High-severity CVEs (page 11)
Page 11 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-111765 | High | 7.5 | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpC… |
CVE-2026-111764 | High | 7.5 | 2026-10-20 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authori… |
CVE-2025-71436 | High | 7.1 | 2026-10-20 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by tr… |
CVE-2026-95168 | High | 7.8 | 2026-10-20 | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in… |
CVE-2026-113397 | High | 7.4 | 2026-10-20 | A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/main… |
CVE-2026-112940 | High | 7.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX… |
CVE-2026-91041 | High | 7.8 | 2026-10-20 | Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned a… |
CVE-2026-113396 | High | 7.4 | 2026-10-20 | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction… |
CVE-2026-113395 | High | 7.4 | 2026-10-20 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunctio… |
CVE-2026-113394 | High | 7.4 | 2026-10-20 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The ma… |
CVE-2026-113619 | High | 7.5 | 2026-10-20 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped L… |
CVE-2026-113392 | High | 7.4 | 2026-10-20 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the comp… |
CVE-2026-105941 | High | 8.1 | 2026-10-20 | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that… |
CVE-2026-105949 | High | 8.8 | 2026-10-20 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling… |
CVE-2026-105311 | High | 7.7 | 2026-10-20 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[]… |
CVE-2026-113358 | High | 7.5 | 2026-10-20 | LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files… |
CVE-2026-113356 | High | 7.5 | 2026-10-20 | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without res… |
CVE-2026-113352 | High | 7.5 | 2026-10-20 | uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims w… |
CVE-2026-108089 | High | 7.5 | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated u… |
CVE-2026-113381 | High | 7.3 | 2026-10-20 | A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model… |
CVE-2026-113469 | High | 7.5 | 2026-10-20 | A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in accepta… |
CVE-2026-113407 | High | 8.8 | 2026-10-20 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and… |
CVE-2026-113406 | High | 8.8 | 2026-10-20 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and… |
CVE-2026-113405 | High | 8.8 | 2026-10-20 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and… |
CVE-2026-112177 | High | 7.3 | 2026-10-20 | A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 t… |
CVE-2026-111090 | High | 7.8 | 2026-10-20 | A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the… |
CVE-2026-113404 | High | 8.8 | 2026-10-20 | WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and s… |
CVE-2026-97627 | High | 7.2 | 2026-10-20 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with th… |
CVE-2026-93300 | High | 7.5 | 2026-10-20 | The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due… |
CVE-2026-113386 | High | 7.1 | 2026-10-20 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequen… |
CVE-2026-105299 | High | 8.7 | 2026-10-20 | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the up… |
CVE-2026-86961 | High | 7.8 | 2026-10-20 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to br… |
CVE-2026-86949 | High | 8.8 | 2026-10-20 | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of… |
CVE-2026-86922 | High | 8.8 | 2026-10-20 | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27… |
CVE-2026-86919 | High | 8.8 | 2026-10-20 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac… |
CVE-2026-77937 | High | 8.1 | 2026-10-20 | Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HT… |
CVE-2026-77935 | High | 8.3 | 2026-10-20 | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' wor… |
CVE-2026-77934 | High | 8.8 | 2026-10-20 | Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an un… |
CVE-2026-77926 | High | 8.8 | 2026-10-20 | Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI commo… |
CVE-2026-28853 | High | 7.8 | 2026-10-20 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges. |
CVE-2026-109443 | High | 8.8 | 2026-10-20 | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed exe… |
CVE-2026-109440 | High | 8.8 | 2026-10-20 | LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting i… |
CVE-2026-105297 | High | 7.5 | 2026-10-20 | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size… |
CVE-2026-109126 | High | 8.8 | 2026-10-20 | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges d… |
CVE-2026-107400 | High | 8.8 | 2026-10-20 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication. |
CVE-2026-107366 | High | 8.3 | 2026-10-20 | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another u… |
CVE-2026-105453 | High | 8.4 | 2026-10-20 | IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improp… |
CVE-2026-53995 | High | 8.2 | 2026-10-19 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem… |
CVE-2026-112360 | High | 8.0 | 2026-10-19 | A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the compone… |
CVE-2026-112261 | High | 7.8 | 2026-10-19 | A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to… |
