Apache Allura: exposure of non-public information via search.
CVE-2026-85229Medium6.1—2026-09-04** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache SkyWalking Booster UI.
CVE-2026-80190Medium6.1—2026-09-04Apache Allura: stored XSS via SVN code repositories.  Git repositories are not known to be affected.  The vulnerability is likely mitigated via default CSP headers.
CVE-2026-80180Medium6.1—2026-09-04Stored XSS via markdown HTML processing in Apache Allura.
CVE-2026-71216Medium5.3—2026-09-04PagerDuty alarm hook transmits the integration routing key over cleartext HTTP.

Flowiseai · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70478Critical10.0—2026-08-04Flowise is a drag & drop user interface to build a customized large language model flow.
CVE-2026-52098Critical9.8—2026-09-10An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
CVE-2026-70477Critical9.8—2026-08-04Flowise is a drag & drop user interface to build a customized large language model flow.
CVE-2026-70473High8.5—2026-08-04Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows.
CVE-2026-70476High8.2—2026-08-04Flowise is a drag & drop user interface to build a customized large language model flow.
CVE-2026-70474High8.1—2026-08-04Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows.
CVE-2026-70475Medium6.5—2026-08-04Flowise is a drag & drop user interface to build a customized large language model flow.

Go-vikunja · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55065High8.1—2026-08-28Vikunja is an open-source self-hosted task management platform.
CVE-2026-68581High8.1—2026-08-02Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management.
CVE-2026-55066High7.1—2026-08-28Vikunja is an open-source self-hosted task management platform.
CVE-2026-68582Medium6.5—2026-08-02Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-collection endpoint (GET /api/v1/projects/{project}/views/{view}/tasks).
CVE-2026-55067Medium5.0—2026-08-28Vikunja is an open-source self-hosted task management platform.
CVE-2026-55064Medium4.3—2026-08-28Vikunja is an open-source self-hosted task management platform.
CVE-2026-54766———2026-08-28Vikunja is an open-source self-hosted task management platform.

Hewlett Packard Enterprise (Hpe) · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73778High8.1—2026-09-01A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access.
CVE-2026-73786High7.5—2026-09-09A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack.
CVE-2026-73787High7.2—2026-09-09A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system.
CVE-2026-73769High7.2—2026-09-09A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution.
CVE-2026-73763High7.1—2026-09-01A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands.
CVE-2026-73788Medium6.5—2026-09-09A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment.
CVE-2026-73789Medium5.3—2026-09-09A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings.

Libevent · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63388High8.4—2026-08-20Libevent is an event notification library.
CVE-2026-63495High7.5—2026-08-20Libevent is an event notification library.
CVE-2026-63387High7.0—2026-08-20Libevent is an event notification library.
CVE-2026-63385———2026-08-20Libevent is an event notification library.
CVE-2026-63384———2026-08-20Libevent is an event notification library.
CVE-2026-63382———2026-08-20Libevent is an event notification library.
CVE-2026-63379———2026-08-20Libevent is an event notification library.

Luben · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89046High8.2—2026-09-10zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments.
CVE-2026-87823High8.2—2026-09-09zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets.
CVE-2026-87795High8.2—2026-09-09zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads.
CVE-2026-87877High7.7—2026-09-09zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes.
CVE-2026-87825High7.7—2026-09-09zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced.
CVE-2026-87824High7.5—2026-09-09zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths.
CVE-2026-89045Medium4.0—2026-09-10zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops.

Nuclio · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45730High8.3—2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-79755High8.0—2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-52833High8.0—2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-52831High8.0—2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-52832Medium4.9—2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-79756———2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
CVE-2026-79754———2026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

Nuxt · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71319Critical9.6—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71315High8.2—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71320High8.1—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71321High7.5—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71316High7.5—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71314High7.5—2026-08-05Nuxt is an open-source web development framework for Vue.js.
CVE-2026-71318Medium4.8—2026-08-05Nuxt is an open-source web development framework for Vue.js.

Nvidia · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47626High8.2—2026-08-25NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
CVE-2026-24263High8.2—2026-08-25NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference.
CVE-2026-24262High8.2—2026-08-25NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
CVE-2026-47625High7.5—2026-09-08NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization.
CVE-2026-16497High7.5—2026-09-08NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration.
CVE-2026-47624Medium6.0—2026-08-25NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user.
CVE-2026-24225Medium6.0—2026-08-25NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read.

Ocaml · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89086Critical9.1—2026-09-10In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key.
CVE-2026-87734High7.5—2026-09-09An issue was discovered in the utcp package before 0.0.6 for OCaml.
CVE-2026-89087High7.3—2026-09-10The cstruct package before 6.3.0 for OCaml mishandles indexes.
CVE-2026-87732Medium6.2—2026-09-09An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml.
CVE-2026-57825Medium5.7—2026-09-09In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
CVE-2026-87736Medium4.3—2026-09-09An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml.
CVE-2026-87735Medium4.3—2026-09-09An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml.

Openemr · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67610High8.1—2026-08-03OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a se…
CVE-2026-40506Medium6.5—2026-08-17OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET parameter is passed without validation to temp_dir_cleanup(), which joins the value to the PHP temporary directory pa…
CVE-2026-40507Medium6.1—2026-08-19OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler.
CVE-2026-40508Medium5.4—2026-08-19OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files containing arbitrary…
CVE-2026-67612Medium4.8—2026-08-03OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the tem…
CVE-2026-76614Medium4.3—2026-08-19OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function.
CVE-2026-40509Medium4.3—2026-08-19OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer.

Oracle · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70846Critical9.6—2026-08-18Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).
CVE-2026-70922High8.8—2026-08-18Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web UI).
CVE-2026-70737High8.8—2026-08-18Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Storage Server Management).
CVE-2026-70852High8.2—2026-08-18Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).
CVE-2026-71048High7.6—2026-08-18Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).
CVE-2026-71092High7.5—2026-08-18Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease Administration).
CVE-2026-70910High7.5—2026-08-18Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).

Pcre · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86145High8.2—2026-09-05PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a si…
CVE-2026-89161High7.4—2026-09-11In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.
CVE-2026-89158Medium6.5—2026-09-11PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
CVE-2026-89157Medium5.7—2026-09-11PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
CVE-2026-89160Low3.7—2026-09-11PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
CVE-2026-89162Low2.9—2026-09-11In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.
CVE-2026-89156Low2.9—2026-09-11PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.

Seaweedfs · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72920Critical9.8—2026-08-11SeaweedFS is a distributed storage system.
CVE-2026-73080Critical9.3—2026-08-11SeaweedFS is a distributed storage system.
CVE-2026-77317High8.1—2026-08-26SeaweedFS is a distributed storage system for files and blobs.
CVE-2026-72921High8.1—2026-08-11SeaweedFS is a distributed storage system.
CVE-2026-77368High7.6—2026-08-26SeaweedFS is a distributed storage system for files and blobs.
CVE-2026-77611High7.1—2026-08-26SeaweedFS is a distributed storage system for files and blobs.
CVE-2026-77298———2026-08-26SeaweedFS is a distributed storage system for files and blobs.

The Tcpdump Group · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-0799High8.7—2026-09-05In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value.
CVE-2026-6554Medium5.5—2026-09-05libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.
CVE-2026-6244Medium5.5—2026-09-05libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero.
CVE-2026-31912Medium5.5—2026-09-05libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer.
CVE-2026-31911Medium5.5—2026-09-05libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode.
CVE-2026-18238Medium5.0—2026-09-05The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers.
CVE-2026-18313Medium4.3—2026-09-05rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use.

Truelockmc · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48056Critical10.0—2026-08-11Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-52876High8.8—2026-08-18Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-52872High8.8—2026-08-18Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-52877High8.3—2026-08-18Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-52873Medium6.9—2026-08-18Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-52875———2026-08-18Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-48046———2026-08-11Streambert is a cross-platform Electron Desktop App to stream and download video content.

Usmannasir · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67614Critical9.8—2026-08-13CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSoc…
CVE-2026-71966High8.8—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated attackers to execute arbitrary OS commands by controlling a remote server'…
CVE-2026-71965High8.8—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server…
CVE-2026-88895High7.2—2026-09-10CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens.
CVE-2026-71964Medium6.5—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symboli…
CVE-2026-87820Medium5.3—2026-09-09CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata.
CVE-2026-67613Medium4.9—2026-08-13CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint.

Wekan · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68561High8.8—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68899High8.7—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68558High8.5—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68900High7.6—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68901Medium6.5—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68559Medium6.5—2026-08-19Wekan is open source kanban built with Meteor.
CVE-2026-68560———2026-08-19Wekan is open source kanban built with Meteor.

Wintercms · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32258High8.1—2026-08-26Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVE-2026-32257High8.1—2026-08-26Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVE-2026-32639Medium6.8—2026-08-26Winter CMS is a content management system built on the Laravel PHP framework.
CVE-2026-32593Medium5.9—2026-08-26Winter CMS is a content management system built on the Laravel PHP framework.
CVE-2026-54256Medium5.4—2026-08-26Winter CMS is a content management system built on the Laravel PHP framework.
CVE-2026-63179Medium4.9—2026-08-26Winter CMS is a content management system built on the Laravel PHP framework.
CVE-2026-35445———2026-08-26Winter CMS is a content management system built on the Laravel PHP framework.

Aehrc · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47664———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.
CVE-2026-47663———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.
CVE-2026-47662———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.
CVE-2026-47661———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.
CVE-2026-47660———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.
CVE-2026-47659———2026-08-07Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

Aircheng-org · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86669High7.3—2026-09-08A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15.
CVE-2026-86666High7.3—2026-09-08A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15.
CVE-2026-86665High7.3—2026-09-08A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15.
CVE-2026-86667Medium4.7—2026-09-08A weakness has been identified in aircheng-org iWebShop-5 up to 5.15.
CVE-2026-86668Medium4.3—2026-09-08A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15.
CVE-2026-86670Low3.7—2026-09-08A flaw has been found in aircheng-org iWebShop-5 up to 5.15.

Cloudreve · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55502High7.1—2026-07-31Cloudreve is a self-hosted file management and sharing system.
CVE-2026-55497Medium6.5—2026-07-31Cloudreve is a self-hosted file management and sharing system.
CVE-2026-62323Medium6.3—2026-07-31Cloudreve is a self-hosted file management and sharing system.
CVE-2026-55499Medium4.3—2026-07-31Cloudreve is a self-hosted file management and sharing system.
CVE-2026-55496Medium4.3—2026-07-31Cloudreve is a self-hosted file management and sharing system.
CVE-2026-55495Medium4.3—2026-07-31Cloudreve is a self-hosted file management and sharing system.

Craftcms · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79987High8.8—2026-09-10A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.
CVE-2026-86732High8.8—2026-09-08Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter.
CVE-2026-86730High8.8—2026-09-08Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers.
CVE-2026-86731Medium6.5—2026-09-08Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (the users/activate-user action).
CVE-2026-72784Medium5.4—2026-08-11Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL save<Volume>Asset mutation, which fetches an attacker-supplied URL server-side.
CVE-2026-79989———2026-09-02The vulnerability allows any authenticated user to change their own password without providing the current password or having an active elevated session.

Ether · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55089Critical9.9—2026-08-19Etherpad is a real-time collaborative editor.
CVE-2026-55085Critical9.6—2026-08-19Etherpad is a real-time collaborative editor.
CVE-2026-55088Medium6.8—2026-08-19Etherpad is a real-time collaborative editor.
CVE-2026-55087Medium6.1—2026-08-19Etherpad is a real-time collaborative editor.
CVE-2026-55086Medium4.2—2026-08-19Etherpad is a real-time collaborative editor.
CVE-2026-55090———2026-08-19Etherpad is a real-time collaborative editor.

Freecad · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-34399High7.8—2026-08-17FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-34398High7.8—2026-08-17FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-73234High7.8—2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-34789High7.0—2026-08-17FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-73235Medium6.1—2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-73233———2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.

Froxlor · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62988Critical9.0—2026-08-18Froxlor is open source server administration software.
CVE-2026-54347High8.7—2026-08-18Froxlor is open source server administration software.
CVE-2026-52793High8.1—2026-08-18Froxlor is open source server administration software.
CVE-2026-54348High7.2—2026-08-18Froxlor is open source server administration software.
CVE-2026-55593Medium6.5—2026-08-18Froxlor is open source server administration software.
CVE-2026-54543Medium5.4—2026-08-18Froxlor is open source server administration software.

Imagemagick · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86421Low3.7—2026-09-07ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder.
CVE-2026-86420Low3.7—2026-09-07ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails.
CVE-2026-86425Low3.3—2026-09-07ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick.
CVE-2026-86423Low3.3—2026-09-07ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick.
CVE-2026-86422Low3.3—2026-09-07ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions.
CVE-2026-86424Low2.5—2026-09-07ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps.

Joomshaper.com · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78085———2026-09-10Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked directory confinement checks.
CVE-2026-78303———2026-09-10Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 - Booking inquiries previously relied on client-submitted hidden fields for recipient routing, allowing potent…
CVE-2026-78302———2026-09-10Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 - Multiple template files across frontend views and administrator list tables render…
CVE-2026-78084———2026-09-10Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization checks and CSRF token validation..
CVE-2026-78083———2026-09-10Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpo…
CVE-2026-78082———2026-09-10Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 - The property search and listing query builders assembled several WHERE and ORDER BY clauses (zipcode, sorting…

Lemmynet · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54740Medium6.5—2026-08-19Lemmy is a link aggregator and forum for the fediverse.
CVE-2026-54738Medium6.5—2026-08-19Lemmy is a link aggregator and forum for the fediverse.
CVE-2026-54743———2026-08-19Lemmy is a link aggregator and forum for the fediverse.
CVE-2026-54741———2026-08-19Lemmy is a link aggregator and forum for the fediverse.
CVE-2026-54739———2026-08-19Lemmy is a link aggregator and forum for the fediverse.
CVE-2026-54742———2026-08-19Lemmy is a link aggregator and forum for the fediverse.

Mistralai · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87988———2026-09-11An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed.
CVE-2026-87987———2026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands.
CVE-2026-87986———2026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret.
CVE-2026-87985———2026-09-11An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments.
CVE-2026-87984———2026-09-11An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval.
CVE-2026-87983———2026-09-11An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted shell commands.

Ni · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4129High8.1—2026-09-10There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted.
CVE-2026-16234High7.8—2026-08-25There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI…
CVE-2026-16233High7.8—2026-08-25There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI…
CVE-2026-4130High7.1—2026-09-10There is a storage of sensitive information in cleartext vulnerability in NI SystemLink.
CVE-2026-18445Medium6.6—2026-08-25There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get…
CVE-2026-18444Medium6.6—2026-08-25There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation require…

Nodemailer · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82659High7.1—2026-08-31nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href prop…
CVE-2026-82662Medium6.5—2026-08-31Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests.
CVE-2026-82661Medium5.4—2026-08-31Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers.
CVE-2026-82660Medium5.4—2026-08-31Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport.
CVE-2024-58379Medium5.3—2026-08-31nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments.
CVE-2026-82853Medium4.9—2026-08-31Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands.

Openchoreo · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73843Critical9.6—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73842Critical9.0—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73841High8.8—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73667High8.8—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73666High8.2—2026-08-13OpenChoreo is a developer platform for Kubernetes.
CVE-2026-73840Medium5.3—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.

Statamic · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64665High8.1—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).
CVE-2026-64663Medium6.5—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).
CVE-2026-64662Medium6.5—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).
CVE-2026-71435Medium6.1—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).
CVE-2026-71434Medium5.3—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).
CVE-2026-64664Medium4.3—2026-08-06Statamic is a Laravel and Git powered content management system (CMS).

Termix-ssh · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53545Critical9.8—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
CVE-2026-53548Critical9.6—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
CVE-2026-53546Critical9.6—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
CVE-2026-53547High8.8—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
CVE-2026-53542High8.8—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
CVE-2026-53549High7.7—2026-08-19Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

Thorsten · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85592Low3.7—2026-09-04phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed() method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.a…
CVE-2026-85591———2026-09-04phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password.
CVE-2026-85590———2026-09-04phpMyFAQ before 4.1.8 contains an authentication bypass vulnerability in its two-factor authentication (TOTP) disable functionality.
CVE-2026-85589———2026-09-04phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks.
CVE-2026-85587———2026-09-04phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content.
CVE-2026-85586———2026-09-04phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests.

Thumbor · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53501High8.2—2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.
CVE-2026-53500High8.2—2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.
CVE-2026-53505High7.5—2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.
CVE-2026-53504High7.5—2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.
CVE-2026-53503High7.5—2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.
CVE-2026-53502———2026-07-31Thumbor is an open-source photo thumbnail service by globo.com.

Tp-link Systems Inc. · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84941———2026-09-11An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of us…
CVE-2026-17176———2026-09-11An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet.
CVE-2026-76653———2026-09-10A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modif…
CVE-2026-85384———2026-09-08A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file.
CVE-2026-18330———2026-09-03A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4.
CVE-2026-18167———2026-09-03A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4.

