High-severity CVEs (page 18)
Page 18 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24084 | High | 7.5 | 2026-08-04 | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
CVE-2026-24083 | High | 7.8 | 2026-08-04 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. |
CVE-2026-24080 | High | 7.8 | 2026-08-04 | Memory Corruption when handling malformed request parameters in the fingerprint TA. |
CVE-2026-24079 | High | 8.1 | 2026-08-04 | Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. |
CVE-2026-21366 | High | 7.8 | 2026-08-04 | Memory corruption while processing a packet with a size close to the maximum allowed value. |
CVE-2026-67200 | High | 7.5 | 2026-08-04 | Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by in… |
CVE-2026-67198 | High | 7.5 | 2026-08-04 | Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the… |
CVE-2026-67195 | High | 8.8 | 2026-08-04 | Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submit… |
CVE-2026-18770 | High | 7.3 | 2026-08-04 | A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the… |
CVE-2026-18650 | High | 8.8 | 2026-08-04 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1. |
CVE-2026-11368 | High | 7.1 | 2026-08-04 | The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[… |
CVE-2026-17070 | High | 8.8 | 2026-08-04 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS… |
CVE-2026-70373 | High | 8.8 | 2026-08-04 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calculate by concatenating several user-controlled reque… |
CVE-2026-70372 | High | 8.8 | 2026-08-04 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string… |
CVE-2026-70371 | High | 8.8 | 2026-08-04 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query stri… |
CVE-2026-70370 | High | 8.8 | 2026-08-04 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Column request parameters directly into ide… |
CVE-2026-70369 | High | 8.8 | 2026-08-04 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters direc… |
CVE-2026-63252 | High | 7.5 | 2026-08-04 | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowi… |
CVE-2026-62927 | High | 7.5 | 2026-08-04 | In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, a… |
CVE-2026-61387 | High | 7.5 | 2026-08-04 | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server… |
CVE-2026-60007 | High | 7.4 | 2026-08-04 | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentica… |
CVE-2026-58080 | High | 8.2 | 2026-08-04 | In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions… |
CVE-2026-18806 | High | 7.1 | 2026-08-04 | External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Cl… |
CVE-2026-10710 | High | 7.8 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malici… |
CVE-2026-10709 | High | 7.8 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSecti… |
CVE-2026-14838 | High | 7.4 | 2026-08-04 | Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows… |
CVE-2026-67243 | High | 7.2 | 2026-08-04 | freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges fo… |
CVE-2026-18755 | High | 7.3 | 2026-08-04 | A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By p… |
CVE-2026-64563 | High | 7.8 | 2026-08-04 | In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter->p on table restart rhashtable_walk_start_check() has two re… |
CVE-2026-64562 | High | 8.8 | 2026-08-04 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while… |
CVE-2026-64561 | High | 8.8 | 2026-08-04 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a… |
CVE-2026-16623 | High | 8.0 | 2026-08-04 | The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a m… |
CVE-2026-42169 | High | 7.3 | 2026-08-04 | A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, le… |
CVE-2026-14818 | High | 7.2 | 2026-08-04 | A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, U… |
CVE-2026-6837 | High | 7.2 | 2026-08-04 | A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an… |
CVE-2026-56846 | High | 7.5 | 2026-08-04 | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability aff… |
CVE-2026-56845 | High | 7.5 | 2026-08-04 | An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequ… |
CVE-2026-66322 | High | 7.1 | 2026-08-04 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-66321 | High | 7.4 | 2026-08-04 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-66318 | High | 8.1 | 2026-08-04 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-66315 | High | 7.5 | 2026-08-04 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-66310 | High | 7.7 | 2026-08-04 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
CVE-2026-65802 | High | 7.4 | 2026-08-04 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62870 | High | 8.8 | 2026-08-04 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-67978 | High | 7.5 | 2026-08-03 | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame. |
CVE-2026-48399 | High | 7.5 | 2026-08-03 | Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker c… |
CVE-2026-67977 | High | 7.5 | 2026-08-03 | An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafte… |
CVE-2026-67975 | High | 7.5 | 2026-08-03 | Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove su… |
CVE-2026-67974 | High | 7.5 | 2026-08-03 | A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial… |
CVE-2026-67973 | High | 7.5 | 2026-08-03 | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs. |
