High-severity CVEs (page 3)
Page 3 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76481 | High | 7.5 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Dep… |
CVE-2026-76479 | High | 7.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Dep… |
CVE-2026-76478 | High | 8.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Dep… |
CVE-2026-76477 | High | 8.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Dep… |
CVE-2026-76476 | High | 8.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Dep… |
CVE-2026-20356 | High | 7.5 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a… |
CVE-2026-20291 | High | 7.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a… |
CVE-2026-20236 | High | 7.5 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a… |
CVE-2026-114261 | High | 7.3 | 2026-10-21 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/dest… |
CVE-2026-114259 | High | 7.3 | 2026-10-21 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file… |
CVE-2026-114258 | High | 7.3 | 2026-10-21 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown fun… |
CVE-2026-114123 | High | 7.5 | 2026-10-21 | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0, the offic… |
CVE-2026-114490 | High | 7.8 | 2026-10-21 | Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with… |
CVE-2026-114489 | High | 8.1 | 2026-10-21 | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose cre… |
CVE-2026-114476 | High | 7.5 | 2026-10-21 | Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential… |
CVE-2026-114257 | High | 7.3 | 2026-10-21 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerabili… |
CVE-2026-114256 | High | 7.3 | 2026-10-21 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/del… |
CVE-2026-114255 | High | 7.3 | 2026-10-21 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user… |
CVE-2026-114254 | High | 7.3 | 2026-10-21 | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the f… |
CVE-2026-102486 | High | 7.5 | 2026-10-21 | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and… |
CVE-2026-102483 | High | 7.5 | 2026-10-21 | Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extens… |
CVE-2026-113779 | High | 8.8 | 2026-10-21 | The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability… |
CVE-2026-112221 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This… |
CVE-2026-111848 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.Th… |
CVE-2026-111840 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-web… |
CVE-2026-111838 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHunk Customizer themehunk-customizer allow… |
CVE-2026-111833 | High | 7.5 | 2026-10-21 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weforms allows Path Traversal.This issue affe… |
CVE-2026-114249 | High | 7.3 | 2026-10-21 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Thi… |
CVE-2026-109619 | High | 8.1 | 2026-10-21 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated aft… |
CVE-2026-97313 | High | 7.5 | 2026-10-21 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, result… |
CVE-2026-96888 | High | 7.5 | 2026-10-21 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirec… |
CVE-2026-94300 | High | 8.1 | 2026-10-21 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it… |
CVE-2026-82230 | High | 7.5 | 2026-10-21 | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server crash via sendi… |
CVE-2026-19630 | High | 7.5 | 2026-10-21 | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS messa… |
CVE-2026-114403 | High | 8.1 | 2026-10-21 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supply… |
CVE-2026-114397 | High | 7.4 | 2026-10-21 | Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthenticated attackers in… |
CVE-2026-114396 | High | 7.1 | 2026-10-21 | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject code into a MongoDB $where clause vi… |
CVE-2026-114391 | High | 7.1 | 2026-10-21 | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for… |
CVE-2026-114387 | High | 8.8 | 2026-10-21 | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard to create administra… |
CVE-2026-114245 | High | 7.3 | 2026-10-21 | A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. A… |
CVE-2026-114243 | High | 7.3 | 2026-10-21 | A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd8… |
CVE-2026-56386 | High | 7.5 | 2026-10-21 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of ser… |
CVE-2026-114242 | High | 7.3 | 2026-10-21 | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. A… |
CVE-2026-110884 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad Live Summary for Gravity Forms live-summary… |
CVE-2026-110370 | High | 8.8 | 2026-10-21 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins f… |
CVE-2026-110369 | High | 8.8 | 2026-10-21 | Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects Wo… |
CVE-2026-97206 | High | 7.5 | 2026-10-21 | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threade… |
CVE-2026-85683 | High | 8.8 | 2026-10-21 | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated use… |
CVE-2026-110899 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.Th… |
CVE-2026-107435 | High | 7.1 | 2026-10-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows S… |
CVE-2026-92998 | High | 8.6 | 2026-10-21 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing… |
CVE-2026-92997 | High | 8.6 | 2026-10-21 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL… |
