High-severity CVEs (page 86)

Page 86 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.

All high-severity CVEs — newest first (page 86 of 100)
CVESeverityScorePublishedSummary
CVE-2026-81268High8.12026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session…
CVE-2026-81265High7.52026-09-10IBM Langflow OSS 1.0.0 through 1.11.5.
CVE-2026-81213High8.62026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation…
CVE-2026-81211High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom comp…
CVE-2026-81210High7.72026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns…
CVE-2026-81207High8.52026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an o…
CVE-2026-80436High8.52026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or e…
CVE-2026-80434High7.42026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an in…
CVE-2026-80380High7.12026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery.
CVE-2026-80378High8.52026-09-10IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization.
CVE-2026-79742High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.
CVE-2026-78575High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line argu…
CVE-2026-78571High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-control…
CVE-2026-78569High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
CVE-2026-76059High8.82026-09-10IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotat…
CVE-2026-75777High8.82026-09-10IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted…
CVE-2026-75624High8.82026-09-10IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictio…
CVE-2026-71647High7.52026-09-10An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkColl…
CVE-2026-71645High7.52026-09-10An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the…
CVE-2026-71643High7.52026-09-10An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via…
CVE-2026-45770High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to ve…
CVE-2026-45769High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2…
CVE-2026-45768High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to ve…
CVE-2026-45766High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certa…
CVE-2026-45765High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3…
CVE-2026-45762High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suric…
CVE-2026-2310High7.82026-09-10IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A re…
CVE-2025-57231High7.52026-09-10Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url.
CVE-2026-79592High7.52026-09-10An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offs…
CVE-2026-79591High7.82026-09-10A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled…
CVE-2026-63427High7.82026-09-10An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution wi…
CVE-2026-45759High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suric…
CVE-2026-19136High7.82026-09-10A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow…
CVE-2026-18994High7.12026-09-10A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, th…
CVE-2026-11813High7.82026-09-10A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate priv…
CVE-2026-89087High7.32026-09-10The cstruct package before 6.3.0 for OCaml mishandles indexes.
CVE-2026-89054High8.22026-09-10A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST A…
CVE-2026-89011High7.12026-09-10isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute…
CVE-2026-88036High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file ide…
CVE-2026-88034High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file i…
CVE-2026-88033High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file…
CVE-2026-88021High7.12026-09-10Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not au…
CVE-2026-87993High7.72026-09-10The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in templat…
CVE-2026-87090High8.32026-09-10Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete anothe…
CVE-2026-89046High8.22026-09-10zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition…
CVE-2026-89043High7.42026-09-10passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent X…
CVE-2026-88053High7.82026-09-10Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses…
CVE-2026-88052High7.82026-09-10Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count…
CVE-2026-88051High7.82026-09-10Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independ…
CVE-2026-88031High8.12026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file id…
CVE-2026-88030High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file…
CVE-2026-88029High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured fil…
CVE-2026-88027High7.12026-09-10Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a c…
CVE-2026-88025High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file id…
CVE-2026-88024High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file…
CVE-2026-88023High8.32026-09-10Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file…
CVE-2026-88022High7.72026-09-10Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filt…
CVE-2026-88048High7.12026-09-10Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserial…
CVE-2026-88047High7.82026-09-10Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of…
CVE-2026-88045High7.52026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.0 until 1.75.1, the serve S3 streamed m…
CVE-2026-73699High7.22026-09-10FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect opt…
CVE-2026-73698High7.22026-09-10FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the descri…
CVE-2026-73694High7.22026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that strips shell-metachar…
CVE-2026-73693High8.82026-09-10FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to…
CVE-2026-88959High8.82026-09-10Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to creat…
CVE-2026-88939High8.32026-09-10knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. At…
CVE-2026-88937High8.82026-09-10knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitr…
CVE-2026-88017High7.32026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driv…
CVE-2026-88016High7.12026-09-10rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --l…
CVE-2026-88011High8.12026-09-10Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Auth…
CVE-2026-88009High8.22026-09-10Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores i…
CVE-2026-79987High8.82026-09-10A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.
CVE-2026-4130High7.12026-09-10There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain s…
CVE-2026-4129High8.12026-09-10There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system…
CVE-2026-88924High7.02026-09-10A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the li…
CVE-2026-88004High7.42026-09-10Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStr…
CVE-2026-84821High7.52026-09-10Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.
CVE-2026-84819High7.12026-09-10Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.
CVE-2026-84816High7.12026-09-10Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.
CVE-2026-81805High8.12026-09-10Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.
CVE-2026-81804High7.52026-09-10Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore &amp; Migration <= 2.4.2 versions.
CVE-2026-81803High7.52026-09-10Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.
CVE-2026-81801High8.12026-09-10Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.
CVE-2026-81799High7.52026-09-10Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce <= 4.6.4 versions.
CVE-2026-81796High7.32026-09-10Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue af…
CVE-2026-81795High7.12026-09-10Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter &#8211; Lite <= 1.2.3 versions.
CVE-2026-81794High7.52026-09-10Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.
CVE-2026-81789High8.62026-09-10Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce…
CVE-2026-81786High7.52026-09-10Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.
CVE-2026-81784High8.12026-09-10Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects Wise Chat: from n/a through 3.4.2.
CVE-2026-81783High7.12026-09-10Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.
CVE-2026-46387High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suric…
CVE-2026-45747High7.52026-09-10Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS cert…
CVE-2026-88895High7.22026-09-10CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived toke…
CVE-2026-88893High7.52026-09-10OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated…
CVE-2026-88891High8.32026-09-10OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and pub…
CVE-2026-88890High8.52026-09-10OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers befo…
CVE-2026-88889High7.82026-09-10Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifyi…
CVE-2026-88888High7.02026-09-10Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization paramete…
CVE-2026-88887High8.62026-09-10Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote regi…