High-severity CVEs (page 18)
Page 18 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-89077 | High | 7.5 | 2026-10-14 | Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025… |
CVE-2026-89076 | High | 7.2 | 2026-10-14 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This i… |
CVE-2026-89075 | High | 7.3 | 2026-10-14 | Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 bef… |
CVE-2026-89074 | High | 7.5 | 2026-10-14 | Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before… |
CVE-2026-89073 | High | 7.5 | 2026-10-14 | Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0… |
CVE-2026-89072 | High | 7.5 | 2026-10-14 | Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2… |
CVE-2026-89071 | High | 7.5 | 2026-10-14 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affec… |
CVE-2026-89070 | High | 7.5 | 2026-10-14 | Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-89069 | High | 8.0 | 2026-10-14 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue aff… |
CVE-2026-89068 | High | 8.1 | 2026-10-14 | Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-89067 | High | 8.8 | 2026-10-14 | Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and fr… |
CVE-2026-87093 | High | 8.8 | 2026-10-14 | Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-53615 | High | 8.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-… |
CVE-2026-53614 | High | 7.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-… |
CVE-2026-110719 | High | 7.2 | 2026-10-14 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docke… |
CVE-2026-103929 | High | 7.8 | 2026-10-14 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untr… |
CVE-2026-102695 | High | 8.2 | 2026-10-14 | OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structural… |
CVE-2026-97205 | High | 8.1 | 2026-10-14 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations… |
CVE-2026-94197 | High | 7.5 | 2026-10-14 | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy… |
CVE-2026-93479 | High | 8.1 | 2026-10-14 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the… |
CVE-2026-91184 | High | 8.8 | 2026-10-14 | Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verb… |
CVE-2026-73804 | High | 8.1 | 2026-10-14 | Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresp… |
CVE-2026-73802 | High | 8.8 | 2026-10-14 | Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, e… |
CVE-2026-73800 | High | 8.8 | 2026-10-14 | Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author… |
CVE-2026-73539 | High | 7.5 | 2026-10-14 | Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style a… |
CVE-2026-73535 | High | 8.8 | 2026-10-14 | Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an Open… |
CVE-2026-71184 | High | 8.8 | 2026-10-14 | Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the ru… |
CVE-2026-66877 | High | 8.1 | 2026-10-14 | Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement… |
CVE-2026-53613 | High | 7.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path… |
CVE-2026-53612 | High | 7.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post… |
CVE-2026-15176 | High | 8.1 | 2026-10-14 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or retur… |
CVE-2026-110648 | High | 7.8 | 2026-10-14 | @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files w… |
CVE-2026-110647 | High | 7.8 | 2026-10-14 | Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted na… |
CVE-2026-110646 | High | 8.1 | 2026-10-14 | Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the r… |
CVE-2026-110642 | High | 7.8 | 2026-10-14 | xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescap… |
CVE-2026-110641 | High | 8.8 | 2026-10-14 | @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archi… |
CVE-2026-110637 | High | 7.8 | 2026-10-14 | buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB… |
CVE-2026-110633 | High | 7.8 | 2026-10-14 | MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install… |
CVE-2026-110632 | High | 8.1 | 2026-10-14 | Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater… |
CVE-2026-110628 | High | 8.6 | 2026-10-14 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix f… |
CVE-2026-110623 | High | 7.5 | 2026-10-14 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' docu… |
CVE-2026-110622 | High | 7.5 | 2026-10-14 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page mana… |
CVE-2026-110621 | High | 8.8 | 2026-10-14 | Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary p… |
CVE-2026-110618 | High | 8.1 | 2026-10-14 | SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke… |
CVE-2026-110616 | High | 8.1 | 2026-10-14 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the… |
CVE-2026-110615 | High | 7.1 | 2026-10-14 | jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to ch… |
CVE-2026-110599 | High | 7.1 | 2026-10-14 | L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borr… |
CVE-2026-104939 | High | 7.5 | 2026-10-14 | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP… |
CVE-2025-71433 | High | 7.5 | 2026-10-14 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label… |
CVE-2020-37281 | High | 8.1 | 2026-10-14 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by… |
