High-severity CVEs (page 13)
Page 13 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-108374 | High | 7.7 | 2026-10-16 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce p… |
CVE-2026-69080 | High | 7.5 | 2026-10-16 | Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recom… |
CVE-2026-69077 | High | 7.5 | 2026-10-16 | Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public ne… |
CVE-2026-69076 | High | 7.5 | 2026-10-16 | Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network… |
CVE-2026-68572 | High | 7.5 | 2026-10-16 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users ar… |
CVE-2026-61726 | High | 8.1 | 2026-10-16 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter… |
CVE-2026-59970 | High | 7.7 | 2026-10-16 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI pro… |
CVE-2026-59963 | High | 7.1 | 2026-10-16 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Sp… |
CVE-2026-30971 | High | 8.8 | 2026-10-16 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated… |
CVE-2026-108743 | High | 8.8 | 2026-10-16 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact most to the kylin services tha… |
CVE-2026-102834 | High | 7.5 | 2026-10-16 | JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity witho… |
CVE-2026-102607 | High | 8.8 | 2026-10-16 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-contro… |
CVE-2026-102917 | High | 7.8 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform oper… |
CVE-2025-66969 | High | 7.5 | 2026-10-16 | Integer overflow in OpenModSim (<=1.11.0), leading to denial of service |
CVE-2026-81452 | High | 7.0 | 2026-10-16 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local acce… |
CVE-2026-111723 | High | 8.8 | 2026-10-16 | LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v… |
CVE-2026-111722 | High | 8.1 | 2026-10-16 | LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects be… |
CVE-2026-111710 | High | 7.5 | 2026-10-16 | Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated a… |
CVE-2026-111706 | High | 7.5 | 2026-10-16 | 99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export a… |
CVE-2026-111702 | High | 7.5 | 2026-10-16 | ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowle… |
CVE-2026-111701 | High | 7.0 | 2026-10-16 | OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /… |
CVE-2026-111700 | High | 7.1 | 2026-10-16 | WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the E… |
CVE-2026-111695 | High | 7.1 | 2026-10-16 | Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to acce… |
CVE-2026-111691 | High | 7.4 | 2026-10-16 | WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an… |
CVE-2026-111686 | High | 7.5 | 2026-10-16 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebA… |
CVE-2026-111685 | High | 7.5 | 2026-10-16 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path paramet… |
CVE-2026-111684 | High | 8.3 | 2026-10-16 | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' d… |
CVE-2026-111681 | High | 8.8 | 2026-10-16 | EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpo… |
CVE-2026-111680 | High | 8.3 | 2026-10-16 | APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applicati… |
CVE-2026-111675 | High | 7.4 | 2026-10-16 | Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute for… |
CVE-2026-111671 | High | 7.1 | 2026-10-16 | Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy oth… |
CVE-2026-111663 | High | 8.6 | 2026-10-16 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUploa… |
CVE-2026-111650 | High | 8.6 | 2026-10-16 | ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigu… |
CVE-2026-111644 | High | 7.3 | 2026-10-16 | Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-chec… |
CVE-2026-111642 | High | 8.8 | 2026-10-16 | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonati… |
CVE-2026-111639 | High | 8.1 | 2026-10-16 | bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other… |
CVE-2026-111638 | High | 7.7 | 2026-10-16 | sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to… |
CVE-2026-111636 | High | 8.1 | 2026-10-16 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens usi… |
CVE-2026-111634 | High | 8.1 | 2026-10-16 | Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values… |
CVE-2026-111633 | High | 8.6 | 2026-10-16 | ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-code… |
CVE-2026-111627 | High | 7.2 | 2026-10-16 | HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the… |
CVE-2026-111613 | High | 7.5 | 2026-10-16 | AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying… |
CVE-2026-111612 | High | 7.5 | 2026-10-16 | netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credenti… |
CVE-2026-111607 | High | 7.1 | 2026-10-16 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant applicat… |
CVE-2026-111606 | High | 8.1 | 2026-10-16 | Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the merge… |
CVE-2026-111605 | High | 8.1 | 2026-10-16 | Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belongin… |
CVE-2026-109588 | High | 8.8 | 2026-10-16 | Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MP… |
CVE-2026-109587 | High | 8.8 | 2026-10-16 | Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled… |
CVE-2026-102551 | High | 7.7 | 2026-10-16 | Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a… |
CVE-2026-97380 | High | 8.8 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY stateme… |
