High-severity CVEs (page 17)
Page 17 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-64575 | High | 7.8 | 2026-08-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpf_iter_tcp_batch() releases the curr… |
CVE-2026-64574 | High | 7.8 | 2026-08-05 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211_vif_update_li… |
CVE-2026-64570 | High | 7.8 | 2026-08-05 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free on alloc failure ieee80211_set_fils_discov… |
CVE-2026-64568 | High | 7.8 | 2026-08-05 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure ieee80211_set_uns… |
CVE-2026-64567 | High | 7.8 | 2026-08-05 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space… |
CVE-2026-61485 | High | 7.5 | 2026-08-05 | ** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As th… |
CVE-2026-61483 | High | 7.5 | 2026-08-05 | ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired… |
CVE-2026-59675 | High | 7.5 | 2026-08-05 | When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the… |
CVE-2026-55997 | High | 8.8 | 2026-08-05 | Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext… |
CVE-2026-55739 | High | 8.3 | 2026-08-05 | Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and ->hasCompany(->company_id). Cus… |
CVE-2026-54418 | High | 8.1 | 2026-08-05 | Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-s… |
CVE-2026-54416 | High | 7.2 | 2026-08-05 | Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','ph… |
CVE-2026-18881 | High | 7.5 | 2026-08-05 | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the… |
CVE-2026-12000 | High | 7.5 | 2026-08-05 | The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 1.4.0 via the WordPress core… |
CVE-2026-70375 | High | 8.8 | 2026-08-05 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/De… |
CVE-2026-70374 | High | 8.8 | 2026-08-05 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation routine. Media.generateThumbnail i… |
CVE-2026-68073 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qp… |
CVE-2026-67592 | High | 7.5 | 2026-08-05 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage… |
CVE-2026-67590 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qp… |
CVE-2026-67552 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qp… |
CVE-2026-66274 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qp… |
CVE-2026-16736 | High | 7.5 | 2026-08-05 | The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form s… |
CVE-2026-16605 | High | 7.2 | 2026-08-05 | The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an aut… |
CVE-2026-16604 | High | 7.5 | 2026-08-05 | The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauth… |
CVE-2026-16603 | High | 7.5 | 2026-08-05 | The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to… |
CVE-2026-16602 | High | 7.5 | 2026-08-05 | The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing… |
CVE-2026-16573 | High | 7.5 | 2026-08-05 | The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploaded signature image before storing it, allowing unauthenticated attackers to upload a cra… |
CVE-2026-16561 | High | 7.5 | 2026-08-05 | The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to re… |
CVE-2026-16055 | High | 7.5 | 2026-08-05 | The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentic… |
CVE-2026-16036 | High | 7.5 | 2026-08-05 | The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the pre-login two-factor challenge to the target acco… |
CVE-2026-15372 | High | 7.5 | 2026-08-05 | The WP 2FA WordPress plugin before 4.1.0 does not validate the second authentication factor when one of its supported methods is selected at login, allowing a… |
CVE-2026-15230 | High | 8.1 | 2026-08-05 | The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, relying only on a shared nonce, allowing an… |
CVE-2026-14553 | High | 8.1 | 2026-08-05 | The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original fil… |
CVE-2026-8761 | High | 8.8 | 2026-08-05 | The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check… |
CVE-2026-68074 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apac… |
CVE-2026-68060 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects… |
CVE-2026-67589 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects… |
CVE-2026-67588 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apac… |
CVE-2026-67551 | High | 7.5 | 2026-08-05 | pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects A… |
CVE-2026-67465 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apac… |
CVE-2026-66273 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects… |
CVE-2026-66257 | High | 7.5 | 2026-08-05 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apac… |
CVE-2026-18902 | High | 7.2 | 2026-08-05 | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Per… |
CVE-2026-18322 | High | 8.8 | 2026-08-05 | The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permissi… |
CVE-2026-16143 | High | 7.2 | 2026-08-05 | The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer email field of the book… |
CVE-2026-15918 | High | 7.5 | 2026-08-05 | VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the pub… |
CVE-2026-18901 | High | 7.2 | 2026-08-05 | A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such mani… |