CVE-2026-112258 | High | 7.8 | 2026-10-19 | A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection prop… |
CVE-2026-112257 | High | 7.8 | 2026-10-19 | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thu… |
CVE-2026-76788 | High | 8.8 | 2026-10-19 | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated stru… |
CVE-2026-112301 | High | 7.3 | 2026-10-19 | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php… |
CVE-2026-82166 | High | 8.8 | 2026-10-19 | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adj… |
CVE-2026-71170 | High | 7.8 | 2026-10-19 | Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could pot… |
CVE-2026-71169 | High | 7.0 | 2026-10-19 | Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker… |
CVE-2026-112782 | High | 7.5 | 2026-10-19 | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images… |
CVE-2026-112780 | High | 8.8 | 2026-10-19 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form… |
CVE-2026-112777 | High | 7.2 | 2026-10-19 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its class-name checks are case-sensitive wh… |
CVE-2026-112775 | High | 7.5 | 2026-10-19 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email… |
CVE-2026-112774 | High | 7.2 | 2026-10-19 | Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by supplying… |
CVE-2026-112773 | High | 8.8 | 2026-10-19 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox by p… |
CVE-2026-112772 | High | 8.8 | 2026-10-19 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox via… |
CVE-2026-112770 | High | 8.8 | 2026-10-19 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow argum… |
CVE-2026-112260 | High | 7.1 | 2026-10-19 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into la… |
CVE-2026-112252 | High | 7.3 | 2026-10-19 | A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the f… |
CVE-2026-6719 | High | 7.5 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
CVE-2026-3295 | High | 7.4 | 2026-10-19 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded befo… |
CVE-2026-112377 | High | 7.4 | 2026-10-19 | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid E… |
CVE-2026-111759 | High | 7.5 | 2026-10-19 | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time… |
CVE-2025-52290 | High | 7.5 | 2026-10-19 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Serv… |
CVE-2026-12665 | High | 8.1 | 2026-10-19 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished nam… |
CVE-2026-12148 | High | 7.5 | 2026-10-19 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserializati… |
CVE-2026-10743 | High | 8.8 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations. |
CVE-2026-10574 | High | 8.8 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing M… |
CVE-2026-10572 | High | 8.8 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing M… |
CVE-2026-107187 | High | 8.5 | 2026-10-19 | A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vuln… |
CVE-2026-107186 | High | 8.6 | 2026-10-19 | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This all… |
CVE-2026-107082 | High | 8.8 | 2026-10-19 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parame… |
CVE-2025-10149 | High | 8.2 | 2026-10-19 | The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a… |
CVE-2026-112368 | High | 7.5 | 2026-10-19 | An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary docume… |
CVE-2026-112366 | High | 7.5 | 2026-10-19 | Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch… |
CVE-2026-112309 | High | 7.5 | 2026-10-19 | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built… |
CVE-2026-112308 | High | 7.4 | 2026-10-19 | crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources bec… |
CVE-2026-112307 | High | 7.3 | 2026-10-19 | sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped d… |
CVE-2026-112306 | High | 7.2 | 2026-10-19 | NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypass… |
CVE-2026-112305 | High | 8.8 | 2026-10-19 | Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables… |
CVE-2026-112304 | High | 7.5 | 2026-10-19 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=Tr… |
CVE-2026-112153 | High | 7.3 | 2026-10-19 | A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of th… |
CVE-2026-112152 | High | 7.3 | 2026-10-19 | A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the… |
CVE-2026-111045 | High | 7.5 | 2026-10-19 | CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath… |
CVE-2026-109431 | High | 8.1 | 2026-10-19 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows auth… |
CVE-2026-107571 | High | 7.8 | 2026-10-19 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the… |
CVE-2026-107569 | High | 7.5 | 2026-10-19 | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying… |
CVE-2026-107567 | High | 7.5 | 2026-10-19 | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail the… |
CVE-2026-112151 | High | 7.3 | 2026-10-19 | A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unkno… |
CVE-2026-112150 | High | 7.3 | 2026-10-19 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of th… |
CVE-2026-112149 | High | 7.3 | 2026-10-19 | A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_fi… |
CVE-2026-112287 | High | 7.1 | 2026-10-19 | Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated… |