High-severity CVEs (page 51)
Page 51 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94081 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions. |
CVE-2026-94078 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. |
CVE-2026-94076 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions. |
CVE-2026-93771 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. |
CVE-2026-93770 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. |
CVE-2026-93651 | High | 7.2 | 2026-09-30 | Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. |
CVE-2026-93624 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. |
CVE-2026-93621 | High | 8.2 | 2026-09-30 | Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. |
CVE-2026-93514 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. |
CVE-2026-93512 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. |
CVE-2026-92121 | High | 7.5 | 2026-09-30 | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set… |
CVE-2026-62085 | High | 7.6 | 2026-09-30 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. |
CVE-2026-27371 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
CVE-2026-102398 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. |
CVE-2026-102396 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. |
CVE-2026-102395 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions. |
CVE-2026-102385 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
CVE-2026-100507 | High | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalizati… |
CVE-2026-85532 | High | 7.5 | 2026-09-30 | Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive C… |
CVE-2026-62146 | High | 7.8 | 2026-09-30 | A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once… |
CVE-2026-103242 | High | 7.1 | 2026-09-30 | A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header ty… |
CVE-2026-76992 | High | 7.5 | 2026-09-30 | The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote… |
CVE-2026-94002 | High | 7.5 | 2026-09-30 | Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. … |
CVE-2026-93994 | High | 8.1 | 2026-09-30 | Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two… |
CVE-2026-79625 | High | 8.1 | 2026-09-30 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorr… |
CVE-2026-10764 | High | 8.7 | 2026-09-30 | Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data. |
CVE-2026-97347 | High | 7.2 | 2026-09-30 | The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1… |
CVE-2026-75098 | High | 7.5 | 2026-09-30 | The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter paramete… |
CVE-2026-102454 | High | 7.2 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby… |
CVE-2026-97150 | High | 7.2 | 2026-09-30 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is… |
CVE-2026-92873 | High | 7.3 | 2026-09-30 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog nod… |
CVE-2026-92871 | High | 7.5 | 2026-09-30 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. |
CVE-2026-92870 | High | 7.5 | 2026-09-30 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. |
CVE-2026-92867 | High | 8.8 | 2026-09-30 | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code ex… |
CVE-2026-6806 | High | 7.5 | 2026-09-30 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' paramet… |
CVE-2026-89294 | High | 7.5 | 2026-09-30 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale… |
CVE-2026-92994 | High | 8.8 | 2026-09-30 | The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serv… |
CVE-2026-91832 | High | 7.1 | 2026-09-30 | The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu… |
CVE-2026-89193 | High | 7.5 | 2026-09-30 | The Robin Image Optimizer WordPress plugin before 2.0.8 does not escape values that its bundled HTML parser re-emits into element attributes when a non-defaul… |
CVE-2026-88797 | High | 7.1 | 2026-09-30 | The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in u… |
CVE-2026-85573 | High | 8.8 | 2026-09-30 | The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authe… |
CVE-2026-75823 | High | 7.4 | 2026-09-30 | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to… |
CVE-2026-103111 | High | 7.6 | 2026-09-30 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data. |
CVE-2026-102913 | High | 7.3 | 2026-09-30 | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php… |
CVE-2026-86134 | High | 7.5 | 2026-09-30 | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management… |
CVE-2026-102910 | High | 7.3 | 2026-09-30 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_… |
CVE-2026-96649 | High | 7.2 | 2026-09-30 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via p… |
CVE-2026-103109 | High | 7.7 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to tri… |
CVE-2026-103108 | High | 7.5 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to tr… |
CVE-2026-103106 | High | 7.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attack… |
CVE-2026-103105 | High | 8.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local acce… |
CVE-2026-103104 | High | 7.5 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to tr… |
CVE-2026-103102 | High | 8.6 | 2026-09-30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort… |
CVE-2026-103101 | High | 8.6 | 2026-09-30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infi… |
CVE-2026-103100 | High | 7.5 | 2026-09-30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abor… |
CVE-2026-103099 | High | 7.5 | 2026-09-30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resul… |
CVE-2026-102909 | High | 7.3 | 2026-09-30 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessme… |
CVE-2026-102908 | High | 7.3 | 2026-09-30 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admi… |
CVE-2026-102874 | High | 7.3 | 2026-09-30 | A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execut… |
CVE-2026-103088 | High | 7.5 | 2026-09-30 | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates templat… |
CVE-2026-103055 | High | 7.5 | 2026-09-30 | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET… |
CVE-2026-103054 | High | 7.1 | 2026-09-30 | AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portf… |
CVE-2026-90441 | High | 8.1 | 2026-09-30 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (includin… |
CVE-2026-86136 | High | 8.1 | 2026-09-30 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (includin… |
CVE-2026-86133 | High | 7.5 | 2026-09-30 | An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to cr… |
CVE-2026-86132 | High | 7.5 | 2026-09-30 | An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending… |
CVE-2026-86128 | High | 7.5 | 2026-09-30 | A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of serv… |
CVE-2026-86105 | High | 7.1 | 2026-09-30 | An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other… |
CVE-2026-86104 | High | 7.5 | 2026-09-30 | An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of se… |
CVE-2026-18145 | High | 7.2 | 2026-09-30 | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator pr… |
CVE-2026-13046 | High | 7.2 | 2026-09-30 | A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already o… |
CVE-2026-103043 | High | 7.5 | 2026-09-29 | anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attack… |
CVE-2026-103042 | High | 7.5 | 2026-09-29 | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowing unauthenticated… |
CVE-2026-91191 | High | 7.5 | 2026-09-29 | The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock don… |
CVE-2026-84409 | High | 7.5 | 2026-09-29 | The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A… |
CVE-2026-74225 | High | 7.1 | 2026-09-29 | U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6… |
CVE-2026-74222 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage f… |
CVE-2026-74221 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious NFS… |
CVE-2026-74220 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying craf… |
CVE-2026-71971 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote a… |
CVE-2026-71302 | High | 7.1 | 2026-09-29 | The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a s… |
CVE-2026-94204 | High | 7.5 | 2026-09-29 | The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored obj… |
CVE-2026-102925 | High | 7.8 | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place… |
CVE-2026-102253 | High | 7.5 | 2026-09-29 | iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive wo… |
CVE-2026-96274 | High | 7.4 | 2026-09-29 | In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS pa… |
CVE-2026-94953 | High | 8.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-79403 | High | 8.4 | 2026-09-29 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint |
CVE-2026-76728 | High | 7.2 | 2026-09-29 | A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side… |
CVE-2026-76727 | High | 7.2 | 2026-09-29 | Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high priv… |
CVE-2026-76726 | High | 8.1 | 2026-09-29 | An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access… |
CVE-2026-67993 | High | 8.8 | 2026-09-29 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback. |
CVE-2026-67987 | High | 7.5 | 2026-09-29 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag respons… |
CVE-2026-61519 | High | 8.8 | 2026-09-29 | Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attac… |
CVE-2026-102878 | High | 8.1 | 2026-09-29 | mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers… |
CVE-2026-102876 | High | 8.1 | 2026-09-29 | SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surrea… |
CVE-2026-102875 | High | 7.8 | 2026-09-29 | VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Att… |
CVE-2026-102328 | High | 8.8 | 2026-09-29 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-102327 | High | 7.5 | 2026-09-29 | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-102326 | High | 8.8 | 2026-09-29 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-102324 | High | 8.3 | 2026-09-29 | Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially ex… |