Zenhive · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73541High8.2—2026-08-19Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty.
CVE-2026-73136High7.5—2026-08-19Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer.
CVE-2026-67581High7.5—2026-08-19Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer.
CVE-2026-73829Low3.7—2026-08-19Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resource accesses.
CVE-2026-82751———2026-09-06Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an acces…
CVE-2026-82750———2026-09-06Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account dele…

Angular · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88056Critical9.1—2026-09-10Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-88060Medium6.1—2026-09-10Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-88058Medium6.1—2026-09-10Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-88057Medium6.1—2026-09-10Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-88059Medium4.0—2026-09-10Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

Apostrophecms · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63669Medium6.5—2026-08-17ApostropheCMS is an open-source Node.js content management system.
CVE-2026-63667Medium6.5—2026-08-17ApostropheCMS is an open-source Node.js content management system.
CVE-2026-63670Medium6.1—2026-08-17ApostropheCMS is an open-source Node.js content management system.
CVE-2026-84371Medium5.4—2026-09-01ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API.
CVE-2026-71553———2026-08-17ApostropheCMS is an open-source Node.js content management system.

Better-auth · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67336High8.7—2026-08-01better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by default.
CVE-2026-67327High8.3—2026-08-01better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registratio…
CVE-2026-67333High7.2—2026-08-01better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_uris registered via the deprecated oidc-provider plugin and the mcp plugin (which wraps the same provider).
CVE-2026-67337Medium6.5—2026-08-01better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled.
CVE-2026-67335Medium5.3—2026-08-01better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-backed state storage without PKCE.

Cap-go · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88864Critical9.1—2026-09-10Capgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through Supabase PostgREST.
CVE-2026-88862High8.8—2026-09-10Capgo (capgo.app) backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header.
CVE-2026-88861High8.3—2026-09-10Capgo (Cap-go/capgo.app) contains an authentication bypass affecting all versions (no patched version available at time of publication).
CVE-2026-88863High8.1—2026-09-10capgo.app (npm package `capgo`) through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite() function of supabase/functions/_backend/private/invite_new_user_to_org.ts.
CVE-2026-88860Medium6.3—2026-09-10Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active.

Cli · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64652Low3.3—2026-08-06GitHub CLI (gh) is GitHub's official command line tool.
CVE-2026-72924———2026-08-25GitHub CLI (gh) is GitHub's official command line tool.
CVE-2026-64655———2026-08-06GitHub CLI (gh) is GitHub’s official command line tool.
CVE-2026-64654———2026-08-06GitHub CLI (gh) is GitHub's official command line tool.
CVE-2026-64653———2026-08-06GitHub CLI (gh) is GitHub’s official command line tool.

Comfy-org · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68771Critical9.8—2026-07-31ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserializ…
CVE-2026-56672High8.2—2026-07-31ComfyUI is a node-based diffusion model GUI, API, and backend.
CVE-2026-56670High8.2—2026-07-31ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface.
CVE-2026-56673High7.5—2026-07-31ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface.
CVE-2026-56671High7.5—2026-07-31ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface.

Cyrus · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61911Medium4.3—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.
CVE-2026-61915Medium4.2—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.
CVE-2026-61910Low3.5—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.
CVE-2026-61909Low3.5—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.
CVE-2026-61908Low3.1—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-86296Critical10.0—2026-09-07A vulnerability was determined in D-Link DIR-822A A_101.
CVE-2026-86510Critical9.9—2026-09-08A vulnerability has been found in D-Link DIR-822A A_101.
CVE-2026-86509Critical9.6—2026-09-08A flaw has been found in D-Link DIR-895L A1_102b07.
CVE-2026-86295High8.3—2026-09-07A vulnerability was found in D-Link DIR-895L A1_102b07.
CVE-2026-86297High8.1—2026-09-07A vulnerability was identified in D-Link DIR-605 B1v202WWB03.

Emlog · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67598High7.4—2026-08-03Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary…
CVE-2026-53756Medium4.9—2026-09-04Emlog is an open source website building system.
CVE-2026-73848———2026-09-04Emlog is an open source website building system.
CVE-2026-53758———2026-09-04Emlog is an open source website building system.
CVE-2026-53757———2026-09-04Emlog is an open source website building system.

Fasterxml · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68497High7.5—2026-09-11jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(value) in CoreXMLDes…
CVE-2026-83557Medium5.6—2026-09-01DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator.
CVE-2026-19032Medium5.3—2026-09-01jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme.
CVE-2026-68494———2026-08-04The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.
CVE-2026-18401———2026-08-04The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters).

Fleetdm · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46371Medium6.5—2026-08-26Fleet is an open-source device management platform built on osquery.
CVE-2026-46370Medium6.5—2026-08-26Fleet is an open-source device management platform built on osquery.
CVE-2026-48786Medium6.5—2026-08-26Fleet is an open-source device management platform built on osquery.
CVE-2026-41262Medium4.3—2026-08-26Fleet is an open-source device management platform built on osquery.
CVE-2026-54245———2026-08-26Fleet is an open-source device management platform built on osquery.

Forgekeep · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61699High8.1—2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-63464High7.7—2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-55513Medium5.4—2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-55512Medium5.3—2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
CVE-2026-53603———2026-09-04nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.

Freeipmi · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85509Critical9.8—2026-09-04FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
CVE-2026-85508Critical9.8—2026-09-04ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
CVE-2026-85506Critical9.8—2026-09-04ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
CVE-2026-85504Critical9.8—2026-09-04FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
CVE-2026-85505High7.5—2026-09-04ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has…

Google Cloud · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19486———2026-09-11A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default ser…
CVE-2026-13745———2026-09-10A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory.
CVE-2026-79696———2026-09-09A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attac…
CVE-2026-79707———2026-09-04A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query pa…
CVE-2026-4644———2026-09-04A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project u…

Hashicorp · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87090High8.3—2026-09-10Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity.
CVE-2026-87993High7.7—2026-09-10The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events.
CVE-2026-88021High7.1—2026-09-10Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access.
CVE-2026-87106Medium6.5—2026-09-10Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated.
CVE-2026-87107Medium5.4—2026-09-10Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects.

Java-json-tools · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86512Medium6.3—2026-09-08A vulnerability was identified in java-json-tools json-patch up to 1.13.
CVE-2026-86513Medium5.3—2026-09-08A security flaw has been discovered in java-json-tools jackson-coreutils 2.0.
CVE-2026-86511Medium5.3—2026-09-08A vulnerability was found in java-json-tools jackson-coreutils 2.0.
CVE-2026-86321Medium5.3—2026-09-07A vulnerability was found in java-json-tools jackson-coreutils 2.0.
CVE-2026-86319Medium5.3—2026-09-07A vulnerability has been found in java-json-tools json-patch up to 1.13.

Jfrog · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69106High8.8—2026-08-12A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.
CVE-2026-69105High8.1—2026-08-12An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.
CVE-2026-66016Medium6.7—2026-08-12Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.
CVE-2026-69107Medium5.9—2026-08-12An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.
CVE-2026-70547Medium4.3—2026-08-12An authenticated user without repository read permission may access package metadata under specific conditions.

Libgit2 · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53587High7.5—2026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.
CVE-2026-53586Medium6.5—2026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.
CVE-2026-53583Medium6.5—2026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.
CVE-2026-53585Medium5.3—2026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.
CVE-2026-53584Medium4.3—2026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application.

Logto-io · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62317High7.5—2026-08-19Logto is the modern, open-source auth infrastructure for SaaS and AI apps.
CVE-2026-82263Medium6.8—2026-08-28Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter.
CVE-2026-82262Medium6.8—2026-08-28Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation.
CVE-2026-63187Medium6.3—2026-08-19Logto is the modern, open-source auth infrastructure for SaaS and AI apps.
CVE-2026-63188———2026-08-19Logto is the modern, open-source auth infrastructure for SaaS and AI apps.

Mariadb-corporation · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55215High7.5—2026-08-28MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases.
CVE-2026-55855Medium6.5—2026-08-28MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases.
CVE-2026-55859Medium5.9—2026-08-28MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java.
CVE-2026-55858Medium5.9—2026-08-28MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.
CVE-2026-55854Medium5.9—2026-08-28MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases.

Mediatek · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-20502High8.4—2026-09-07In vdec, there is a possible out of bounds write due to a missing bounds check.
CVE-2026-20501High8.4—2026-09-07In vdec, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2026-20500Medium5.5—2026-09-07In Modem, there is a possible system crash due to improper input validation.
CVE-2026-20504Medium5.3—2026-09-07In Modem, there is a possible system crash due to a missing bounds check.
CVE-2026-20503Medium5.3—2026-09-07In Modem, there is a possible system crash due to a missing bounds check.

Mend · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88887High8.6—2026-09-10Renovate is a dependency update automation tool.
CVE-2026-88882High8.6—2026-09-10Renovate is a dependency update automation tool.
CVE-2026-88889High7.8—2026-09-10Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties.
CVE-2026-88886High7.8—2026-09-10Renovate is a dependency update automation tool.
CVE-2026-88888High7.0—2026-09-10Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters.

Mermaid-js · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71439———2026-08-06Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.
CVE-2026-71438———2026-08-06Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.
CVE-2026-71437———2026-08-06Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.
CVE-2026-71436———2026-08-06Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.
CVE-2026-50159———2026-08-06Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.

Misskey-dev · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48115———2026-08-03Misskey is an open source, federated social media platform.
CVE-2026-47746———2026-08-03Misskey is an open source, federated social media platform.
CVE-2026-46714———2026-08-03Misskey is an open source, federated social media platform.
CVE-2026-46713———2026-08-03Misskey is an open source, federated social media platform.
CVE-2026-46712———2026-08-03Misskey is an open source, federated social media platform.

Nagios Enterprises, Llc. · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48554High7.5—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_data parameter.
CVE-2026-48553High7.5—2026-08-12Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP).
CVE-2026-48551High7.4—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie.
CVE-2026-48550Medium6.1—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter.
CVE-2026-48552Medium5.4—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js.

Notepad-plus-plus · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57233High8.1—2026-08-17Notepad++ is a free and open-source source code editor.
CVE-2026-54758High7.8—2026-08-17Notepad++ is a free and open-source source code editor.
CVE-2026-71858———2026-08-17Notepad++ is a free and open-source source code editor.
CVE-2026-52886———2026-08-17Notepad++ is a free and open-source source code editor.
CVE-2026-73250———2026-08-11Notepad++ is a free and open-source source code editor.

Nozomi Networks · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-33389High7.5—2026-09-08An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provide…
CVE-2026-33388High7.4—2026-09-08An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.
CVE-2026-33391Medium5.4—2026-09-08An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges.
CVE-2026-33387Medium4.6—2026-09-08A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.
CVE-2026-33920Low3.5—2026-09-08A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.

Perspective-dev · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67195High8.8—2026-08-04Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes…
CVE-2026-67200High7.5—2026-08-04Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths.
CVE-2026-67198High7.5—2026-08-04Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages.
CVE-2026-67199Medium6.5—2026-08-04Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewRe…
CVE-2026-67196Medium5.4—2026-08-04Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attackers to inject arbitrary HTML and JavaScript by writing table cell values containing unescaped HTML markup, which are interpolate…

Px4 · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86713High7.1—2026-09-08PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it.
CVE-2026-86097Medium6.5—2026-09-04PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the autopilot process.
CVE-2026-84698Medium6.5—2026-09-02PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number into a user-supplied sized allocation.
CVE-2026-86096Medium5.9—2026-09-04PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion.
CVE-2026-86714Medium5.4—2026-09-08PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length.

Rabbitmq · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79921———2026-08-26amqp091-go is a Go AMQP 0.9.1 client.
CVE-2026-69220———2026-08-18The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
CVE-2026-63336———2026-08-18The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
CVE-2026-63335———2026-08-18The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
CVE-2026-61634———2026-08-18The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

Rizwan17 · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87925High7.3—2026-09-10A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.
CVE-2026-87921High7.3—2026-09-09A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.
CVE-2026-87924Medium6.5—2026-09-09A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.
CVE-2026-87926Medium4.3—2026-09-10A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.
CVE-2026-87923Medium4.3—2026-09-09A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f.

Schneider Electric · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81861———2026-09-11CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
CVE-2026-3869———2026-09-11CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running o…
CVE-2026-8044———2026-09-09CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup…
CVE-2026-77120———2026-09-09CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authentica…
CVE-2026-19233———2026-09-09CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server end…

Sfturing · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86263High7.3—2026-09-07A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
CVE-2026-86262High7.3—2026-09-07A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
CVE-2026-86261High7.3—2026-09-07A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
CVE-2026-86260Medium6.5—2026-09-07A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.
CVE-2026-86264Medium4.3—2026-09-07A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8.

Snowflake · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86600High8.2—2026-09-08In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint.
CVE-2026-19594High8.1—2026-08-12Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path seg…
CVE-2026-85525High7.4—2026-09-04Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and defin…
CVE-2026-86597Medium6.5—2026-09-08Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be w…
CVE-2026-85528Medium5.3—2026-09-04Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint.

Spip · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72710Critical9.8—2026-09-11SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a champs_editables allowlist by supplying an attacker-controlled…
CVE-2026-72709Critical9.8—2026-09-11SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to invoke privileged actions by supplying only a valid CSRF nonce without any server-…
CVE-2026-77647Critical9.8—2026-08-20SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.
CVE-2026-66738High8.8—2026-08-10SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations.
CVE-2026-72708High7.5—2026-09-11SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplying a crafted annee parameter value matching a word character…

Sylius · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68500High7.5—2026-07-30Sylius Mollie Plugin provides Mollie payment integration for Sylius applications.
CVE-2026-53637Medium6.5—2026-09-08Sylius is an Open Source eCommerce Framework on Symfony.
CVE-2026-68501Medium6.5—2026-07-30Sylius Mollie Plugin provides Mollie payment integration for Sylius applications.
CVE-2026-53638Medium4.3—2026-09-08Sylius is an Open Source eCommerce Framework on Symfony.
CVE-2026-53639———2026-09-08Sylius is an Open Source eCommerce Framework on Symfony.

The Opennms Group · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89054High8.2—2026-09-10A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication.
CVE-2026-89089Medium6.5—2026-09-10A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon.
CVE-2026-19596Medium5.9—2026-09-10An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon.
CVE-2026-19135Medium5.4—2026-08-13A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon.
CVE-2026-19182Medium4.3—2026-08-13An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also as…

Tubitak Bilgem Software Technologies Research Institute · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7863High8.4—2026-09-11Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.
CVE-2026-8303High7.8—2026-09-11Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation.
CVE-2026-8301High7.8—2026-09-11Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.
CVE-2026-8304Medium5.5—2026-09-11Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels.
CVE-2026-11765Low3.3—2026-09-11Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.

Uhop · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71429Medium6.2—2026-09-03stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint.
CVE-2026-71430Medium6.2—2026-08-06node-re2 provides RE2 regular expression bindings for Node.js.
CVE-2026-68499Medium6.2—2026-07-30re2 provides Node.js bindings for Google's RE2 regular expression engine.
CVE-2026-67550Medium5.7—2026-07-30re2 provides Node.js bindings for Google's RE2 regular expression engine.
CVE-2026-71498Medium5.1—2026-08-06node-re2 provides RE2 regular expression bindings for Node.js.

Webpros · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68488Critical9.9—2026-09-10A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership takeover.
CVE-2026-68487Critical9.9—2026-09-10Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
CVE-2026-67401Critical9.9—2026-09-09A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
CVE-2026-65646Critical9.9—2026-08-26Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.
CVE-2026-67397———2026-09-04Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.

Withastro · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73424Medium6.5—2026-08-17Astro is a web framework for content-driven websites.
CVE-2026-73425Low3.7—2026-08-12Astro is a web framework for content-driven websites.
CVE-2026-84376———2026-09-02Astro is a web framework for content-driven websites.
CVE-2026-73423———2026-08-12Astro is a web framework for content-driven websites.
CVE-2026-73422———2026-08-12Astro is a web framework for content-driven websites.

Zohocorp · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14828High8.8—2026-09-02Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability.
CVE-2026-85640Medium6.3—2026-09-07Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component
CVE-2026-77697Medium6.3—2026-09-07Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction
CVE-2026-77698Medium5.7—2026-09-07Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.
CVE-2026-77699Medium5.0—2026-09-07Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

Activepieces · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73084Medium6.1—2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73083———2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73082———2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73081———2026-08-11Activepieces is an open source AI workflow automation platform.

Appflowy-io · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85619High7.5—2026-09-04AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across workspaces.
CVE-2026-88898Medium6.5—2026-09-10AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing authenticated users to publish content into other tenants' namespaces.
CVE-2026-85622Medium5.3—2026-09-04AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the establish_ws_connection_v2 handler, allowing authenticated users to bind sessions to workspaces they do not belong to.
CVE-2026-16007———2026-08-15AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability.