CVE-2026-86047 | High | 7.7 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHO… |
CVE-2026-86008 | High | 7.2 | 2026-10-16 | Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative a… |
CVE-2026-77474 | High | 7.1 | 2026-10-16 | destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested o… |
CVE-2026-96424 | High | 7.8 | 2026-10-16 | Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus |
CVE-2026-92263 | High | 7.2 | 2026-10-16 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploa… |
CVE-2026-77630 | High | 7.5 | 2026-10-16 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously c… |
CVE-2026-57488 | High | 7.1 | 2026-10-16 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Conte… |
CVE-2026-57487 | High | 7.5 | 2026-10-16 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/ge… |
CVE-2026-57486 | High | 7.5 | 2026-10-16 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValu… |
CVE-2026-48741 | High | 7.5 | 2026-10-16 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alte… |
CVE-2026-48503 | High | 7.5 | 2026-10-16 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the… |
CVE-2026-46472 | High | 7.5 | 2026-10-16 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past t… |
CVE-2026-42270 | High | 7.5 | 2026-10-16 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and dashboards/images/scre… |
CVE-2026-42269 | High | 8.1 | 2026-10-16 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion rout… |
CVE-2026-41582 | High | 7.5 | 2026-10-16 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public image and screenshot routes implemented… |
CVE-2026-102941 | High | 7.5 | 2026-10-16 | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser… |
CVE-2026-95183 | High | 8.8 | 2026-10-16 | An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external… |
CVE-2026-88755 | High | 7.8 | 2026-10-16 | Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly… |
CVE-2026-107621 | High | 7.5 | 2026-10-16 | JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. |
CVE-2026-106705 | High | 8.8 | 2026-10-16 | ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleControlle… |
CVE-2026-105667 | High | 7.5 | 2026-10-16 | In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reass… |
CVE-2026-105273 | High | 7.5 | 2026-10-16 | MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input. |
CVE-2026-101021 | High | 7.5 | 2026-10-16 | MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons an… |
CVE-2026-111413 | High | 8.8 | 2026-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects… |
CVE-2026-68571 | High | 8.8 | 2026-10-16 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most… |
CVE-2026-63618 | High | 7.5 | 2026-10-16 | Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin… |
CVE-2026-111399 | High | 8.5 | 2026-10-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interacti… |
CVE-2026-111396 | High | 7.1 | 2026-10-16 | Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-107564 | High | 7.5 | 2026-10-16 | An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load lead… |
CVE-2026-105958 | High | 7.5 | 2026-10-16 | A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation… |
CVE-2026-111391 | High | 8.1 | 2026-10-16 | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the… |
CVE-2026-107648 | High | 7.2 | 2026-10-16 | The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also function, plugin, post_t… |
CVE-2026-105959 | High | 7.5 | 2026-10-16 | A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing… |
CVE-2026-109119 | High | 8.8 | 2026-10-16 | Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privile… |
CVE-2026-96768 | High | 7.2 | 2026-10-16 | The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Email Log Body in all versions up to, and including, 1… |
CVE-2026-92766 | High | 7.5 | 2026-10-16 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to… |
CVE-2026-14177 | High | 7.5 | 2026-10-16 | Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Co… |
CVE-2026-111311 | High | 8.8 | 2026-10-16 | The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to… |
CVE-2026-109224 | High | 7.2 | 2026-10-16 | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to… |
CVE-2026-87111 | High | 7.2 | 2026-10-16 | The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2026-75903 | High | 8.1 | 2026-10-16 | The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protec… |
CVE-2026-16453 | High | 7.1 | 2026-10-16 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter… |
CVE-2026-97640 | High | 7.2 | 2026-10-16 | The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored… |
CVE-2026-97296 | High | 8.1 | 2026-10-16 | Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from… |
CVE-2026-96339 | High | 7.1 | 2026-10-16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue a… |
CVE-2026-92553 | High | 8.8 | 2026-10-16 | The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including… |
CVE-2026-92115 | High | 8.8 | 2026-10-16 | The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the `value`… |
CVE-2026-110701 | High | 7.2 | 2026-10-16 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions up to, an… |
CVE-2026-110135 | High | 7.4 | 2026-10-16 | The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit… |
CVE-2026-110015 | High | 8.8 | 2026-10-16 | The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce c… |