CVE-2017-20286 | High | 7.8 | 2026-10-14 | DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when l… |
CVE-2026-110690 | High | 7.5 | 2026-10-14 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at… |
CVE-2026-107870 | High | 7.1 | 2026-10-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This… |
CVE-2026-97278 | High | 7.2 | 2026-10-14 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9. |
CVE-2026-82026 | High | 8.8 | 2026-10-14 | Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticate… |
CVE-2026-107867 | High | 7.1 | 2026-10-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Ref… |
CVE-2026-107426 | High | 7.3 | 2026-10-14 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2026-107421 | High | 7.3 | 2026-10-14 | Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Bro… |
CVE-2026-106599 | High | 8.8 | 2026-10-14 | Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9… |
CVE-2026-105874 | High | 7.1 | 2026-10-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.T… |
CVE-2026-76655 | High | 7.5 | 2026-10-14 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution |
CVE-2026-73798 | High | 8.2 | 2026-10-14 | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. |
CVE-2026-107431 | High | 7.5 | 2026-10-14 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2026-105067 | High | 8.5 | 2026-10-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar… |
CVE-2026-104795 | High | 8.8 | 2026-10-14 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a cont… |
CVE-2026-103905 | High | 7.5 | 2026-10-14 | The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logout route before checking whether th… |
CVE-2026-103358 | High | 7.5 | 2026-10-14 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-w… |
CVE-2026-90954 | High | 7.8 | 2026-10-14 | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, an… |
CVE-2026-88829 | High | 7.2 | 2026-10-14 | A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the… |
CVE-2026-86476 | High | 8.4 | 2026-10-14 | A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane… |
CVE-2026-73793 | High | 7.9 | 2026-10-14 | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. |
CVE-2026-73790 | High | 8.2 | 2026-10-14 | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. |
CVE-2026-107428 | High | 7.1 | 2026-10-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-web… |
CVE-2026-92392 | High | 8.1 | 2026-10-14 | During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after fre… |
CVE-2026-110284 | High | 7.5 | 2026-10-14 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10… |
CVE-2026-109901 | High | 8.5 | 2026-10-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-ca… |
CVE-2026-107751 | High | 7.2 | 2026-10-14 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due… |
CVE-2026-107631 | High | 7.2 | 2026-10-14 | The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to… |
CVE-2026-105107 | High | 7.6 | 2026-10-14 | Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled… |
CVE-2026-105106 | High | 8.8 | 2026-10-14 | Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-d… |
CVE-2026-104909 | High | 8.1 | 2026-10-14 | The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' par… |
CVE-2026-104764 | High | 7.2 | 2026-10-14 | The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization o… |
CVE-2026-103367 | High | 8.1 | 2026-10-14 | The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the '… |
CVE-2026-103366 | High | 7.5 | 2026-10-14 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in vers… |
CVE-2026-100163 | High | 7.4 | 2026-10-14 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to… |
CVE-2026-89288 | High | 8.6 | 2026-10-14 | The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing… |
CVE-2026-86799 | High | 8.8 | 2026-10-14 | The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions scre… |
CVE-2026-86787 | High | 7.2 | 2026-10-14 | The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine c… |
CVE-2026-107508 | High | 8.6 | 2026-10-14 | The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attac… |
CVE-2026-107126 | High | 8.8 | 2026-10-14 | The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting… |
CVE-2026-103307 | High | 8.6 | 2026-10-14 | The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement… |
CVE-2026-50218 | High | 8.5 | 2026-10-14 | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact wi… |
CVE-2026-110459 | High | 8.6 | 2026-10-14 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make u… |
CVE-2026-110455 | High | 8.1 | 2026-10-14 | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Ke… |
CVE-2026-110450 | High | 8.0 | 2026-10-14 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content… |
CVE-2026-106931 | High | 7.8 | 2026-10-14 | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privi… |
CVE-2026-105429 | High | 8.0 | 2026-10-14 | Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0… |
CVE-2026-101924 | High | 7.2 | 2026-10-14 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on… |
CVE-2026-97398 | High | 7.2 | 2026-10-14 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and… |
CVE-2026-96661 | High | 7.5 | 2026-10-14 | The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1… |