Arraytics · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15406High7.5—2026-09-09The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'event_layout' parameter parameter.
CVE-2026-11821Medium5.4—2026-09-09The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17.
CVE-2026-62135Medium5.3—2026-09-11Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.
CVE-2026-11446Medium5.3—2026-09-11The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23.

Bosch Sensortec · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-42805High8.4—2026-09-10A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_debug_message (located in bhi385_parse.c).
CVE-2026-42804High7.6—2026-09-10A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem in…
CVE-2026-42808Medium6.8—2026-09-10An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries of the caller-provided destination buffer. Intern…
CVE-2026-42806Medium4.3—2026-09-10An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data parsing logic in read_all_field_data (bme69x.c). The driver prefetches heater co…

Codeigniter4 · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63223Critical9.8—2026-07-31CodeIgniter is a PHP full-stack web framework.
CVE-2026-63221Critical9.4—2026-07-31CodeIgniter is a PHP full-stack web framework.
CVE-2026-63222High7.5—2026-07-31CodeIgniter is a PHP full-stack web framework.
CVE-2026-63220Medium4.8—2026-07-31CodeIgniter is a PHP full-stack web framework.

Cvat-ai · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73221———2026-08-11CVAT is an open source interactive video and image annotation tool for computer vision.
CVE-2026-73219———2026-08-11CVAT is an open source interactive video and image annotation tool for computer vision.
CVE-2026-65986———2026-08-04CVAT is an open source interactive video and image annotation tool for computer vision.
CVE-2026-47682———2026-08-04CVAT is an open source interactive video and image annotation tool for computer vision.

Drupal · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81162Medium5.3—2026-09-02Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing.
CVE-2026-73474Medium5.3—2026-09-02Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery.
CVE-2026-18986Medium4.8—2026-09-02Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS.
CVE-2026-16647Medium4.1—2026-09-02Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.

Dspace · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49832High8.0—2026-09-02DSpace open source software is a repository application which provides durable access to digital resources.
CVE-2026-49833Medium5.5—2026-09-02DSpace open source software is a repository application which provides durable access to digital resources.
CVE-2026-49831Medium5.5—2026-09-02DSpace open source software is a repository application which provides durable access to digital resources.
CVE-2026-49830Medium4.4—2026-09-02DSpace open source software is a repository application which provides durable access to digital resources.

Ericcornelissen · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73414———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73413———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73412———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73411———2026-08-12Shescape is a simple shell escape library for JavaScript.

Eugeny · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72903High8.1—2026-08-10Tabby (formerly Terminus) is a highly configurable terminal emulator.
CVE-2026-68930Medium6.5—2026-08-03Russh is a Rust SSH client & server library.
CVE-2026-73430Medium5.3—2026-08-12Russh is a Rust SSH client & server library.
CVE-2026-73429Medium5.3—2026-08-12Russh is a Rust SSH client & server library.

Filerun · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73693High8.8—2026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary commands by uploading files with shell metacharacters in thei…
CVE-2026-73699High7.2—2026-09-10FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unserialize() in the Perms::getPerms() method, where a positional…
CVE-2026-73698High7.2—2026-09-10FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as an array, causing the getValuesString() method in DB/DP.php t…
CVE-2026-73694High7.2—2026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that strips shell-metacharacter escaping, allowing attacker-controlled input to reach an exec() sink unsan…

Goauthentik · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61574High8.8—2026-08-18authentik is an open-source identity provider.
CVE-2026-55106Medium5.3—2026-08-18authentik is an open-source identity provider.
CVE-2026-57580———2026-08-18authentik is an open-source identity provider.
CVE-2026-54730———2026-08-18authentik is an open-source identity provider.

H3js · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86253Medium5.9—2026-09-06h3 (npm package) versions <= 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic().
CVE-2026-86251Medium5.9—2026-09-06h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility.
CVE-2026-86205Medium5.4—2026-09-06h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative paths in the Referer header pathname.
CVE-2026-86252Medium5.3—2026-09-06h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject arbitrary SSE events by including unsanitized carriage returns.

Hitachi · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71377Critical9.8—2026-09-08Command Argument Injection Vulnerability in Cosminexus Component Container.
CVE-2026-71376Critical9.8—2026-09-08OS command injection vulnerability in Cosminexus Component Container.
CVE-2026-71374Critical9.8—2026-09-08Deserialization of untrusted data vulnerability in Cosminexus Component Container.
CVE-2026-71375High7.4—2026-09-08Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container.

Jeremyevans · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82470Medium5.4—2026-08-29Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp.
CVE-2026-82469Medium5.4—2026-08-29Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT access tokens without requiring a refresh token.
CVE-2026-82468Medium4.7—2026-08-29Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation.
CVE-2026-82467Medium4.7—2026-08-29Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_to_requested_location features.

Jofpin · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85638High7.3—2026-09-04A weakness has been identified in jofpin trape 2.0.
CVE-2026-85639Medium5.6—2026-09-04A security vulnerability has been detected in jofpin trape 2.0.
CVE-2026-85637Medium5.3—2026-09-04A security flaw has been discovered in jofpin trape 1.0.0/2.0.
CVE-2026-85636Medium5.3—2026-09-04A vulnerability was identified in jofpin trape 1.0.0.

Koel · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54493High7.7—2026-08-19Koel is a free, open-source music streaming solution.
CVE-2026-54491High7.1—2026-08-19Koel is a free, open-source music streaming solution.
CVE-2026-54492Medium4.3—2026-08-19Koel is a free, open-source music streaming solution.
CVE-2026-54494———2026-08-19Koel is a free, open-source music streaming solution.

Kyverno · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54523Critical9.6—2026-08-26Kyverno is a policy engine designed for cloud native platform engineering teams.
CVE-2026-84200Critical9.0—2026-09-01Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw.
CVE-2026-84196High7.7—2026-09-01Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url that allows authenticated users to send arbitrary HTTP requests by injecting user-controlled input through variable substitution.
CVE-2026-84195High7.7—2026-09-01Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers.

Laradashboard · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86438High7.2—2026-09-07Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules.
CVE-2026-86437High7.2—2026-09-07Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live applica…
CVE-2026-87821High7.1—2026-09-09Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body.
CVE-2026-86436Medium5.4—2026-09-07Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files.

Light0011 · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86306High7.3—2026-09-07A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.
CVE-2026-86305High7.3—2026-09-07A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.
CVE-2026-86308Medium5.3—2026-09-07A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.
CVE-2026-86307Medium4.3—2026-09-07A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.

Linuxfabrik · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55426High7.8—2026-08-18linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external monitoring commands.
CVE-2026-73974Medium5.5—2026-08-18linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins.
CVE-2026-53759———2026-08-18linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations.
CVE-2026-52817———2026-08-18Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems.

Magicmirrororg · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63640Medium4.3—2026-08-18MagicMirror² is an open source modular smart mirror platform.
CVE-2026-63643———2026-08-18MagicMirror² is an open source modular smart mirror platform.
CVE-2026-63642———2026-08-18MagicMirror² is an open source modular smart mirror platform.
CVE-2026-63641———2026-08-18MagicMirror² is an open source modular smart mirror platform.

Maxsite · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87929Critical9.8—2026-09-09MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies.
CVE-2026-87927High8.2—2026-09-09MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequen…
CVE-2026-87930High8.1—2026-09-09MaxSite CMS through 109.6 passes the ci_session cookie to unserialize() without class restrictions, allowing unauthenticated attackers to inject PHP objects.
CVE-2026-87928Medium5.4—2026-09-09MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload HTML files.

Nlnet Labs · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18664Critical9.1—2026-08-26When ranges are used for access control (i.e.
CVE-2026-19538High7.5—2026-08-26The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open.
CVE-2026-19401High7.5—2026-08-26Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512).
CVE-2026-18916High7.5—2026-08-26Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query.

Opennds · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-38820High8.3—2026-08-28openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
CVE-2026-38822High7.6—2026-08-28In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys.
CVE-2026-38821High7.1—2026-08-28A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial of service) and potentially achieve remote code execution.
CVE-2026-38819Medium5.3—2026-08-28Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

Openwrt · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69096High8.8—2026-08-03OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an OS command injection vulnerability.
CVE-2026-67352High7.6—2026-08-01luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML.
CVE-2026-69095High7.5—2026-08-03OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attackers to read files outside the configured runtimeDir.
CVE-2026-68583Medium5.4—2026-08-02luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML.

Oscal-compass · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57170High7.8—2026-08-26Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents.
CVE-2026-54757High7.8—2026-08-25Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents.
CVE-2026-57171High7.7—2026-08-26Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents.
CVE-2026-52776———2026-08-26Compliance-trestle (Trestle) is a tooling platform for managing compliance as code.

Pac4j · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82461High8.1—2026-08-29pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles.
CVE-2026-82462Medium6.5—2026-08-29pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation.
CVE-2026-82464Medium6.1—2026-08-29pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern.
CVE-2026-82465Medium5.3—2026-08-29pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest().

Planet Technology Corp. · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75124High7.5—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string without guaranteeing…
CVE-2026-75121High7.2—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.
CVE-2026-77218Medium4.9—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi.
CVE-2026-77217Medium4.9—2026-08-28PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi.

Pterodactyl · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52855Critical9.9—2026-07-31Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.
CVE-2026-61617High7.7—2026-08-26Wings is the server control plane for the Pterodactyl game-server management panel.
CVE-2026-52856High7.5—2026-07-31Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.
CVE-2026-52857Medium5.5—2026-07-31Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.

Samsung Opensource · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86313High7.8—2026-09-07Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers.
CVE-2026-86315Medium6.2—2026-09-07An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition…
CVE-2026-86314Medium6.2—2026-09-07Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module i…
CVE-2026-49509Medium4.4—2026-09-04Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers.

Silicon Labs · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15418———2026-09-10In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory.
CVE-2026-5706———2026-08-28In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution.
CVE-2026-17610———2026-08-28In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service.
CVE-2026-6924———2026-07-23A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed.

Silverstripe · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54721High8.8—2026-08-27Silverstripe UserForms provides a visual form builder for the Silverstripe CMS.
CVE-2026-54718High7.2—2026-08-27Silverstripe Advanced Workflow is a highly configurable step-based workflow module.
CVE-2026-55779Medium5.4—2026-08-28Silverstripe Versioned provides versioning for Silverstripe models.
CVE-2026-54717Medium5.4—2026-08-06Silverstripe CMS is an open source content management system.

Softish · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81640High8.8—2026-09-09An attacker could derive the camera's Wi-Fi password and connect to its wireless network.
CVE-2026-77974High8.0—2026-09-09After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
CVE-2026-82563High7.6—2026-09-09An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position.
CVE-2026-81330Medium6.5—2026-09-09The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams.

Solidinvoice · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61686High7.5—2026-09-04SolidInvoice is an open-source invoicing platform.
CVE-2026-61608Medium6.8—2026-09-04SolidInvoice is an open-source invoicing platform.
CVE-2026-61688Medium6.5—2026-09-04SolidInvoice is an open-source invoicing platform.
CVE-2026-61614Medium5.9—2026-09-04SolidInvoice is an open-source invoicing platform.

St Engineering Idirect · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-38056High8.8—2026-09-11A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0.
CVE-2026-38058High8.1—2026-09-11The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts.
CVE-2026-38057High8.1—2026-07-10The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication.
CVE-2026-38059High7.5—2026-07-10The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-19683High7.4—2026-08-20A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways.
CVE-2026-75616Medium6.8—2026-08-19An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations.
CVE-2026-15141Medium5.7—2026-08-12The web interface of the affected device relies on the HTTP referrer header as part of request validation.  Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient…
CVE-2026-9033Medium4.3—2026-08-20An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions.

Xing Inc. · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70403Critical9.8—2026-09-04XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).
CVE-2026-69657Critical9.8—2026-09-04XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).
CVE-2026-62928Critical9.8—2026-09-04XING CPTrans-ME-X contains an OS Command Injection (CWE-78).
CVE-2026-66840High7.5—2026-09-04XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).

Zabbix · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-23930High7.5—2026-08-18An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service.
CVE-2026-23929Medium5.4—2026-08-18Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps.
CVE-2026-23922Medium4.9—2026-08-18The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'.
CVE-2026-1199Low3.7—2026-08-18Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.

1hive · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55658High7.7—2026-09-03Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.
CVE-2026-57445———2026-09-03Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.
CVE-2026-53924———2026-09-03Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.

Allinurl · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55777———2026-07-30GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser.
CVE-2026-55768———2026-07-30GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser.
CVE-2026-54715———2026-07-30GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser.

Ankaref Innovation And Technology Inc. · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6285High7.5—2026-09-10Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc.
CVE-2026-12683Medium5.4—2026-09-10Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.
CVE-2026-12682Medium5.4—2026-09-10Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.

Beaugunderson · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69198———2026-08-03ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.
CVE-2026-69192———2026-08-03ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.
CVE-2026-54272———2026-07-27ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

Bookwyrm-social · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86113Medium6.5—2026-09-05BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users' reading records.
CVE-2026-86111Medium6.5—2026-09-05BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs.
CVE-2026-86112Medium5.4—2026-09-05BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access.

Broadcom · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47858High8.0—2026-07-30Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution.
CVE-2026-47878Medium5.6—2026-08-27DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist.
CVE-2026-59326Low3.3—2026-07-30The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configur…

Ceph · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50152Critical9.1—2026-08-28Ceph is an open-source distributed storage platform providing object, block, and file storage.
CVE-2026-39944High8.8—2026-08-28Ceph is an open-source distributed storage platform providing object, block, and file storage.
CVE-2026-54330High8.1—2026-08-28Ceph is an open-source distributed storage platform providing object, block, and file storage.

Cert/cc · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18749Critical9.8—2026-08-12The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared.
CVE-2026-18744Medium6.5—2026-08-12Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — test_func only checks _is_my_case, not ownership of kwargs['member'].
CVE-2026-18750Medium5.3—2026-08-12vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin.

Chainlit · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45018Critical9.8—2026-08-25Chainlit is a Python framework for building production-ready conversational AI applications.
CVE-2026-86099High8.2—2026-09-09Chainlit through 2.12.0 fails to validate the client-supplied socket.io sessionId parameter, allowing unauthenticated attackers to traverse filesystem paths by injecting absolute or relative path sequences.
CVE-2026-45019High7.2—2026-08-25Chainlit is a Python framework for building production-ready conversational AI applications.

Configserver · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65639———2026-09-10OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied…
CVE-2026-65638———2026-09-10Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.
CVE-2026-67402———2026-09-04An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host.

Contao · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55825Low3.1—2026-07-31Contao is an Open Source CMS.
CVE-2026-57232Low3.1—2026-07-31Contao is an Open Source CMS.
CVE-2026-55824Low2.6—2026-07-31Contao is an Open Source CMS.

Dai-shi · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48160———2026-08-10react-tracked provides state usage tracking with Proxies.
CVE-2026-48159———2026-08-10use-reducer-async is a React useReducer with async actions.
CVE-2026-48158———2026-08-10use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2dae054ca014068bdbbb…

Dalibo · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19633High8.8—2026-09-06PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions.
CVE-2026-83534Medium6.4—2026-09-06PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege.
CVE-2026-19634Medium6.4—2026-09-06PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions.

Dartiss · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49466Medium6.5—2026-08-12Draft List is a WordPress plugin to manage and promote unpublished content.
CVE-2026-48093Medium6.5—2026-08-07The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting (XSS) through the external URL embed feature in post content.
CVE-2026-48094———2026-08-07The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping function on the `$url` variable before it is rendered into HTML content.

Defaultfuction · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86172Medium6.3—2026-09-06A vulnerability was detected in DefaultFuction CRM 1.0.0.
CVE-2026-86171Medium6.3—2026-09-06A security vulnerability has been detected in DefaultFuction CRM 1.0.0.
CVE-2026-86170Medium6.3—2026-09-06A weakness has been identified in DefaultFuction CRM 1.0.0.

Deskflow · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65832High8.2—2026-08-17Deskflow is a keyboard and mouse sharing app.
CVE-2026-63409High8.2—2026-08-17Deskflow is a keyboard and mouse sharing app.
CVE-2026-65976Medium6.5—2026-08-17Deskflow is a keyboard and mouse sharing app.

Dglingren · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6642Medium6.4—2026-09-11The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up to and including 3.35.
CVE-2026-6641Medium6.4—2026-09-11The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to and including 3.35.
CVE-2026-6640Medium6.4—2026-09-11The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_link_attributes' parameter in all versions up to, and including, 3.35 due to insufficient input sanitization and output escaping.

Dolibarr · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89013High7.5—2026-09-11Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by supplying a crafted hashp parameter value.
CVE-2026-89012Medium6.5—2026-09-11Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylis…
CVE-2026-82633Medium4.3—2026-08-30Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users.

Eidetic-labs · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76245———2026-08-19stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired.
CVE-2026-76244———2026-08-19stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled.
CVE-2026-76236———2026-08-19stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-forgotten) tombstone mechanism.

