High-severity CVEs (page 85)
Page 85 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80955 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay… |
CVE-2026-80954 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_de… |
CVE-2026-80953 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() r… |
CVE-2026-80952 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_de… |
CVE-2026-80950 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver… |
CVE-2026-80947 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from th… |
CVE-2026-80944 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands ke… |
CVE-2026-80943 | High | 7.6 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tx_fill_desc() uses… |
CVE-2026-80937 | High | 8.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915_mcu_get_… |
CVE-2026-80936 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_pm_work on stop mt7925 queues mlo_pm_work with a 5 second… |
CVE-2026-80935 | High | 8.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996_mcu_get_… |
CVE-2026-80933 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is… |
CVE-2026-80932 | High | 8.4 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtio_vsock_remove() stops the virtqueues… |
CVE-2026-80931 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1_f19_i2c_master_transfer()… |
CVE-2026-80929 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is globa… |
CVE-2026-80928 | High | 7.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the credentials of ano… |
CVE-2026-54135 | High | 7.5 | 2026-09-11 | AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in the custom HTTP serve… |
CVE-2026-79394 | High | 7.5 | 2026-09-11 | An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.183… |
CVE-2026-79393 | High | 7.5 | 2026-09-11 | A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT… |
CVE-2026-79362 | High | 8.8 | 2026-09-11 | Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged u… |
CVE-2026-71646 | High | 7.5 | 2026-09-11 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the… |
CVE-2026-62112 | High | 7.6 | 2026-09-11 | Editor SQL Injection in Amelia <= 2.4.9 versions. |
CVE-2026-62109 | High | 7.6 | 2026-09-11 | Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions. |
CVE-2026-62107 | High | 8.8 | 2026-09-11 | Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
CVE-2026-62106 | High | 8.8 | 2026-09-11 | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. |
CVE-2026-62102 | High | 8.8 | 2026-09-11 | Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. |
CVE-2026-62089 | High | 7.1 | 2026-09-11 | Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a… |
CVE-2026-89099 | High | 7.5 | 2026-09-11 | A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronizati… |
CVE-2026-78807 | High | 7.1 | 2026-09-11 | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing… |
CVE-2026-67211 | High | 7.5 | 2026-09-11 | OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellche… |
CVE-2026-72708 | High | 7.5 | 2026-09-11 | SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbi… |
CVE-2026-89262 | High | 7.5 | 2026-09-11 | MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields… |
CVE-2026-89260 | High | 7.5 | 2026-09-11 | MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.inde… |
CVE-2026-89066 | High | 7.8 | 2026-09-11 | Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attack… |
CVE-2026-89065 | High | 7.1 | 2026-09-11 | Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delet… |
CVE-2026-89013 | High | 7.5 | 2026-09-11 | Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document… |
CVE-2026-7863 | High | 8.4 | 2026-09-11 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Insti… |
CVE-2026-70341 | High | 8.5 | 2026-09-11 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2026-68497 | High | 7.5 | 2026-09-11 | jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to Da… |
CVE-2026-8303 | High | 7.8 | 2026-09-11 | Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issu… |
CVE-2026-8301 | High | 7.8 | 2026-09-11 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Insti… |
CVE-2026-87020 | High | 8.1 | 2026-09-11 | An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied… |
CVE-2026-82583 | High | 8.3 | 2026-09-11 | NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could r… |
CVE-2026-82578 | High | 7.5 | 2026-09-11 | When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restriction… |
CVE-2026-78224 | High | 8.2 | 2026-09-11 | The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-… |
CVE-2026-38058 | High | 8.1 | 2026-09-11 | The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt pass… |
CVE-2026-38056 | High | 8.8 | 2026-09-11 | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deploy… |
CVE-2026-89212 | High | 8.6 | 2026-09-11 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The… |
CVE-2026-71641 | High | 7.5 | 2026-09-11 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via… |
CVE-2026-71416 | High | 8.8 | 2026-09-11 | Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin`… |
CVE-2026-57842 | High | 7.0 | 2026-09-11 | NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return stat… |
CVE-2026-89256 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names… |
CVE-2026-89255 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HT… |
CVE-2026-89254 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the CustomizeUser plugin where the field… |
CVE-2026-89253 | High | 8.7 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile fie… |
CVE-2026-89250 | High | 7.5 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint tha… |
CVE-2026-89249 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied… |
CVE-2026-89243 | High | 8.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name() that fa… |
CVE-2026-89242 | High | 7.2 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability in the _json_decode function that fetc… |
CVE-2026-87776 | High | 7.5 | 2026-09-11 | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still… |
CVE-2026-89147 | High | 7.5 | 2026-09-11 | Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without ti… |
CVE-2026-89146 | High | 7.5 | 2026-09-11 | libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A m… |
CVE-2026-17037 | High | 7.2 | 2026-09-11 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘comment’ parameter i… |
CVE-2026-80469 | High | 8.3 | 2026-09-11 | An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, a… |
CVE-2026-89178 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same netwo… |
CVE-2026-89177 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unau… |
CVE-2026-89176 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the sa… |
CVE-2026-89174 | High | 7.5 | 2026-09-11 | Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers… |
CVE-2026-87908 | High | 7.5 | 2026-09-11 | multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound… |
CVE-2026-85677 | High | 8.8 | 2026-09-11 | The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, app… |
CVE-2026-74925 | High | 7.2 | 2026-09-11 | The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to g… |
CVE-2026-73785 | High | 7.5 | 2026-09-11 | A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS). |
CVE-2026-73784 | High | 8.8 | 2026-09-11 | A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user. |
CVE-2026-89060 | High | 7.7 | 2026-09-11 | A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn config… |
CVE-2026-89161 | High | 7.4 | 2026-09-11 | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. |
CVE-2026-81825 | High | 7.2 | 2026-09-11 | The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, an… |
CVE-2026-81754 | High | 7.2 | 2026-09-11 | The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Age… |
CVE-2026-19991 | High | 8.1 | 2026-09-11 | The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler. T… |
CVE-2026-18579 | High | 7.2 | 2026-09-11 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' parameter in all versions up to, and i… |
CVE-2026-18561 | High | 7.5 | 2026-09-11 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16… |
CVE-2026-15462 | High | 7.5 | 2026-09-11 | The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX acti… |
CVE-2026-78134 | High | 7.1 | 2026-09-11 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identit… |
CVE-2026-78133 | High | 7.5 | 2026-09-11 | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. |
CVE-2026-78132 | High | 7.5 | 2026-09-11 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. |
CVE-2026-78130 | High | 7.5 | 2026-09-11 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. |
CVE-2026-77807 | High | 7.5 | 2026-09-11 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all… |
CVE-2026-87958 | High | 8.1 | 2026-09-10 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by… |
CVE-2026-86093 | High | 7.5 | 2026-09-10 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute a… |
CVE-2026-84889 | High | 8.8 | 2026-09-10 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restr… |
CVE-2026-82099 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
CVE-2026-82098 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special… |
CVE-2026-82097 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to a Server-Side Request Forgery (SSRF) v… |
CVE-2026-82095 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
CVE-2026-82092 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulne… |
CVE-2026-81941 | High | 8.8 | 2026-09-10 | IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the pr… |
CVE-2026-81940 | High | 8.8 | 2026-09-10 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special character… |
CVE-2026-81554 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulne… |
CVE-2026-81551 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path… |
CVE-2026-81550 | High | 8.8 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special ele… |
CVE-2026-81540 | High | 8.5 | 2026-09-10 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path tra… |