CVE-2026-18900 | High | 7.2 | 2026-08-05 | A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation… |
CVE-2026-18898 | High | 8.8 | 2026-08-05 | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulati… |
CVE-2026-18907 | High | 7.5 | 2026-08-05 | Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filenam… |
CVE-2026-18897 | High | 8.8 | 2026-08-05 | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTemp… |
CVE-2026-18895 | High | 8.8 | 2026-08-05 | A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipu… |
CVE-2026-18859 | High | 7.3 | 2026-08-05 | A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulati… |
CVE-2026-18854 | High | 7.3 | 2026-08-05 | A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter… |
CVE-2026-70619 | High | 8.8 | 2026-08-04 | Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend… |
CVE-2026-67862 | High | 7.5 | 2026-08-04 | open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to caus… |
CVE-2026-67861 | High | 7.5 | 2026-08-04 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes component |
CVE-2026-67860 | High | 7.5 | 2026-08-04 | open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend. |
CVE-2026-67859 | High | 7.5 | 2026-08-04 | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling. |
CVE-2026-67858 | High | 7.5 | 2026-08-04 | Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backe… |
CVE-2026-67857 | High | 7.5 | 2026-08-04 | open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c. |
CVE-2026-67856 | High | 7.5 | 2026-08-04 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItems(Sampling)… |
CVE-2026-67855 | High | 7.5 | 2026-08-04 | open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remo… |
CVE-2026-45103 | High | 7.5 | 2026-08-04 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Conte… |
CVE-2026-18814 | High | 7.2 | 2026-08-04 | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injec… |
CVE-2026-70494 | High | 8.1 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, the DELETE /api/v1/folders/{id} handler in back… |
CVE-2026-70492 | High | 8.7 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/Katex… |
CVE-2026-66901 | High | 7.5 | 2026-08-04 | Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. … |
CVE-2026-51401 | High | 7.7 | 2026-08-04 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
CVE-2026-51400 | High | 8.4 | 2026-08-04 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
CVE-2026-18813 | High | 7.2 | 2026-08-04 | A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version… |
CVE-2026-18812 | High | 7.2 | 2026-08-04 | A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument… |
CVE-2026-18811 | High | 7.2 | 2026-08-04 | A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument es… |
CVE-2026-70486 | High | 8.2 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch… |
CVE-2026-70485 | High | 7.1 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Open WebUI checked whether a user-supplied URL d… |
CVE-2026-70482 | High | 8.1 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{p… |
CVE-2026-70479 | High | 7.7 | 2026-08-04 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, with WEB_LOADER_ENGINE=playwright, the Playwrigh… |
CVE-2026-18810 | High | 7.3 | 2026-08-04 | A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads… |
CVE-2026-18657 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a mal… |
CVE-2026-18656 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a ma… |
CVE-2026-16793 | High | 8.8 | 2026-08-04 | An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that… |
CVE-2026-47623 | High | 8.2 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability mi… |
CVE-2026-47618 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful e… |
CVE-2026-47617 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A s… |
CVE-2026-47616 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit… |
CVE-2026-47615 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A… |
CVE-2026-47614 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead… |
CVE-2026-47613 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted… |
CVE-2026-47612 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted d… |
CVE-2026-24255 | High | 7.5 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that sh… |
CVE-2026-24253 | High | 8.2 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to… |
CVE-2026-18830 | High | 8.1 | 2026-08-04 | Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocati… |
CVE-2026-18788 | High | 7.3 | 2026-08-04 | A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.ph… |
CVE-2026-56848 | High | 7.5 | 2026-08-04 | A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a… |
CVE-2026-18787 | High | 8.8 | 2026-08-04 | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the… |
CVE-2026-15314 | High | 7.5 | 2026-08-04 | Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient i… |
CVE-2026-15307 | High | 8.8 | 2026-08-04 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster… |
CVE-2026-69100 | High | 8.8 | 2026-08-04 | LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed… |
CVE-2026-25292 | High | 7.6 | 2026-08-04 | Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. |
CVE-2026-25288 | High | 7.4 | 2026-08-04 | Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size. |