Flavorjones · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73490Medium4.7—2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
CVE-2026-73492———2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
CVE-2026-73491———2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.

Flextype · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77939Medium6.5—2026-08-28Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony Expression…
CVE-2026-88897Medium5.9—2026-09-10Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes.
CVE-2026-89145Medium4.2—2026-09-11Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies().

Free5gc · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55785Low3.7—2026-08-28free5GC is an open-source implementation of the 5G core network.
CVE-2026-55068———2026-08-28free5GC is an open-source implementation of the 5G core network.
CVE-2026-53551———2026-07-31free5GC is an open-source implementation of the 5G core network.

Freebsd · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58096High8.8—2026-08-26LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717.
CVE-2026-58095High8.8—2026-08-26mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer.
CVE-2026-58097High7.8—2026-08-26mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface.

Geonetwork · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58400Critical9.1—2026-09-03GeoNetwork is a catalog application to manage spatially referenced resources.
CVE-2026-63219High8.6—2026-09-03GeoNetwork is a catalog application to manage spatially referenced resources.
CVE-2026-53573———2026-07-31GeoNetwork is a catalog application to manage spatially referenced resources.

Getkirby · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75594———2026-08-31Kirby is an open-source content management system.
CVE-2026-75592———2026-08-31Kirby is an open-source content management system.
CVE-2026-71415———2026-08-31Kirby is an open-source content management system.

Getwpfunnels · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10196Critical9.8—2026-09-05The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handl…
CVE-2026-84908Medium5.3—2026-09-09The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13.
CVE-2026-19800Medium4.9—2026-09-09The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on…

Gitpython-developers · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87817High8.8—2026-09-09GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD.
CVE-2026-87819High7.5—2026-09-09GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields.
CVE-2026-87818Medium6.5—2026-09-09GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands.

Gotenberg · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44829High8.8—2026-08-19Gotenberg is a Docker-powered stateless API for PDF files.
CVE-2026-45742High7.5—2026-08-19Gotenberg is a Docker-powered stateless API for PDF files.
CVE-2026-45741High7.5—2026-08-19Gotenberg is a Docker-powered stateless API for PDF files.

Govcert-lu · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55620High7.5—2026-08-25eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information.
CVE-2026-55618Medium6.5—2026-08-25eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information.
CVE-2026-55619Medium5.3—2026-08-25eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information.

Gpac · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79522Medium6.5—2026-09-09An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request.
CVE-2026-79514Medium6.5—2026-09-09An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request.
CVE-2026-79513Medium6.5—2026-09-09A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline.

Graylog2 · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55841High7.5—2026-08-28Graylog is a free and open log management platform.
CVE-2026-55425Medium5.0—2026-08-28Graylog is a free and open log management platform.
CVE-2026-55867———2026-08-28Graylog is a free and open log management platform.

Hapifhir · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62296High7.5—2026-08-07HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.
CVE-2026-62295High7.5—2026-08-07HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.
CVE-2026-62293Medium5.0—2026-08-07HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.

Hcl Software · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-52657Low3.5—2026-09-07HCL MyXalytics was affected by Potential DOS Vulnerability.
CVE-2025-52652Low3.5—2026-09-07HCL MyXalytics was affected by Content Spoofing Vulnerability.
CVE-2025-52651Low3.5—2026-09-07HCL MyXalytics was affected by Improper Input validation Vulnerability.

Hikvision · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85545High7.1—2026-09-10There is an Vulnerability in some HikCentral Access Control versions.
CVE-2026-85544Medium6.1—2026-09-10Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, ther…
CVE-2026-85543Medium4.3—2026-09-10Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces.

Hitachi Energy · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9854High7.8—2026-09-03A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.
CVE-2026-9853High7.8—2026-09-03A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself.
CVE-2026-9852High7.8—2026-09-03A CSV injection vulnerability exists in SYS600.

Home-assistant · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66061High7.1—2026-08-07Home Assistant is open source home automation software focused on local control and privacy.
CVE-2026-66060High7.1—2026-08-07Home Assistant is open source home automation software focused on local control and privacy.
CVE-2026-59717Medium4.3—2026-08-07Home Assistant is open source home automation software focused on local control and privacy.

Howyar · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89178High8.8—2026-09-11WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability.
CVE-2026-89177High8.8—2026-09-11WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability.
CVE-2026-89179Medium4.3—2026-09-11WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability.

Http4s · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73493High7.5—2026-08-12Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services.
CVE-2026-73495High7.4—2026-08-12blaze is a Scala library for building asynchronous pipelines, with a focus on network IO.
CVE-2026-54556———2026-08-26Http4s is a Scala interface for HTTP services.

Icecoder · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64837High8.8—2026-09-10ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names.
CVE-2026-64836High8.8—2026-09-10ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check.
CVE-2026-64838High8.3—2026-09-10ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside the document root.

Jumpserver · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44845Medium6.7—2026-08-17JumpServer is an open source bastion host and an operation and maintenance security audit system.
CVE-2026-44846Medium6.2—2026-08-17JumpServer is an open source bastion host and an operation and maintenance security audit system.
CVE-2026-54336Medium5.4—2026-08-17JumpServer is an open source bastion host and an operation and maintenance security audit system.

Kata-containers · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50540Critical9.6—2026-08-07Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.
CVE-2026-64676Medium5.7—2026-08-07Kata Containers is an open source implementation of lightweight Virtual Machines (VMs) that perform like containers.
CVE-2026-47243———2026-08-07Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

Kestra-io · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73247High8.6—2026-08-11Kestra is an open-source, event-driven orchestration platform.
CVE-2026-73246High7.5—2026-08-11Kestra is an open-source, event-driven orchestration platform.
CVE-2026-73245Medium6.5—2026-08-11Kestra is an open-source, event-driven orchestration platform.

Kovidgoyal · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73249High7.5—2026-08-11calibre is an e-book manager.
CVE-2026-73248———2026-08-11calibre is an e-book manager.
CVE-2026-72913———2026-08-10Kitty is a cross-platform GPU based terminal.

Mageplaza · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79322High8.6—2026-09-09SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via…
CVE-2026-79324High7.5—2026-09-09Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses…
CVE-2026-79323High7.5—2026-09-09Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal custo…

Masteriyo · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62107High8.8—2026-09-11Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-62132Medium5.3—2026-09-11Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-8279Medium5.3—2026-09-07The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in the CourseProgressItemsController in all versions up to, and including…

Mastodon · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72915High7.5—2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.
CVE-2026-72914High7.5—2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.
CVE-2026-72916———2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.

Mikrotik · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86060Critical9.8KEV2026-09-05RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation.
CVE-2026-67277High8.2KEV2026-09-05RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication.
CVE-2026-14227Medium4.9—2026-07-30An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability.

Moby · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75593———2026-08-19BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
CVE-2026-61712———2026-08-19BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
CVE-2026-61711———2026-08-19BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.

Mz Automation Gmbh · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66360High7.5—2026-07-30The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation.
CVE-2026-66349Medium6.5—2026-07-30The MMS server connection handler contains a flaw in its processing of BER-encoded request data.
CVE-2026-56758Medium6.5—2026-07-30The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment.

N-able · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86218Critical9.8KEV2026-09-06N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
CVE-2026-86206———2026-09-05A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs.
CVE-2026-86207———2026-09-05An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

Netgate · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56128Medium5.4—2026-09-03pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_schedule_edit.php.
CVE-2026-56127Medium5.4—2026-09-03pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall_rules_edit.php.
CVE-2026-56126Medium5.4—2026-09-03pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /status_monitoring.php.

Nextgen Healthcare · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82583High8.3—2026-09-11NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file…
CVE-2026-78224High8.2—2026-09-11The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks.
CVE-2026-82578High7.5—2026-09-11When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks.

Ningzichun · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86673High7.3—2026-09-08A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf.
CVE-2026-86674Medium6.3—2026-09-08A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf.
CVE-2026-86672Medium5.3—2026-09-08A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf.

Nl-portal · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49464High8.1—2026-09-11NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.
CVE-2026-49463Medium6.5—2026-09-11NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.
CVE-2026-49462Medium5.3—2026-09-11NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.

Nordic Semiconductor Asa · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14296High7.5—2026-09-07When using the Direct XIP update strategy, the main application image starts other cores (i.e.
CVE-2026-18796———2026-09-07Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code.
CVE-2026-14297———2026-09-07A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory.

Nousresearch · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71963High8.8—2026-09-03Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets cor…
CVE-2026-82021High8.3—2026-08-28Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to execute arbitrary code by compromising a third-party upstream repository referenced via a mutable branch…
CVE-2026-82020Medium6.8—2026-08-28Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the…

Openbao · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46405Medium5.3—2026-08-07OpenBao is an open source identity-based secrets management system.
CVE-2026-45808———2026-08-07OpenBao is an open source identity-based secrets management system.
CVE-2026-46358———2026-08-07OpenBao is an open source identity-based secrets management system.

Openedx · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53635High7.6—2026-09-02Open edX Platform enables the authoring and delivery of online learning at any scale.
CVE-2026-55421Medium6.8—2026-09-02Open edX Platform enables the authoring and delivery of online learning at any scale.
CVE-2026-53636Medium4.7—2026-09-02Open edX Platform enables the authoring and delivery of online learning at any scale.

Patriksimek · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47686Critical9.9—2026-08-17vm2 is an open source vm/sandbox for Node.js.
CVE-2026-47698Critical9.8—2026-08-17vm2 is an open source vm/sandbox for Node.js.
CVE-2026-47683———2026-08-17vm2 is an open source vm/sandbox for Node.js.

Pdm-project · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47781———2026-08-04PDM is a Python package and dependency manager.
CVE-2026-47764———2026-08-04pdm is a Python package and dependency manager supporting the latest PEP standards.
CVE-2026-47763———2026-08-04pdm is a Python package and dependency manager supporting the latest PEP standards.

Pegasystems · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13761———2026-08-28Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
CVE-2026-10754———2026-08-10Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.
CVE-2026-14337———2026-08-04Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component.

Progress Software · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80462Critical10.0—2026-09-11A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
CVE-2026-19219High8.1—2026-09-02In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to…
CVE-2026-18672High7.5—2026-09-02In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file co…

Prowler-cloud · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73263Critical9.9—2026-08-12Prowler is a cloud security platform.
CVE-2026-73264High7.6—2026-08-12Prowler is a cloud security platform.
CVE-2026-73262Medium5.4—2026-08-12Prowler is a cloud security platform.

Pyca · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69249———2026-08-03python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVE-2026-69248———2026-08-03cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVE-2026-69247———2026-08-03cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Rargames · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50191High8.8—2026-08-184gaBoards is a boards system for realtime project management.
CVE-2026-50186High8.8—2026-08-184gaBoards is a boards system for realtime project management.
CVE-2026-53958High7.6—2026-08-184gaBoards is a boards system for realtime project management.

Semaphoreui · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73294Critical9.9—2026-08-12Semaphore UI is a web interface for managing DevOps tools.
CVE-2026-73293High8.8—2026-08-12Semaphore UI is a web interface for managing DevOps tools.
CVE-2026-73292High8.3—2026-08-12Semaphore UI is a web interface for managing DevOps tools.

Shlinkio · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18737Medium6.5—2026-08-03Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated direction value in the orderBy query parameter of the tag statistics endpoint.
CVE-2026-18736Medium5.0—2026-08-03Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolu…
CVE-2026-18738Medium4.7—2026-08-03Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or…

Sigstore · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49478High8.7—2026-08-13Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.
CVE-2026-54787Low3.1—2026-07-31sigstore-go is a Go library for Sigstore signing and verification.
CVE-2026-48791Low2.0—2026-08-13sigstore-java is a sigstore java client for interacting with sigstore infrastructure.

Smarty-php · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62993———2026-08-31Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
CVE-2026-62996———2026-08-07Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
CVE-2026-62992———2026-08-07Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.

Sonirico · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55582High8.4—2026-08-25mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.
CVE-2026-55581High8.4—2026-08-25mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.
CVE-2026-55580———2026-08-25mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.

Stellarwp · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3174High7.5—2026-09-08The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4.
CVE-2026-12483High7.5—2026-09-04The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5.
CVE-2026-12843Medium5.4—2026-09-05The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6.

Strukturag · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50142High7.5—2026-08-18libheif is a HEIF and AVIF file format decoder and encoder.
CVE-2026-54241High7.4—2026-09-11libde265 is an open source implementation of the h.265 video codec.
CVE-2026-54240High7.4—2026-09-11libde265 is an open source implementation of the h.265 video codec.

Studio-42 · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81889High8.6—2026-08-31elFinder is an open-source file manager for web, written in JavaScript using jQuery UI.
CVE-2026-81891High8.1—2026-08-31elFinder is an open-source file manager for web, written in JavaScript using jQuery UI.
CVE-2026-81890Medium5.4—2026-08-31elFinder is an open-source file manager for web, written in JavaScript using jQuery UI.

Sulu · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82396Medium5.4—2026-08-31Sulu is an open-source PHP content management system based on the Symfony framework.
CVE-2026-82395———2026-08-31Sulu is an open-source PHP content management system based on the Symfony framework.
CVE-2026-82394———2026-08-31Sulu is an open-source PHP content management system based on the Symfony framework.

Telenia Software · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64827Critical9.8—2026-08-03Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current p…
CVE-2026-67609High7.8—2026-08-03Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploi…
CVE-2026-67608High7.2—2026-08-03Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php that allows authenticated attackers to execute arbitrary operating system commands…

Themeum · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17037High7.2—2026-09-11The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘comment’ parameter in all versions up to, and including, 6.2.0 due to insufficient input sanitizatio…
CVE-2026-19945Medium6.4—2026-09-09The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping.
CVE-2026-19944Medium4.9—2026-09-09The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

Thimpress · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12230Medium6.4—2026-09-08The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout_custom_css' parameter in all versions up to, and including, 4.3.9.1 due to insuffici…
CVE-2026-82024Medium5.4—2026-09-03LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz qu…
CVE-2026-82023Medium4.3—2026-09-03LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a mi…

Tooljet · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82869High7.7—2026-08-31ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that grants JOIN_TABLES ability to all authenticated users without role or workspace membership validation.
CVE-2026-73068Medium5.9—2026-08-11ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents.
CVE-2026-82873Medium5.0—2026-08-31ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app defin…

Triggerdotdev · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73658High8.2—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.
CVE-2026-73659High8.1—2026-08-13Trigger.dev is the open-source platform for building AI workflows in TypeScript.
CVE-2026-73657Medium4.2—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.

Tycon Systems · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82712High8.8—2026-09-04Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.
CVE-2026-82684High8.1—2026-09-04Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability.
CVE-2026-77847Medium6.5—2026-09-04Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability.

Unitecms · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18561High7.5—2026-09-11The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16.
CVE-2026-77150Medium6.1—2026-09-11The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data[name]' Parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping.
CVE-2026-75586Medium6.1—2026-09-05The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formData[id]' Parameter in all versions up to, and including, 2.0.17 due to insufficient input sanitization and output escaping.

Wger-project · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86254Medium6.8—2026-09-06wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the is_same_gym() helper, allowing gym staff w…
CVE-2026-86257Medium5.4—2026-09-06wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas.
CVE-2026-86256Medium5.4—2026-09-06wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view (wger/core/views/user.py).

Xen · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79602High8.8—2026-09-08A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
CVE-2026-62437Medium6.5—2026-09-08When guests are terminated, various pieces of cleanup need carrying out.
CVE-2026-79603Medium4.3—2026-09-08x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them.

0x5t4l1n · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48097High7.8—2026-08-07NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address.
CVE-2026-48098High7.3—2026-08-07NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address.

1panel-dev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69129———2026-08-26KubePi is a Kubernetes multi-cluster management panel.
CVE-2026-65956———2026-08-26KubePi is a Kubernetes multi-cluster management panel.

@Auth · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73418High7.5—2026-08-12NextAuth.js provides authentication for Next.js.
CVE-2026-73419Medium6.8—2026-08-12NextAuth.js provides authentication for Next.js.

Aaif-goose · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85623High8.8—2026-09-04goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection.
CVE-2026-72718———2026-08-10goose is general-purpose AI agent that runs on your machine.

Addonsorg · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18351Critical9.8—2026-09-10The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upload function.
CVE-2026-84293High7.2—2026-09-09The Repeater Fields for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output…

Advantech · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79698Critical9.9—2026-09-07A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-…
CVE-2026-79697Critical9.9—2026-09-07A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-…

Aio-libs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69244———2026-08-03AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
CVE-2026-69243———2026-08-03AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

Andialbrecht · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84305———2026-09-01sqlparse is a non-validating SQL parser module for Python.
CVE-2026-71491———2026-08-17sqlparse is a non-validating SQL parser module for Python.

Armiya Information Technologies Ltd. Co. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7188Critical9.8—2026-09-10Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd.
CVE-2026-8323Critical9.3—2026-09-10URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd.