CVE-2026-67970 | High | 7.5 | 2026-08-03 | Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal. |
CVE-2026-67969 | High | 7.5 | 2026-08-03 | An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl en… |
CVE-2026-10849 | High | 8.2 | 2026-08-03 | The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in response_json… |
CVE-2026-69246 | High | 7.2 | 2026-08-03 | Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. T… |
CVE-2026-67976 | High | 7.5 | 2026-08-03 | The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Ser… |
CVE-2026-67972 | High | 7.5 | 2026-08-03 | An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an info… |
CVE-2026-52521 | High | 8.1 | 2026-08-03 | A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat featur… |
CVE-2026-41447 | High | 7.8 | 2026-08-03 | FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl… |
CVE-2026-18733 | High | 8.8 | 2026-08-03 | A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system… |
CVE-2026-18647 | High | 7.3 | 2026-08-03 | A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the… |
CVE-2026-69185 | High | 7.5 | 2026-08-03 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can ma… |
CVE-2026-68981 | High | 7.5 | 2026-08-03 | Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a confi… |
CVE-2026-67599 | High | 7.2 | 2026-08-03 | ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by sub… |
CVE-2026-67598 | High | 7.4 | 2026-08-03 | Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to inter… |
CVE-2026-18641 | High | 7.3 | 2026-08-03 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com… |
CVE-2026-59913 | High | 7.8 | 2026-08-03 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privi… |
CVE-2026-59912 | High | 7.8 | 2026-08-03 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with… |
CVE-2025-15629 | High | 7.5 | 2026-08-03 | A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed dev… |
CVE-2025-15628 | High | 7.5 | 2026-08-03 | Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An… |
CVE-2025-15627 | High | 7.5 | 2026-08-03 | A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentica… |
CVE-2026-61524 | High | 7.2 | 2026-08-03 | WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators… |
CVE-2026-61523 | High | 7.2 | 2026-08-03 | WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP… |
CVE-2026-69152 | High | 7.5 | 2026-08-03 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not appl… |
CVE-2026-67611 | High | 8.1 | 2026-08-03 | OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by… |
CVE-2026-67610 | High | 8.1 | 2026-08-03 | OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attacker… |
CVE-2026-61372 | High | 7.5 | 2026-08-03 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: thr… |
CVE-2026-41453 | High | 8.8 | 2026-08-03 | Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrar… |
CVE-2026-39931 | High | 7.2 | 2026-08-03 | OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or… |
CVE-2026-18718 | High | 7.0 | 2026-08-03 | Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a… |
CVE-2026-18607 | High | 8.8 | 2026-08-03 | A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 an… |
CVE-2026-18606 | High | 7.8 | 2026-08-03 | A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86… |
CVE-2026-18605 | High | 7.0 | 2026-08-03 | A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mi… |
CVE-2026-18568 | High | 7.5 | 2026-08-03 | XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cr… |
CVE-2026-67609 | High | 7.8 | 2026-08-03 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers w… |
CVE-2026-69097 | High | 7.0 | 2026-08-03 | GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through mal… |
CVE-2026-69096 | High | 8.8 | 2026-08-03 | OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an O… |
CVE-2026-69095 | High | 7.5 | 2026-08-03 | OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows un… |
CVE-2026-69091 | High | 7.5 | 2026-08-03 | Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modul… |
CVE-2026-69089 | High | 7.5 | 2026-08-03 | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to RocketTheme\Toolbox\Resour… |
CVE-2026-69088 | High | 8.1 | 2026-08-03 | Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint dynamic-field directives because Bluep… |
CVE-2026-69086 | High | 7.7 | 2026-08-03 | SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traver… |
CVE-2026-68587 | High | 8.6 | 2026-08-03 | SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingIns… |
CVE-2026-68586 | High | 8.6 | 2026-08-03 | SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/… |
CVE-2026-68584 | High | 8.6 | 2026-08-03 | SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeadin… |
CVE-2026-67608 | High | 7.2 | 2026-08-03 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php th… |
CVE-2026-18642 | High | 7.8 | 2026-08-03 | Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue af… |
CVE-2026-18600 | High | 8.8 | 2026-08-03 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of the file /usr/lib/oui-h… |
CVE-2026-18092 | High | 8.1 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with documen… |
CVE-2026-18089 | High | 7.5 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when n… |
CVE-2026-18599 | High | 8.0 | 2026-08-03 | A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of t… |