CVE-2026-88784 | High | 7.5 | 2026-10-21 | The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated… |
CVE-2026-85642 | High | 7.5 | 2026-10-21 | The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gatew… |
CVE-2026-79627 | High | 7.1 | 2026-10-21 | The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users gran… |
CVE-2026-111949 | High | 7.5 | 2026-10-21 | The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an additional passkey on an account that already ha… |
CVE-2026-111948 | High | 7.1 | 2026-10-21 | The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a JavaScript context on one of its admin p… |
CVE-2026-111574 | High | 7.5 | 2026-10-21 | The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries before outputting it i… |
CVE-2026-110523 | High | 8.1 | 2026-10-21 | The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force once the payment gateway is disconnect… |
CVE-2026-109147 | High | 7.1 | 2026-10-21 | The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its parameters before reflecting it back in an admin page, leading t… |
CVE-2026-107506 | High | 7.5 | 2026-10-21 | The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its ba… |
CVE-2026-107237 | High | 8.2 | 2026-10-21 | The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging sit… |
CVE-2026-107127 | High | 7.5 | 2026-10-21 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker… |
CVE-2026-105262 | High | 8.0 | 2026-10-21 | The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translations, and exposes a valid nonce to any… |
CVE-2026-102499 | High | 7.7 | 2026-10-21 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter… |
CVE-2026-82814 | High | 8.8 | 2026-10-21 | The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respect… |
CVE-2026-114109 | High | 8.8 | 2026-10-21 | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts… |
CVE-2026-114107 | High | 8.8 | 2026-10-21 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root b… |
CVE-2026-114106 | High | 7.5 | 2026-10-21 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agen… |
CVE-2026-114102 | High | 7.5 | 2026-10-21 | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, be… |
CVE-2026-114098 | High | 7.8 | 2026-10-21 | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the worktree… |
CVE-2026-114097 | High | 7.8 | 2026-10-21 | Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files outside the… |
CVE-2026-114096 | High | 7.8 | 2026-10-21 | Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allows attackers to write arbitrary files b… |
CVE-2026-114094 | High | 8.8 | 2026-10-21 | Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a mal… |
CVE-2026-114090 | High | 7.1 | 2026-10-21 | Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces… |
CVE-2026-114089 | High | 8.8 | 2026-10-21 | Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/<co… |
CVE-2026-114087 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because… |
CVE-2026-114085 | High | 7.9 | 2026-10-21 | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipulate runs belonging… |
CVE-2026-114084 | High | 7.7 | 2026-10-21 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates the unescaped tags query parameter into… |
CVE-2026-114083 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to e… |
CVE-2026-114082 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 strea… |
CVE-2026-114081 | High | 7.7 | 2026-10-21 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-function names into generated ClickHouse… |
CVE-2026-114078 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that allows authenticat… |
CVE-2026-114077 | High | 7.1 | 2026-10-21 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resolves a WorkerDeployment by friendlyId al… |
CVE-2026-114069 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environme… |
CVE-2026-114068 | High | 8.3 | 2026-10-21 | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs… |
CVE-2026-114066 | High | 8.1 | 2026-10-21 | Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own… |
CVE-2026-114063 | High | 7.5 | 2026-10-21 | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated at… |
CVE-2026-114059 | High | 7.5 | 2026-10-21 | ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Gro… |
CVE-2026-114055 | High | 7.5 | 2026-10-21 | vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters… |
CVE-2026-114053 | High | 8.1 | 2026-10-21 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients se… |
CVE-2026-114052 | High | 7.5 | 2026-10-21 | vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-c… |
CVE-2026-114051 | High | 7.5 | 2026-10-21 | vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input thread later di… |
CVE-2026-114050 | High | 7.5 | 2026-10-21 | vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthen… |
CVE-2026-114045 | High | 8.8 | 2026-10-21 | FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DV… |
CVE-2021-48018 | High | 7.4 | 2026-10-21 | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function… |
CVE-2026-93888 | High | 7.8 | 2026-10-20 | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient… |
CVE-2026-93442 | High | 8.2 | 2026-10-20 | IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service o… |
CVE-2026-93441 | High | 8.6 | 2026-10-20 | IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
CVE-2026-91668 | High | 8.8 | 2026-10-20 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 1… |