Auth0 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85983High7.8—2026-09-08The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup.
CVE-2026-84685Medium6.5—2026-09-08The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state persists across HTTP requests.

Binarymuse · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63376High8.2—2026-09-03toml-node is a TOML parser for Node.js and the browser.
CVE-2026-77465High7.5—2026-09-03toml-node is a TOML parser for Node.js and the browser.

Blinkospace · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85607High8.8—2026-09-04Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/route…
CVE-2026-85624Medium6.5—2026-09-04Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers.

Boldthemes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62110Medium6.5—2026-09-11Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.
CVE-2026-7438Medium6.4—2026-09-11The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `supertitle` and `subtitle` attributes of the `bold_timeline_item` shortcode in all versions up to, and including, 1.2.8 due to insufficient i…

Brainstorm Force · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85308Medium5.3—2026-09-03Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels.
CVE-2026-62134Medium4.3—2026-09-11Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.

Browserslist · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73089High7.5—2026-08-11Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.
CVE-2026-73088High7.5—2026-08-11Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.

Cakephp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54614Medium4.3—2026-08-26DebugKit provides a debugging toolbar for CakePHP applications.
CVE-2026-54713Low3.7—2026-08-27CakePHP Queue is a queue-interop compatible queueing library.

Canva · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85085Critical9.6—2026-09-04The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.
CVE-2026-85094High8.8—2026-09-04The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.

Checkpoint · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85103Critical9.8—2026-09-09A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CVE-2026-85102Critical9.8KEV2026-09-09Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Chocobozzz · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73211Critical9.8—2026-08-11PeerTube is an ActivityPub-federated video streaming platform.
CVE-2026-73090Critical9.3—2026-08-11PeerTube is an ActivityPub-federated video streaming platform.

Cisagov · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19671Medium6.5—2026-08-18Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives (zip/tar/rar/7z via libarchive), but those limits are not applied whe…
CVE-2026-19670Medium5.4—2026-08-18Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g.

Clastix · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62246High8.5—2026-07-30Kamaji is the Hosted Control Plane Manager for Kubernetes.
CVE-2026-62845Medium4.7—2026-07-30Kamaji is the Hosted Control Plane Manager for Kubernetes.

Containers · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88264Medium5.6—2026-09-10A flaw was found in crun.
CVE-2026-52791———2026-07-29fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers.

Contribsys · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63404———2026-08-25Faktory is a language-agnostic background job server.
CVE-2026-63403———2026-08-25Faktory is a language-agnostic background job server.

Coollabsio · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84694High8.8—2026-09-02Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers.
CVE-2026-86117High8.1—2026-09-05Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address without verifying provider assertions or binding OAuth identities.

Cursor · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73218———2026-08-11Cursor is a code editor built for programming with AI.
CVE-2026-73217———2026-08-11Cursor is a code editor built for programming with AI.

Dataease · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82879Medium6.3—2026-08-31DataEase before 2.10.26 contains multiple access control defects in the sharing link module.
CVE-2026-82878Medium6.3—2026-08-31DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users.

Dayuanjiang · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72777High8.6—2026-08-13Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution.
CVE-2026-73037Medium6.1—2026-08-13Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping into HTML and JavaScript.

Debian · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89169———2026-09-11live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing.
CVE-2026-77118———2026-08-20A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick.

Diem-project · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86183Medium5.3—2026-09-06A vulnerability was identified in diem-project diem up to 5.1.3.
CVE-2026-86182Medium4.3—2026-09-06A vulnerability was determined in diem-project diem up to 5.1.3.

Django-cms · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75526Medium4.4—2026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django.
CVE-2026-61663Medium4.3—2026-08-20django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django.

Doorkeeper-gem · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70665Medium4.2—2026-08-25Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper.
CVE-2026-44476———2026-08-25Doorkeeper is an OAuth 2 provider for Ruby on Rails.

Elegant Themes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3853Medium6.4—2026-09-05The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the `et_pb_video_slider_item` shortcode in all versions up to, and including, 4.27.6.
CVE-2026-4361Medium5.0—2026-09-05The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6.

Elixir-mint · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82729———2026-09-04Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause a denial of service.
CVE-2026-82728———2026-09-04Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service.

Enchant97 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50554Medium5.3—2026-09-03Note Mark is an open-source note-taking application.
CVE-2026-50553———2026-09-04Note Mark is an open-source note-taking application.

Encode · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73228Medium5.3—2026-08-11Django REST framework is a toolkit for building Web APIs.
CVE-2026-73229Medium4.3—2026-08-11Django REST framework is a powerful and flexible toolkit for building Web APIs.

Eprosima · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-22590Critical9.1—2026-09-09eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).
CVE-2026-22591High7.5—2026-09-09eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).

Facelessuser · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67422High7.5—2026-08-06pymdown-extensions is a collection of extensions for the Python Markdown library.
CVE-2026-61632Medium5.3—2026-08-06PyMdown Extensions is a set of extensions for the Python-Markdown markdown project.

Fahad Mahmood · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75133High7.5—2026-08-31Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `kbd_cron_process` pa…
CVE-2026-81782Medium6.5—2026-09-10Subscriber Cross Site Scripting (XSS) in WP Docs <= 2.3.1 versions.

Ffmpeg · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-30754High8.8—2026-09-08A memory corruption vulnerability exists in FFmpeg before 8.1.
CVE-2026-75142High7.8—2026-08-19FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c).

Filamentphp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84306Medium6.5—2026-09-01Filament is a collection of full-stack components for accelerated Laravel development.
CVE-2026-84307Low3.7—2026-09-01Filament is a collection of full-stack components for accelerated Laravel development.

Flarum · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-39923High8.1—2026-08-05Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint.
CVE-2026-39924Medium6.8—2026-08-05Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a victim changes their password, because the access_tokens table is never…

Forgejo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89094Critical9.9—2026-09-10Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.
CVE-2026-89151Low3.5—2026-09-11Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.

Gastromenum · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19205High7.5—2026-09-04Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting.
CVE-2026-19057Medium5.4—2026-09-04Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS.

Github · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76851High8.8—2026-09-01A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance.
CVE-2026-19118High7.5—2026-09-01A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution.

Gitroomhq · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19264Critical9.8—2026-08-07Postiz is an open-source social media scheduling tool.
CVE-2026-19127Medium6.5—2026-08-06An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflows.

Go-git · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71556High7.1—2026-08-07go-git is an extensible git implementation library written in pure Go.
CVE-2026-71557Medium6.3—2026-08-07go-git is an extensible git implementation library written in pure Go.

Gohugoio · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89259Critical9.8—2026-09-11Hugo is a static site generator.
CVE-2026-89258Medium6.3—2026-09-11Hugo is a static site generator.

Grisuno · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68503Critical9.8—2026-07-30LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework.
CVE-2026-68502Critical9.8—2026-07-30LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework.

Grpc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84304———2026-09-01gRPC-Go is the Go language implementation of gRPC.
CVE-2026-84303———2026-09-01gRPC-Go is the Go language implementation of gRPC.

Guzzle · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69246High7.2—2026-08-03Guzzle is an extensible PHP HTTP client.
CVE-2026-69245Medium6.5—2026-08-03Guzzle is an extensible PHP HTTP client.

Hackingrepo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54729———2026-07-31DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks.
CVE-2026-54722———2026-07-30DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks.

Hapijs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84368Low3.7—2026-09-01joi is a schema description language and data validator for JavaScript.
CVE-2026-84367Low3.7—2026-09-01joi is a schema description language and data validator for JavaScript.

Harttle · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69222High7.5—2026-08-19LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.
CVE-2026-61556———2026-08-19LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.

Hewlett Packard Enterprise · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73784High8.8—2026-09-11A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.
CVE-2026-73785High7.5—2026-09-11A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).

Idx Broker · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81787Medium6.5—2026-09-10Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.
CVE-2026-81788Medium6.3—2026-09-10Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

Imagination Technologies · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45200High7.8—2026-09-04Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption.
CVE-2026-45197Low2.5—2026-09-04Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory.

Instantsoft · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54611Medium5.5—2026-09-08InstantCMS is a free and open source content management system.
CVE-2026-48707Low3.1—2026-09-08InstantCMS is a free and open source content management system.

Insyde Software · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6485High8.2—2026-09-09UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
CVE-2026-12855High8.2—2026-09-09Unvalidated memory boundary could result in arbitrary code execution.

Interinfo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85540High8.8—2026-09-04DreamMaker developed by Interinfo has a SQL Injection vulnerability.
CVE-2026-85541Medium5.4—2026-09-04DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability.

Jandedobbeleer · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73505High7.8—2026-08-13Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer.
CVE-2026-73506Medium6.1—2026-08-13Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer.

Joedolson · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77187Medium6.4—2026-09-09The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes in all versions up to, and including, 3.8.3 due to insufficient input sanitization a…
CVE-2026-77186Medium6.4—2026-09-09The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output e…

Jovancoding · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73615High8.8—2026-08-13Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution.
CVE-2026-73614High8.8—2026-08-13Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command.

Jupyterlab · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73626High7.5—2026-08-13JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install().
CVE-2026-73415———2026-08-12jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

Kekingcn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73243Medium5.8—2026-08-11kkFileView is a universal file online preview project based on Spring Boot.
CVE-2026-73244Medium5.3—2026-08-11kkFileView is a universal file online preview project based on Spring Boot.

Kimai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49992———2026-09-11Kimai is an open-source time tracking application.
CVE-2026-49865———2026-09-11Kimai is an open-source time tracking application.

Krayin · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-41452Critical9.8—2026-08-03Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requ…
CVE-2026-41453High8.8—2026-08-03Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrary SQL into a HAVING clause by manipulating the rotten_lead[in] query parameter…

Kstover · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19769High7.2—2026-09-05The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due t…
CVE-2026-11363Medium6.6—2026-09-09The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.6 via deserialization of untrusted input .

Langchain-ai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48121Medium6.7—2026-08-04@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage.
CVE-2026-71433Medium5.3—2026-08-06LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver.

Lenve · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85214High8.1—2026-09-03vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR profiles by supplying any profile ID in the request body.
CVE-2026-85182High7.5—2026-09-03vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller.

Libexpat Project · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76956Medium5.9—2026-08-20In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.
CVE-2026-76957Medium4.9—2026-08-20libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.

Macropay-solutions · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55250———2026-09-08Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-perfor…
CVE-2026-53933———2026-09-08Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue.

Malach-it · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55221Medium6.5—2026-09-02Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications.
CVE-2026-49249———2026-09-02Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications.

Mar10 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48099High7.1—2026-08-13WsgiDAV is a generic and extendable WebDAV server based on WSGI.
CVE-2026-55509———2026-08-28WsgiDAV is a generic and extendable WebDAV server based on WSGI.

Matrix-org · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45057Medium4.9—2026-09-11matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk.
CVE-2026-45056———2026-09-11matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix clients.

Maximhq · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86242High8.1—2026-09-06Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authentication is disabled (the default, governance.auth_config.is_enabled=false).
CVE-2026-55245———2026-08-28Bifrost is an enterprise AI gateway for routing requests to model providers.

Medplum · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44506High8.2—2026-09-03Medplum is a developer platform that enables development of healthcare apps.
CVE-2026-53728High7.1—2026-09-03Medplum is a developer platform that enables development of healthcare apps.

Meeting-room-booking-system · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46688———2026-08-13The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms.
CVE-2026-46382———2026-08-13The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms.

Modelcontextprotocol · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53937Medium6.2—2026-09-09MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol.
CVE-2026-53965———2026-08-25The MCP PHP SDK (Composer package mcp/sdk) is the official Model Context Protocol SDK for PHP.

Mstfakts · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86213High7.3—2026-09-06A vulnerability was found in Mstfakts College-Management-System.
CVE-2026-86215Medium4.3—2026-09-06A vulnerability was identified in Mstfakts College-Management-System.

Mz Automation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63033Medium6.5—2026-07-30A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
CVE-2026-61893Medium6.5—2026-07-30A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.

Netskope · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15710———2026-09-11An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141.
CVE-2026-16174———2026-09-10Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems.

Next4biz Information Technologies Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7861Critical9.8—2026-09-07Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc.
CVE-2026-6377High7.5—2026-09-07Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc.

Oasdiff · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53508———2026-08-31oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs.
CVE-2026-53507———2026-08-31oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request.

Odysseus-dev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70619High8.8—2026-08-04Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authen…
CVE-2026-70620Medium6.8—2026-08-04Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint confi…

Onionshare · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54707Medium5.4—2026-07-31OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
CVE-2026-54706Medium4.8—2026-07-31OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

Open-telemetry · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81192High7.0—2026-09-08`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS.
CVE-2026-48496Medium6.2—2026-09-11OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages.

Openidc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53939Critical9.1—2026-09-09OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE).
CVE-2026-53938High8.2—2026-09-09OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE).

Osrg · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49838Medium5.9—2026-09-10GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.
CVE-2026-49837Medium5.9—2026-09-10GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.

Owen2345 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73331High7.1—2026-08-12CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates a…
CVE-2026-86100Medium6.4—2026-09-05Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature.

Papercut · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8794———2026-08-03PaperCut NG/MF contains an observable timing discrepancy in its authentication component.
CVE-2026-8793———2026-08-03PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component.

Passmark Software · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80119High7.8—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dum…
CVE-2026-80113High7.1—2026-09-04PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at an…

Paytr Payment And Electronic Money Institution Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16272Critical9.1—2026-09-09Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc.
CVE-2026-16037High7.5—2026-09-08Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc.

Penpot · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47665High8.7—2026-08-26Penpot is an open-source design and prototyping platform.
CVE-2026-47666High7.6—2026-08-26Penpot is an open-source design and prototyping platform.

Perforce · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85978Critical9.8—2026-09-09An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform.
CVE-2026-89212High8.6—2026-09-11A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing.

Perl · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13221Critical9.1—2026-07-13Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_s…
CVE-2026-57432High8.4—2026-07-13Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.

Phison Electronics Corporation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84696High8.2—2026-09-02Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms.
CVE-2026-82876High8.2—2026-08-31Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage.

Pimcore · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55634Critical9.9—2026-08-28Pimcore is an Open Source Data & Experience Management Platform.
CVE-2026-55220———2026-08-28Pimcore is an Open Source Data & Experience Management Platform.

Plone · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55248Critical9.1—2026-08-28plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets.
CVE-2026-55247Critical9.1—2026-08-28plone.app.event provides the event content type for Plone.

Pnpm · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82393High7.5—2026-08-31pnpm is a package manager.
CVE-2026-82392High7.1—2026-08-31pnpm is a package manager.

Privatebin · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55696Medium4.3—2026-08-28PrivateBin is an online pastebin where the server has zero knowledge of pasted data.
CVE-2026-55891Unrated——2026-08-28PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

Projeto-siga · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86273High7.3—2026-09-07A weakness has been identified in projeto-siga siga up to 11.1.1.
CVE-2026-86274Medium5.3—2026-09-07A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1.

Ptc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77646———2026-08-20A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM.
CVE-2026-77645———2026-08-20A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM.

Puwell Technology Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61515Critical9.8—2026-08-04Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell…
CVE-2026-61514Critical9.8—2026-08-04Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credenti…

Pydantic · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84381High8.1—2026-09-02HTTPX2 is a next generation HTTP client for Python.
CVE-2026-84378Medium5.9—2026-09-02HTTPX2 is a next generation HTTP client for Python.

Q00 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66065———2026-08-03Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior.
CVE-2026-47211———2026-08-03Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior.

Qt · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13326———2026-09-11An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag.
CVE-2026-11573———2026-09-08Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase).

Qwed-ai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55546Critical9.8—2026-08-25QWED-MCP is a deterministic verification gateway for MCP.
CVE-2026-55585High8.8—2026-08-25QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution.

Ramon-victor · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85702High7.3—2026-09-04A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
CVE-2026-85704Low3.7—2026-09-04A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

Rapid7 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19583Critical9.9—2026-09-10Velociraptor allows some sensitive artifacts to be gated by additional permissions.
CVE-2026-19584High7.7—2026-09-10Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature.

Razinsoft · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63106Critical9.8—2026-08-10ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterizati…
CVE-2026-63105Medium5.4—2026-08-10ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploiting unsanitized re…

Realmag777 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84816High7.1—2026-09-10Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.
CVE-2026-18562Medium6.1—2026-09-11The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3.

Rocketchat · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72918Medium5.4—2026-08-10Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVE-2026-72919Medium4.3—2026-08-10Rocket.Chat is an open-source, secure, fully customizable communications platform.

Rometheme · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84763High7.1—2026-09-03Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.
CVE-2026-62133Medium5.4—2026-09-11Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.

Roocodeinc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82537High8.8—2026-09-08Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash.
CVE-2026-82536High8.8—2026-09-08Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's…

Ruby · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80212High7.5—2026-08-27An issue was discovered in the resolv gem before 0.7.2 for Ruby.
CVE-2026-80213Medium4.0—2026-08-27An issue was discovered in the resolv gem before 0.7.2 for Ruby.

S9y · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73629High8.5—2026-08-13Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges.
CVE-2026-67350Medium4.3—2026-07-31Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plu…

Sage · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67395Medium5.9—2026-09-01A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters.
CVE-2026-67403———2026-09-09Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.

Saturday Drive · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87870Medium6.4—2026-09-10The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Parameters (interval, format, emailTo) in all versions up to, and including, 3.0.3 due to insufficient input sanitization an…
CVE-2026-15550Medium4.3—2026-09-05The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30.

Scrapy · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84366High7.4—2026-09-01Scrapy is a high-level web crawling and scraping framework for Python.
CVE-2026-55520———2026-08-28Protego is a pure-Python robots.txt parser with support for modern conventions.

Scriban · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-74792High7.5—2026-08-16Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing.
CVE-2026-74787High7.5—2026-08-16Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection.

Shirasagi Project · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81635Medium5.4—2026-09-10A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product.
CVE-2026-82582Medium4.3—2026-09-10An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

Sick Ag · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11841Critical9.4—2026-07-28An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions.
CVE-2026-80469High8.3—2026-09-11An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code.

Sonicwall · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81939Critical9.1—2026-09-04A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted arch…
CVE-2026-78327Critical9.1—2026-09-04An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privi…

Spectolabs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50013High7.5—2026-09-11Hoverfly is an open source API simulation tool.
CVE-2026-50018Medium6.5—2026-09-11Hoverfly is an open source API simulation tool.

Svg · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84370High8.2—2026-09-01SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.
CVE-2026-84369Medium6.1—2026-09-01SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

Tdunning · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87962High7.5—2026-09-10t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data.
CVE-2026-87822High7.5—2026-09-09t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks.

Teltonika Networks · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18368———2026-08-13In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data.
CVE-2026-16455———2026-08-13In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to…

The Netbsd Foundation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57842High7.0—2026-09-11NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path.
CVE-2026-57843Medium5.5—2026-09-11NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening world-accessible devices such as /dev/null or /dev/zero, which…

Trusted Computing Group · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6726High7.9—2026-08-11An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key…
CVE-2026-6727Medium5.9—2026-08-11A timing side-channel vulnerability exists in the RSA OAEP decryption implementation.

Typo3 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85400———2026-09-08Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands.
CVE-2026-77132———2026-09-08It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization checks.

Usememos · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84203High8.1—2026-09-01Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access.
CVE-2026-82476Medium5.3—2026-08-29Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP validation.

Valkey-io · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85522Medium5.3—2026-09-04A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0.
CVE-2026-86227Low3.1—2026-09-06A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1.

Videolan · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56711High7.0—2026-09-09VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media.
CVE-2026-73324Medium4.3—2026-09-09Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source.

Vps.org · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16504Critical9.8—2026-07-31Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.
CVE-2026-16503Critical9.1—2026-07-31Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres".

Wallabag · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82081Medium6.4—2026-08-28wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.
CVE-2026-82089———2026-08-28The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView.

Websitebaker Org E.v. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61524High7.2—2026-08-03WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a…
CVE-2026-61523High7.2—2026-08-03WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is w…

Wpmanageninja · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73533Critical9.8—2026-08-13Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server.
CVE-2026-73532Critical9.8—2026-08-13Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server.

Xdan · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62324Medium5.4—2026-07-31Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.
CVE-2026-65841———2026-07-31Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor.

Yhirose · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77358———2026-08-28cpp-httplib is a C++ header-only HTTP/HTTPS library.
CVE-2026-77341———2026-08-28cpp-httplib is a C++ header-only HTTP/HTTPS library.

Yith · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84238Critical9.8—2026-09-03Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.
CVE-2026-14359High8.8—2026-09-09The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0.

Yordam Informatics Technology Consulting, Training, And Electronic Systems Industry And Trade Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78377Medium6.1—2026-09-09URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.
CVE-2026-11838Medium4.3—2026-09-09Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.

Yordam Information Technology Consulting, Training And Electronic Systems Industry And Trade Inc. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19727Medium6.1—2026-09-04Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.
CVE-2026-77818Medium6.1—2026-09-04Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.

Zephyrproject · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15460Medium5.4—2026-09-09The Bluetooth Classic (BR/EDR) L2CAP receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap_br.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached…
CVE-2026-15461Medium5.3—2026-09-10The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl78xx/) embeds a generic struct gnss_nmea0183_match_data match_data inside struct hl78xx_gnss_data.

100plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84818High7.1—2026-09-08Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

10up · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62088Medium5.3—2026-09-11Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data.

10web · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85645Medium6.1—2026-09-10The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and including, 1.15.46 due to insufficient…

92181 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86303High7.3—2026-09-07A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f.

@Vitest · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84373Medium5.9—2026-09-01Vitest is a testing framework powered by Vite.

Acrisure · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18411High8.1—2026-08-05The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices.

Acyba · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77807High7.5—2026-09-11The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter.

Adaltas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85063———2026-09-03node-csv is a full-featured CSV parser with a simple API that is tested against large datasets.

Address_suggestion_project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81167Medium4.8—2026-09-02Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS).

Adonisjs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61526Medium6.1—2026-07-30AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.

Adrian Tobey · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85310Medium6.5—2026-09-10import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

Advplyr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73085———2026-08-11Audiobookshelf is a self-hosted audiobook and podcast server.

Agentfront · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67531———2026-08-06FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP).

Ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73086High7.4—2026-08-11nanoid is a secure, URL-friendly, unique string ID generator for JavaScript.

Aider-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85674High7.8—2026-09-04aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in.

Aimeos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49262Low3.0—2026-08-12In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding.

Aimhubio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85663Critical9.8—2026-09-04Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation.

Ajcloud · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56718High7.5—2026-08-30AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traver…

Alchemycms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86777Medium5.3—2026-09-09AlchemyCMS versions before 7.4.16 and 8.x before 8.3.6 fail to authorize access to the GET /api/nodes endpoint, allowing unauthenticated attackers to retrieve all navigation nodes.

Alfio-event · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50165———2026-09-09alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.

Algosec · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77654———2026-09-08Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.

Ami · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-33197———2026-09-08AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access.

Amir20 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73087———2026-08-11Dozzle is a realtime log viewer for docker containers.

Anchorcms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88959High8.8—2026-09-10Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones.

Anephenix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73561High7.5—2026-08-13Hub is a Node.js WebSocket server and client with added features.

Anh Tran · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62113Medium4.3—2026-09-11Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.

Apconw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82881Medium5.4—2026-08-31Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks.

Appleple Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87727Medium6.5—2026-09-11a-blog cms Ver.

Aquaproj · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55569Medium6.6—2026-08-28aqua is a declarative command-line version manager written in Go.

Arduino · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48490———2026-09-11ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform.

Arduino-libraries · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47773———2026-09-11ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models.

Argneshu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84201High7.1—2026-09-01appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT directory.

Arma Digital Media Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9160Medium4.3—2026-09-11Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc.

Arubadev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15889Medium6.4—2026-09-10The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping.

As203038 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53611Critical9.8—2026-09-02Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC (ConnectRPC) API, an embedded SvelteKit…

Ascensio System Sia / Onlyoffice · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84282Medium6.5—2026-09-08A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12.

Ashan Perera · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81791Medium6.5—2026-09-10Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions.

Asp-cms Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2019-25765High7.5—2026-08-13ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script.

Ateeq Rafeeq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81803High7.5—2026-09-10Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.

Aukejomm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19778Medium6.5—2026-09-09The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficie…

Authorizerdev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54072Critical9.3—2026-09-11Authorizer is an open-source, self-hostable authentication and authorization server.

Autodesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85217High8.6—2026-09-10A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent.

Automattic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48888High7.5—2026-09-08Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS.

Avaiga · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85183Critical9.3—2026-09-03Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications.

Aveva · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81824Medium4.7—2026-09-08The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.

Awesomesupport · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19946Medium4.3—2026-09-09The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9.

Axllent · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84697Medium5.3—2026-09-02Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations.

Bablilayoub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54650High8.6—2026-07-28openhole exposes localhost to the internet in one command.

Backblaze · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19820———2026-09-01A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup.

Bahçelievler Muncipality · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6223Critical9.4—2026-09-07Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass.

Bank-vaults · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54725Critical9.6—2026-07-31vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible.

Basecamp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73427———2026-08-12Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.

Basekick-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55678———2026-08-28Arc is an open, SQL-native time-series database for telemetry.

Beaverbuilder · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18021Medium6.5—2026-09-08The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.10.3.1.

Behavioral Technology Group · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87931Critical9.6—2026-09-10A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707.

Beijing Meite Software Technology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86272High7.3—2026-09-07A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000.

Berriai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84377Medium6.5—2026-09-02LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

Bestweblayout · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13359High7.2—2026-09-09The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to ins…

Bishopfox · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53649Critical9.6—2026-09-02Joro is a web exploitation framework.

Bitfrost.io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86840Critical9.1—2026-09-08The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution.

Bluewave-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85390High7.1—2026-09-03Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrative actions.

Boldgrid · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78438High7.2—2026-09-05The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escapin…

Bookstackapp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84695High8.7—2026-09-02BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unvalidated base64 content and stores it without content inspection.

Bouncycastle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59643High7.5—2026-08-03In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored.

Brainstormforce · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18406High7.2—2026-09-05The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insuffi…

Brainzcompany · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88260———2026-09-11Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion.

Brechtvds · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75905Medium4.3—2026-09-09The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0.

Brightio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50558Medium5.9—2026-07-29Penelope Shell Handler is a post-exploitation shell handler for authorized security testing.

Brix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71851Critical9.0—2026-08-07crypto-js is a JavaScript library of crypto standards.

Browser-use · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82640Medium5.5—2026-08-30browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions.

Buddypress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-12145Medium4.3—2026-09-11The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bp_notifications_action_bulk_manage due to missing validation on a user controlled key.

Builderall · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15796Medium6.4—2026-09-10The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping.

Bull · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-15679———2026-09-11Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.

Butlerx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49864———2026-08-13wetty provides terminal access in browser over http/https.

C-ares · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-33630High7.5—2026-09-03c-ares is an asynchronous resolver library.

C4illin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85618Medium6.5—2026-09-04ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives.

Captcha_protected_page_project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81168Low3.7—2026-09-02Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass.

Carecam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85083Medium6.8—2026-09-11The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication.

Cbcoutinho · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55640Critical9.1—2026-08-25Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance.

Cbutlerjr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84960Medium6.1—2026-09-11The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping.

Cc-tweaked · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55758———2026-08-27CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game.

Ccfos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85692Medium6.5—2026-09-04Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool.

Cedar-policy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49473High8.8—2026-08-13@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing…

Cefsharp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48796Medium5.3—2026-08-18CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications.

Centarro · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73475Critical9.1—2026-09-02Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing.

Cesanta · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86716High7.3—2026-09-08A vulnerability was determined in Cesanta mJS up to 1.26.

Chainguard-dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54174High8.3—2026-09-11melange allows users to build apk packages using declarative pipelines.

Chamilo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82535Medium6.1—2026-09-11Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassi…

Chatgptnextweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82639High7.5—2026-08-30NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key.

Chatwoot · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72719Medium6.7—2026-08-10Chatwoot is a customer engagement suite.

Checkmk Gmbh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15937———2026-09-04Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoint…

Cheshire-cat-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85093Medium6.5—2026-09-03Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points.

Chewkeanho · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85649High7.9—2026-09-04(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh.

Chroma-core · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85664High7.5—2026-09-04Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests.

Cisco · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-20293High7.1—2026-09-08A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or…

Citirx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78546———2026-09-11Out-of-bounds read vulnerability in Citirx Workspace app for Windows.

Citrix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78547———2026-09-11Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.

Cleantalk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77830High7.2—2026-09-05The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitiz…

Cloud Foundry Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47839———2026-09-11A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration.

Codesupplyco · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-2390Medium6.4—2026-09-07The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4.

Collective · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55099High7.5—2026-08-25icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python.

Comesio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19985Medium6.1—2026-09-11The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'post_types', and 'orderby' request parameters.

Composer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84361———2026-09-01Composer is a dependency Manager for the PHP language.

Compression · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87776High7.5—2026-09-11compression is a Node.js and Express compression middleware.

Conda · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53956Medium5.4—2026-09-09Rattler is a library that provides common functionality used within the conda ecosystem.

Confidential-containers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47699Medium6.4—2026-08-18Confidential Containers Guest Components provides guest tools and components for confidential container workloads.

Connectwise · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84869Critical9.9KEV2026-09-08A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances.

Cookies · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88038Medium4.8—2026-09-10cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies.

Copier-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62999High7.5—2026-07-31Copier is a library and CLI app for rendering project templates.

Countly · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87803High7.1—2026-09-10An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sanitizer.

Cozmoslabs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6431High7.2—2026-09-07The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and in…

Cozy Vision Technologies Pvt. Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62106High8.8—2026-09-11Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.

Crmeb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85212High8.3—2026-09-03CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches.

Crocoblock · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84817High7.1—2026-09-08Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

Cssimmon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18386Medium4.9—2026-09-10The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter.

Cyberelf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19614———2026-09-08The API is prone to XML external entity (XXE) injection.

Cybertimon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64816Medium6.5—2026-07-30RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in lut_processing.rs.

Cypht-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71981High8.8—2026-09-01Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back_query GET parameter of the logout hand…

Cyrusimap · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61907Medium4.3—2026-09-09An issue was discovered in Cyrus IMAP before 3.12.4.

D-zero Co.,ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84063Medium6.5—2026-09-10BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type.

Dahlia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54511High8.6—2026-08-26LogTape is an unobtrusive logging library.

Dassault Systèmes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16279Critical9.3—2026-08-27An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

Data_field_project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81269Medium5.3—2026-09-02Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing.

Datadog · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54788High7.5—2026-08-28dd-trace-rs provides Datadog application performance monitoring for Rust.

Datalab-to · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85687High7.5—2026-09-04surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters.

Davegamble · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87933High7.3—2026-09-10A vulnerability was found in DaveGamble cJSON up to 1.7.19.

David-a-wheeler · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48813———2026-08-11Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code.

Davidanderson · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5399Medium6.4—2026-09-10The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1.

Davila7 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73222High8.8—2026-08-11Claude Code Templates is a CLI tool for configuring and monitoring Claude Code.

Dearhive · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8625Medium6.4—2026-09-05The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (Custom HTML block inner HTML)' parameter in all versions up to, and including, 2…

Deepseek · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82533Critical9.6—2026-09-08DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the act…

Denis Botić · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81795High7.1—2026-09-10Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter &#8211; Lite <= 1.2.3 versions.

Dernekplus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9161Medium5.3—2026-09-10Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting.

Devtron-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82882High8.8—2026-08-31Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens.

Dgraph-io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63637High8.6—2026-08-06Dgraph is an open source distributed GraphQL database.

Dhax · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48031Critical9.1—2026-08-03go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL.

Diegosouzapw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88062———2026-09-10OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers.

Digital-peak.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78071———2026-08-28Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.

Dignifiedquire · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53600———2026-09-02async-tar is a tar archive reading/writing library for async Rust.

Dimitri Grassi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81793Medium6.5—2026-09-10Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.

Divi Engine · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11613Critical9.8—2026-09-04The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter.

Django-helpdesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73531Medium6.1—2026-08-13django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments thr…

Djust-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55571High8.2—2026-08-25djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance.

Dragonflydb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62357———2026-08-18Dragonfly is an in-memory data store built for modern application workloads.

Dreryk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17038———2026-09-10DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component.

Duckdb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58139Medium6.5—2026-08-03The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credentials by calling the load_aws_credentials function with the red…

Dylanjkotze · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76931Medium6.4—2026-09-08The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping.

Easy Appointments · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81798High7.1—2026-09-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS.

Easybyte Software · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45221High7.8—2026-09-01Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path abs…

Easycorp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81892High8.1—2026-08-31EasyAdmin is a fast and modern admin generator for Symfony applications.

Eazsolution · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-25250Medium6.0—2026-08-27EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."

Ebyte · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75813High7.5—2026-08-28Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings.

Edgarrojas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11496Medium6.5—2026-09-11The Woo PDF Invoice Builder plugin (also distributed as "PDF Builder for WooCommerce") for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.8.

Edge22 Studios Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66627Critical9.9—2026-08-18Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd.

Element-hq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48007———2026-08-07Element Call is a native Matrix video conferencing application.

Elenavanengelenmaslova · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86516Medium4.7—2026-09-08A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0.

Elliot Sowers/ Relywp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66674Medium5.6—2026-09-10Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions.

Ellucian · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6881———2026-07-28A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field.

Elwerene · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54732Medium6.5—2026-08-27libreoffice-convert is a Node.js module for converting office documents to different formats.

Elyin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54785Medium6.2—2026-07-31gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI.

Epsiloncool · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84821High7.5—2026-09-10Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.

Eset Spol. S.r.o. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12858———2026-09-09Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privilege Escalation via especially crafted RPC.

Espocrm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88896Medium5.3—2026-09-10EspoCRM before 10.0.4 is vulnerable to server-side request forgery.

Eteubert · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75966Medium6.4—2026-09-09The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and out…

Everpure · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15140———2026-09-09A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).

Evil0ctal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85608High7.5—2026-09-04Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/video_data endpoints that allows unauthenticated attackers to fetch arbitrary URLs by supplying a url query…

Expresstech Systems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62140Medium5.3—2026-09-11Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions.

Extend Themes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83492———2026-08-31Improper input validation vulnerability in Extend Themes Kubio AI Website Builder.

Eyecix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84834Critical9.8—2026-09-03Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions.

Faker-js · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73231High7.8—2026-08-11Faker generates massive amounts of fake data in the browser and Node.js.

Fastify · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85124High7.5—2026-09-03@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the configured upstream.

Fastify-cli · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75021High8.1—2026-09-08fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback.

Faye · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61666———2026-08-17websocket-driver is a WebSocket protocol handler with pluggable I/O.

Fbeta-gmbh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50578High7.5—2026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record.

Fernandot · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81754High7.2—2026-09-11The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input…

Fireplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76801High8.8—2026-09-09The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.1.10 via the value function.

Flow Neuroscience · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18164High8.1—2026-08-13An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication.

Fluxcd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47680———2026-09-08The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets.

Flytohub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73530High7.7—2026-08-13Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address `::` which the kernel routes to loopback identi…

Fooplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85414Medium6.4—2026-09-05The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping.

Fortra · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15913High7.7—2026-09-09In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achiev…

Foxit · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18622Medium4.7—2026-08-13Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication.

Froiden · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18741Medium4.8—2026-08-13Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Loc…

Gato Graphql · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62102High8.8—2026-09-11Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.

Gchq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72912Medium4.3—2026-08-10CyberChef is a web app for encryption, encoding, compression, and data analysis.

Geiserx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55637———2026-08-25genieacs-mcp is an MCP server for GenieACS written in Go.

Gen Digital · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12410High7.8—2026-08-05Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation…

Getpocket · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82090———2026-08-28Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods.

Getsimplecms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53952Critical9.8—2026-09-11GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.

Gfi Software · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-74237Medium6.5—2026-09-04GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality.

Ggml-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86317Medium5.3—2026-09-07A vulnerability was detected in ggml-org llama.cpp up to 0.4.0.

Ghera74 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8615Medium4.3—2026-09-09The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and inclu…

Ghostfolio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47127Medium6.5—2026-08-07Ghostfolio is an open source wealth management software.

Gingerplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15462High7.5—2026-09-11The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX action in versions up to, and including, 1.4.2.

Gis Informatics · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9166High7.5—2026-09-10Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal.

Gleam-lang · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59247———2026-07-29Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution.

Gm_alex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19797Medium6.1—2026-09-09The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section' parameter in all versions up to, and including, 2.3.18 due to insufficient input sanitization and output escaping.

Gnome · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88924High7.0—2026-09-10A flaw was found in the admin backend of gvfs.

Goodrain · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72741High8.1—2026-08-13Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths.

Gopacket · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65819High7.5—2026-08-07gopacket provides packet processing capabilities for Go.

Gotd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54638High7.5—2026-07-28gotd/td is a T Telegram MTProto API client in Go.

Graphql-go Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80051———2026-08-25github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type.

Gravity Forms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16649High7.2—2026-09-05The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping.

Greg Winiarski · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84819High7.1—2026-09-10Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.

Growilabs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84204Medium6.5—2026-09-01GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions.

Guno1928 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55484High7.5—2026-08-28ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack.

Ha-china · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53453———2026-08-18Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

Haiwell · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19188Critical10.0—2026-08-14A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product.

Hatchet-dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54746Medium6.4—2026-08-28Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.

Hbs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87123Medium5.9—2026-09-11hbs is an Express view engine wrapper for Handlebars.

Headroomlabs-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71416High8.8—2026-09-11Headroom compresses data before the data reaches a large language model.

Heymrun · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84207Medium5.4—2026-09-01Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services.

Hfiref0x · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67607Medium5.9—2026-07-31LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c that allows remote unauthenticated attackers to destabilize or crash the daemon by…

Hivepress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18056High7.5—2026-09-06The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4.

Hkuds · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61808Critical9.8—2026-08-07LightRAG provides simple and fast retrieval-augmented generation.

Hp Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15431———2026-09-03A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0.

Humansignal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85211High7.7—2026-09-03Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints.

Icegram · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12757Medium6.5—2026-09-07The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.9.27.

Ideasoft Software Industry And Trade Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7298Medium6.1—2026-09-11Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc.

Ido Kobelkowsky · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62111Medium6.5—2026-09-11Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.

Iflytek · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82475High8.1—2026-08-29iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership.

Ilias-elearning E.v. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86416Medium5.4—2026-09-07ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without write permission checks.

Inductive Automation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77393High8.8—2026-09-04In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts).

Inspireui · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13447Critical9.8—2026-09-05The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token…

Ip2location · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82530Medium5.3—2026-09-09IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to circumvent IP-based restrictions by forging the X-Real-IP HTTP header.

Iqonicdesign · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13709Medium6.4—2026-09-09The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting in all versions up to, and including, 3.1.11 due to insufficient input saniti…

Ishankjha740 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48771High8.2—2026-08-11ishankportfolio is a portfolio website.

Isomorphic-git · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89011High7.1—2026-09-10isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype by advertising crafted ref names containing '__proto__' path se…

Iubenda · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77263High7.2—2026-09-05The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.13.4 due to insufficient input sanitiza…

Ixon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75925Critical9.6—2026-09-04Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM.

Izpack · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54550High7.4—2026-08-26IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers.

Jahlives · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-74871Medium6.2—2026-08-17openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation.

Jaychouchannel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86284Medium5.3—2026-09-07A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132.

Jetperch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53720———2026-09-03pymonocypher uses cython to wrap the Monocypher C library.

Jfarthing84 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83628Medium4.3—2026-09-05The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations.

Jhy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71497Medium4.7—2026-08-06jsoup is a Java library for working with real-world HTML.

Jihong88 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54606———2026-08-26SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies.

John Darrel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81806High7.2—2026-09-08Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.

John James Jacoby · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62137Medium5.3—2026-09-11Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.

Joomlart.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78374———2026-09-10Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captc…

Joomunited · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14975Medium6.5—2026-09-05The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the 'remoteurl' parameter.

Jowilf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54553Medium5.4—2026-08-26Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications.

Jpillora · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48113———2026-08-03Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH.

Jtsylve · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85092Medium6.6—2026-09-03LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files.

Jupyter · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86258Medium5.9—2026-09-06nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that uses string-prefix comparison instead of proper path validation.

Jupyterhub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54338Medium5.3—2026-08-07JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.

Kamalyon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15019High7.5—2026-09-10The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function.

Keepass · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86776Low3.3—2026-09-09KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function.

Keploy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82641High8.6—2026-08-30Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data.

Kerberosmansour · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82859Critical9.8—2026-08-31hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections.

Kguard · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87827———2026-09-09Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication.

Killbill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85213High7.6—2026-09-03Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueEntries, invalidatesCache, and putOutOfRotation.

Kimdre · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54248Medium6.5—2026-09-11Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks.

Kingdom Communication Associated · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89174High7.5—2026-09-11Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability.

Kings Plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85311Medium5.3—2026-09-04Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels.

Konstanty Bialkowski · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75904Low3.3—2026-08-18libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp.

Krakenjs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89043High7.4—2026-09-10passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation.

Kube-logging · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54680Critical9.9—2026-07-29Logging operator automates the deployment and configuration of Kubernetes logging pipelines.

Kubeflow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54745Critical10.0—2026-08-28Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

Kubevela · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55108High8.5—2026-08-28KubeVela is an open source application delivery platform.

Kyndryl-open-source · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55100———2026-07-31hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API.

Labring · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68929———2026-08-28FastGPT is an open-source LLM platform for building AI applications on a knowledge base.

Lacisynchroni · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54047———2026-09-11Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud.

Ladela · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-2520Medium5.4—2026-09-08The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27…

Laravel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48019High8.9—2026-09-04Laravel is a web application framework.

Laravel-backpack · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54179Medium4.4—2026-08-31backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.

Lavague-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85694High8.1—2026-09-04LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content.

Leantime · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76647High8.8—2026-08-19Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php.

Learndash · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16310Critical9.8—2026-09-06The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key.

Leont · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15534Medium5.7—2026-08-09Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.

Levelfourstorefront · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17553High7.2—2026-09-09The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3.

Libfuse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48711High7.0—2026-08-19SSHFS is a network filesystem client for connecting to SSH servers.

Libp2p · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89146High7.5—2026-09-11libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow.

Libxfont · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44950Critical9.0—2026-09-10fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer.

Libxfont2 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59679Critical9.0—2026-09-10fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the s…

Lightstar · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85146Critical9.8—2026-09-04SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability.

Limanmys · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57499Critical9.1—2026-08-27Liman is open source server management software.

Linksys · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86299Critical9.9—2026-09-07A vulnerability was detected in Linksys RE7000 2.0.15.

Linux Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82547Medium6.5—2026-08-30A vulnerability was found in Linux Foundation Magma 1.9.0.

Litestar-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48061Medium5.9—2026-08-03Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

Liufee · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86239Medium5.3—2026-09-07A vulnerability was identified in liufee FeehiCMS up to 2.1.1.

Livecomposer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16502High8.8—2026-09-08The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input .

Livewire · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81887———2026-08-31Livewire is a full-stack framework for Laravel.

Lm-sys · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85695Critical9.4—2026-09-04FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery.

Lookyloo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85242———2026-09-03PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality.

Lumi Education Ug · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-7062———2026-09-09A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4.

Maarten B · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81789High8.6—2026-09-10Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce allows Path Traversal.

Magepeople Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81802Medium6.5—2026-09-08Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

Magepeopleteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27378Medium5.3—2026-09-11Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 versions.

Mailmunch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81783High7.1—2026-09-10Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.

Mantisbt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47156———2026-09-09MantisBT is an open source bug tracker.

Maono · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77827High7.1—2026-09-08Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'.

Mapfish · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55848High8.6—2026-08-28mapfish-print is a component of MapFish for printing templated cartographic maps.

Maplibre · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85061Critical10.0—2026-09-03MapLibre GL JS is an interactive vector tile map library for web browsers.

Marcin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81784High8.1—2026-09-10Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects Wise Chat: from n/a through 3.4.2.

Martinnguyen1990 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76009High8.1—2026-09-09The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the `NCWM_Kitconnect::run()` function.

Mawww · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48120High8.6—2026-08-07Kakoune is a code editor.

Max-mapper · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19693High8.1—2026-08-17extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the…

Medixant · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17264Medium4.3—2026-08-07Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

Melograno Venture Studio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62112High7.6—2026-09-11Editor SQL Injection in Amelia <= 2.4.9 versions.

Menulux Software Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19043Medium4.3—2026-09-04Missing Authorization vulnerability in Menulux Software Inc.

Mesop-dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77357———2026-08-25Mesop is a Python-based UI framework that allows users to build web applications.

Microweber · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67617Medium4.8—2026-08-03Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that allows admin-authenticated attackers to inject arbitrary JavaScript by submitting malicious payloads via the tag_names pa…

Migrateguru · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84778High7.5—2026-09-03Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.

Miguelgrinberg · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48804High7.5—2026-08-11python-socketio is a Python implementation of the Socket.IO realtime client and server.

Mikel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63435Medium5.3—2026-09-01Mail is an internet library for Ruby designed to handle email generation, parsing, and sending.

Milesight · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-29988High7.6—2026-08-26A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN…

Miniorange.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77998———2026-08-25Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps…

Miniorgange.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78074———2026-08-31Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions.

Mintplex-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88055Medium5.5—2026-09-10AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

Mintyitanium · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55624———2026-08-25MintyItanium Lost-Auction is an auction plugin for Minecraft.

Mlfactory · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81794High7.5—2026-09-10Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

Mlflow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79721———2026-09-08Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.

Modelcloud · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86288Medium6.3—2026-09-07A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0.

Modelscope · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84202High8.8—2026-09-01ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags.

Moltis-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86808High7.3—2026-09-08A security vulnerability has been detected in moltis-org moltis up to 20260818.10.

Moos-ivp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85426Critical9.8—2026-09-03MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization.

Morgan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87859Medium5.3—2026-09-11morgan is an HTTP request logger middleware for Node.js.

Motorola · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18058High7.5—2026-09-02The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps.

Moxi624 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89260High7.5—2026-09-11MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck.

Mozilla · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86853Medium4.3—2026-09-08A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches.

Mrubyc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86547Medium6.2—2026-09-09mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode.

Mulika · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8778Critical9.8—2026-09-11The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields.

Multiparty · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87908High7.5—2026-09-11multiparty is a Node.js library for parsing multipart/form-data request bodies.

Multivendorx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81792Medium6.5—2026-09-08Incorrect Privilege Assignment vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX woocommerce-catalog-enquiry allows Privilege Escalation.This issue affects Product Catalog Enquiry for WooCommerce by Mult…

Mwiede · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86231Low3.7—2026-09-06A security flaw has been discovered in mwiede jsch up to 2.28.5.

Mythicalltd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84715High8.8—2026-09-02FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records.

N8n-io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86081———2026-09-08n8n is an open source workflow automation platform.

Nasa-jpl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75584High7.5—2026-09-10ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload.

Nationalsecurityagency · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54694Critical9.6—2026-09-09SkillTree is a micro-learning gamification platform.

Nceas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47754Critical9.3—2026-08-10Metacat is data repository software that helps researchers preserve, share, and discover data.

Nec Corporation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16876———2026-09-07An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V.

Neo4j · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19869———2026-08-18@neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authentication rules on root custom-resolver fields when a type-level @authentication rule is also present on the same operation type.

Net-snmp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89147High7.5—2026-09-11Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections.

Netatalk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45698High7.5—2026-08-17Netatalk is a Free and Open Source file server suite for Unix-like operating systems.

Netbox-community · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86175Medium6.5—2026-09-05NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses.

Netis Systems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61517High7.2—2026-09-08Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr…

Netty · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89044Medium6.5—2026-09-10Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encodin…

Newfold · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-80099High8.8—2026-09-09Several Newfold plugins are vulnerable to Authentication Bypass.

Nfriedly · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87794High8.4—2026-09-09bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend.

Nimiq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46369High7.5—2026-08-26Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.

Nintendo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82079High8.4—2026-09-10A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted networ…

Node-modules · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55553High7.5—2026-08-25urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features.

Nodejs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84890Medium5.9—2026-09-04undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header.

Northebridge · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50544Medium6.3—2026-08-13NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight.

Ntop · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84989High7.1—2026-09-03ntopng is a web-based network traffic monitoring application.

Ohf-voice · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8712High8.3—2026-09-01Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the H…

Ollama · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85180High7.5—2026-09-03Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts.

Omgovich · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85062———2026-09-03Colord is a tiny yet powerful tool for high-performance color manipulations and conversions.

Opajaap · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18579High7.2—2026-09-11The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' parameter in all versions up to, and including, 9.2.08.003 due to insufficient input sanitization and output escaping.

Openagents-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86237Medium5.3—2026-09-07A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20.

Openbsd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56101Medium5.3—2026-09-08OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allows unauthenticated attackers within RF range to trigger denial…

Opencart · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18412Critical9.1—2026-08-10OpenCart extensions are uploaded as zip files with .ocmod.zip extensions.

Opendap Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16637Medium6.5—2026-08-07OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

Opengeos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86806High7.3—2026-09-08A weakness has been identified in opengeos GeoLibre up to 2.3.0.

Openlistteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75602Medium6.5—2026-09-03OpenList a file list program that supports multiple storage.

Openmrs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44715———2026-09-11OpenMRS is an open source electronic medical record system platform.

Openremote · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49439Medium4.3—2026-09-11OpenRemote is an open-source internet-of-things platform.

Opensearch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84942High8.7—2026-09-08Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser s…

Opentalker · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85696Critical9.8—2026-09-04SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping.

Opentext™ · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-3271———2026-09-09Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS

Opnsense · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53581Critical9.0—2026-09-08OPNsense is a FreeBSD based firewall and routing platform.

Optimidoc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15933———2026-09-03OptimiDoc Server (On-Premise) stores credentials for external services in cleartext.

Oras-project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55588Medium6.5—2026-08-25ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries.

Orthanc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87020High8.1—2026-09-11An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.

Otwthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76562High7.2—2026-09-10The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm_description' parameter in all versions up to, and including, 1.18 due to insufficient input sanitization and output escaping.

Outlawgt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75018Medium4.3—2026-09-05The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.

Oxford Nanopore · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-35585High8.6—2026-09-02Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.

Pandora-analysis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88069———2026-09-09Pandora contains a path traversal vulnerability in its archive extraction worker.

Pangolin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72001High8.1—2026-08-31Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link authentication endpoint that…

Par Avisverifies · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81800Critical9.3—2026-09-10Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions.

Parse-community · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87806High7.4—2026-09-09Parse Server versions <= 8.6.87 and >= 9.0.0 < 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter.

Peppermint-lab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85391Critical9.8—2026-09-03Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account.

Perforce Software · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85979———2026-09-11Affected versions of Puppet Enterprise contain a command injection vulnerability.

Pglombardo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87816High7.5—2026-09-09PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views limits.

Phpcsstandards · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67434———2026-08-06PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

Phpseclib · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84308Medium6.3—2026-09-01phpseclib is a PHP secure communications library.

Phpsysinfo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55584High7.5—2026-08-28phpSysInfo is a customizable PHP script that displays system information.

Phun-ky · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54737High7.3—2026-07-31@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency.

Piccolo-orm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55485High8.8—2026-08-28Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo.

Pickplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-11080Critical9.8—2026-09-05The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file.

Pik Online Software Solutions Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6217Medium6.3—2026-09-04Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc.

Pilinux · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48154Medium5.9—2026-08-04GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful APIs.

Pion · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54909Medium5.3—2026-07-31pion/stun is a Go implementation of STUN.

Pipeboard-co · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48039Critical9.1—2026-08-07Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads.

Pixar Labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62089High7.1—2026-09-11Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse.

Pixelyoursite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9331High7.1—2026-09-08The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the wpeddpcf_delete_feed function in all versio…

Pocket-id · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55834Medium4.3—2026-08-28Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services.

Pollen-robotics · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55419Medium5.3—2026-08-25Reachy Mini is an SDK for controlling Reachy Mini robots.

Potpie-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85669Medium6.5—2026-09-04potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint.

Powsybl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55673———2026-08-28PowSyBl (Power System Blocks) is a framework to build power system oriented software.

Poxenstudio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45273———2026-08-19MyBooks is an ebook management web server also known as Talebook.

Predis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84372Critical9.8—2026-09-01Predis is a flexible and feature-complete Redis and Valkey client for PHP.

Premio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18964Medium6.1—2026-09-11The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and incl…

Prestashop · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84186———2026-09-07Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy…

Professionalwiki · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52854High8.6—2026-08-18Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps.

Projectwolds · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86226Low3.5—2026-09-06A security flaw has been discovered in Projectwolds Online Attendance System 1.0.

Projectworlds · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86238Medium4.3—2026-09-07A vulnerability was determined in projectworlds Online Examination System 1.0.

Proma-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88790Medium4.8—2026-09-10A security vulnerability has been detected in proma-ai Proma up to 0.19.37.

Proper Fraction · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66047High8.1—2026-08-31ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and activate arbitrary plugins by brute-forcing a weak 32-bit con…

Proxmox Server Solutions Gmbh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2023-54391Critical9.8—2026-09-01Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured…

Psd-tools · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49836———2026-09-10psd-tools is a Python package for working with Adobe Photoshop PSD files.

Publishpress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75927High7.2—2026-09-09The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0.

Pulsetto · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18844High8.1—2026-08-11The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface.

Pyramid Solutions · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78012Critical9.8—2026-09-01An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning.

Python Software Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87910———2026-09-11When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive.

Quadlayers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18404Medium6.4—2026-09-05The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input san…

Quantumcloud · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83593High7.2—2026-09-09The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input…

Quasarframework · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73647Medium5.6—2026-08-13Quasar Framework is a framework for building high-performance Vue.js user interfaces.

Qubes Os · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82636High7.9—2026-08-30Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell m…

Rabindralamsal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86211High7.3—2026-09-06A flaw has been found in rabindralamsal inventory-management-system 1.0.0.

Ragic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87747Medium4.9—2026-09-09The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability.

Rails · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66066———2026-07-30Action Pack is a framework for handling and responding to web requests.

Rara Themes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-26212High7.2—2026-09-09Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a false value to wp_han…

Rconfig · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64826Medium6.5—2026-08-12rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the download_export() method.

Rd Station Conversas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4765———2026-07-13Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature.

Redaxo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53599High7.5—2026-07-31REDAXO is a PHP-based content management system.

Redis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66373High7.5—2026-07-25Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting b…

Regclient · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49349Medium6.8—2026-08-12regclient is a Docker and OCI Registry Client in Go.

Rently · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75960High8.1—2026-08-26Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability.

Robokassa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78536Medium6.5—2026-09-10Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions.

Rocket.chat · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56845High7.5—2026-08-04An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem.

Rocklobsterinc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12853Medium5.4—2026-09-07The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2.

Roskus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82911———2026-09-04Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before 5.15.11 allows an unauthenticated attacker to confirm any order on behalf of an authenticated user by d…

Rubengc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15439Medium6.5—2026-09-11The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of the wpForo integration AJAX selector (action gamipress_wpforo_get_posts) in versions up to, and including, 7.9.7.

Rubenw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14873High8.0—2026-09-10The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3.

Ruby-oauth · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54605High7.2—2026-07-28OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers.

Runzero · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81846Low3.5—2026-09-01An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0.

Ruvnet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55609High7.1—2026-08-25sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time.

Saadiqbal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17149Medium6.4—2026-09-09The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute in all versions up to, and including, 3…

Samsung Mobile · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21042———2026-07-10Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.

Santifer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-88061———2026-09-10career-ops is an open-source AI-assisted job search and application management tool.

Saurus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73670High7.2—2026-08-13A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the table_name GET or…

Savonrb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53510High8.1—2026-07-31Savon is a Ruby SOAP client.

Sc0ttkclark · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76573Medium6.4—2026-09-05The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versions up to, and including, 3.3.9.1 due to insufficient input sanitization and outpu…

Schreibfaul1 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87961High7.1—2026-09-10ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing.

Sciphi-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82526Critical9.8—2026-09-03R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint.

Seakee · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86804Medium5.3—2026-09-08A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10.

Sean Barrett (Nothings) · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18497High7.1—2026-08-07A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files.

Senaite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54569Critical9.8—2026-08-26SENAITE.CORE is the core framework for the SENAITE laboratory information management system.

Septeo It Solutions · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75137Medium6.1—2026-09-02UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked.

Sequelize · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69240Critical9.8—2026-08-03Sequelize is a Node.js ORM tool.

Seriousm4x · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49819Critical9.8—2026-08-13UpSnap is a wake on lan web app.

Sglang · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86793Critical9.8—2026-09-11SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling c…

Shabti · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75816Critical9.8—2026-09-06The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12.

Shelf-nu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54166High7.1—2026-09-11Shelf is a platform for tracking physical assets.

Shenzhen Cudy Technology Co., Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71960Critical9.1—2026-08-19Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting t…

Shriyanss · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55378———2026-08-28JS Recon is a JavaScript enumeration and SAST tool.

Signalwire · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49846High7.5—2026-09-11libks provides foundational support for signalwire C products.

Significant-gravitas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72922High8.2—2026-08-11AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

Signum-network · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48486High7.5—2026-09-03Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algorithm.

Simulpiscator · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54135High7.5—2026-09-11AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol.

Siteskite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81805High8.1—2026-09-10Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.

Smgdkngt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54165———2026-09-11Dobase is an open-source, self-hosted workspace with installable tools.

Smp46 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49467High8.8—2026-08-12Pingvin Share X is a secure and easy self-hosted file sharing platform.

Snyk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75486High8.0—2026-08-28Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters.<key>.optic-c…

Socketio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69185High7.5—2026-08-03Socket.IO enables bidirectional and low-latency communication for every platform.

Softing · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13148———2026-09-04Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure.

Spartnernl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84374High7.5—2026-09-01Laravel Excel provides supercharged Excel exports and imports in Laravel.

Specialk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81825High7.2—2026-09-11The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20260811 due to insufficient input sanitization and output escap…

Squidfunk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73295Medium5.4—2026-08-12Material for MkDocs is a powerful documentation framework built on top of MkDocs.

Squirrelchat · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85730———2026-09-04smol-toml is a small, fast, and correct TOML parser and serializer.

Stackstorm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85513Medium6.3—2026-09-04A weakness has been identified in StackStorm st2 up to 3.9.0.

Standard Notes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78325———2026-09-07Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Googl…

Star7th · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86644Low3.5—2026-09-08A vulnerability was determined in star7th showdoc up to 3.9.1.

Static-web-server · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75601Medium4.3—2026-08-26Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.

Stefanzweifel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53932High8.0—2026-09-04laravel-backup-restore restores database backups made with spatie/laravel-backup.

Stiofansisland · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19991High8.1—2026-09-11The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler.

Stirling-tools · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57485High8.5—2026-08-17Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.

Stormshield · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14466Medium4.3—2026-09-04It’s possible to run a stored XSS in Stormshield’s web administration panel.

Strategy11 Team · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84769Medium6.5—2026-09-03Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

Stylemix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19802Medium4.3—2026-09-09The Checkout Custom Fields Builder for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.5.

Sudo-project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82474High7.8—2026-08-29Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.

Sunny_johal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4657Medium6.4—2026-09-10The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta field in all versions up to, and including, 2.0.4.

Supsysticcom · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83625High7.2—2026-09-05The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping.

Suse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-46808Medium6.8—2026-09-09An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5.

Sveltejs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66062Medium5.3—2026-08-07SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

T-mart · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50025———2026-09-11Mousehole is a background service to update a seedbox IP for MAM and web app to manage it.

Tac Information Services Internal And External Trade Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18198High8.8—2026-09-04Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Services Internal and External Trade Inc.

Tangible · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82123Medium6.5—2026-08-28Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.

Teamwiseflow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85667Critical9.1—2026-09-04xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline.

Tecno Mobile · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18907High7.5—2026-08-05Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Temporal Technologies, Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65655———2026-08-11When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server…

That1drifter · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55557———2026-08-25browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents.

The Beaver Builder Team · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18843Medium6.1—2026-09-05The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanit…

The Gnu C Library · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-89092Medium4.2—2026-09-11The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system.

The Libreswan Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14957High7.5—2026-09-02In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL.

Themeisle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4945Medium5.3—2026-09-07The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.7 via the 'watch_checkout' function due to missin…

Themekraft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81785Medium6.5—2026-09-10Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.

Themerex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62105Critical9.8—2026-09-11Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

Themifyme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-78172Medium6.1—2026-09-11The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping.

Themoos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85452High8.8—2026-09-03MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation.

Themovation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15984High7.2—2026-09-05The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping.

Thm-health · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71555Medium4.1—2026-08-06PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

Thu-maic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86259High7.5—2026-09-06OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services.

Tile-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87083Medium5.5—2026-09-09A weakness has been identified in tile-ai tilelang up to 0.1.14.

Tinacms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63123Medium6.5—2026-08-19Tina is a headless content management system.

Tirrenotechnologies · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64857———2026-09-09tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0.

Toon-format · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82404High8.3—2026-09-02TOON is a compact, human-readable serialization of JSON data for LLM prompts.

Toptech Systems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12562High8.8—2026-07-30The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system.

Tornadoweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-82397High7.5—2026-08-31Tornado is a Python web framework and asynchronous networking library.

Torprject · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-87724Medium6.5—2026-09-09Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state.

Tp-link System Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81531———2026-09-08An information disclosure vulnerability has been identified in Omada Controller.  An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated re…

Tranquil_it · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75132Medium6.5—2026-08-31WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint.

Transmute-app · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54054Medium6.5—2026-09-10Transmute is a free, open-source, self-hosted file conversion and compression tool.

Treeverse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48026High8.7—2026-08-07lakeFS is an open-source tool that transforms object storage into a Git-like repositories.

Trustedfirmware · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54467High7.0—2026-08-26On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

Tugcantopaloglu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66420High8.8—2026-07-30MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the Che…

Tursodatabase · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48790Medium5.5—2026-08-11Turso CLI is the command line interface (CLI) to the open-source database Turso.

Twentyhq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73069Critical9.1—2026-08-11Twenty is an open-source CRM (customer relationship management) platform.

Tyche Softwares · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81543High8.8—2026-09-05The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1.

Typemill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44401Medium4.8—2026-08-10Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized…

Tübitak Bilgem Software Technologies Research Institute · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-79617High7.1—2026-09-09Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels.

Udx Usability Dynamics · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81801High8.1—2026-09-10Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.

Unbounce · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81781High7.1—2026-09-08Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels.

Underconstructionpage · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81295High7.1—2026-09-03Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.

Unitree Robotics · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-76639High8.8—2026-08-27Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-D…

Unlimited Elements · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84820High7.1—2026-09-08Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

Uscnanbu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19887High8.8—2026-09-05The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via deserialization of untrusted input in the Telecom EDY payment callback (usces_action_acting_transaction).

Vbpf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53670———2026-09-02PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer.

Veeam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65641———2026-08-26A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

Velero-io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32637———2026-08-25Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes.

Verbb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52889Critical9.8—2026-08-19Formie is a Craft CMS plugin for creating forms.

Vercel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-75604Critical9.0—2026-09-01Next.js is a React framework for building full-stack web applications.

Versatica · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55663Medium5.6—2026-08-25mediasoup is a WebRTC video conferencing system.

Very Good Plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14444High7.5—2026-09-07The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13.

Villatheme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81786High7.5—2026-09-10Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

Visual Composer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62138Medium6.5—2026-09-11Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.

Viszt Péter · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81790High7.5—2026-09-08Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels.

Vitest-dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73653Critical9.4—2026-08-13Vitest is a testing framework powered by Vite.

Voltronic Power · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44402Critical9.8—2026-09-04Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archi…

Vsourz1td · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18594Medium4.3—2026-09-10The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3.

Wakujs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49456Low3.1—2026-09-03Waku is the minimal React framework.

Watchfire · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5846Medium5.7—2026-07-30The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management inter…

Watchguard · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86135———2026-09-08A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a sp…

Waves Audio Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86819High7.1—2026-09-08Waves Central for macOS contains a local privilege escalation in the privileged helper service.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-89010Critical9.8—2026-09-11WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to th…

Wazuh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67308Critical10.0—2026-08-01Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files.

Wc Lovers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-84756High7.1—2026-09-03Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

Web-platform-dx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45819———2026-08-13baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Wei-shaw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73079High8.5—2026-08-11Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions.

Wen Solutions · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81796High7.3—2026-09-10Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.

Whiskeysockets · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48063———2026-08-03Baileys is a cocket-based TS/JavaScript API for WhatsApp Web.

Woobewoo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7804Medium6.1—2026-09-09The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpf_fid' parameter in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escapi…

Wordpress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45293High8.6—2026-07-28WordPress Coding Standards is a set of PHP_CodeSniffer rules (sniffs) that enforce WordPress coding conventions.

Worklenz · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85388High8.1—2026-09-03Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY clauses.

Wowdevs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62109High7.6—2026-09-11Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.

Wp Chill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62114Medium5.3—2026-09-11Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.

Wp Swings · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81799High7.5—2026-09-10Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce <= 4.6.4 versions.

Wp-graphql · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54768———2026-07-31WPGraphQL provides a GraphQL API for WordPress sites.

Wpdesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62136Medium5.3—2026-09-11Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions.

Wpeverest · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62103Critical9.8—2026-09-11Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.

Wpkoi Wordpress Themes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85302Medium6.5—2026-09-03Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS.

Wplegalpages · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14989High7.2—2026-09-09The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitiz…

Wpml · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17509Medium6.5—2026-09-08The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of suf…

Wpmudev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83627Critical9.8—2026-09-05The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php.

Wso2 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3096Medium4.7—2026-09-10The product's web portals allow external links to be opened in a new browser tab.

Xerrors · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50561Critical9.4—2026-08-12Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform.

Xibosignage · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-52730Medium4.3—2026-08-31Xibo is an open source digital signage platform with a web content management system and Windows display player software.

Xmldom · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-83605———2026-09-01xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.

Xootix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12215Medium5.3—2026-09-11The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2.

Xpdf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85458———2026-09-03Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.

Xtemos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27086Medium6.5—2026-09-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS.

Youzify · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81275Medium6.5—2026-09-10Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions.

Zain Hassan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-81804High7.5—2026-09-10Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore &amp; Migration <= 2.4.2 versions.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-66747Critical9.8—2026-08-05Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line.

Zhenorzz · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53553High7.7—2026-08-31Goploy is an open-source automation deployment system.

Zlib · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85091High7.4—2026-09-03zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers.

Znuny · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-77506Medium4.8—2026-08-20Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.

Zoneminder · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54258Medium6.5—2026-09-11ZoneMinder is a free, open source closed-circuit television software application.

Zte · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-86550Medium6.5—2026-09-08NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirects.