CVE-2026-102263 | Medium | 4.7 | 2026-09-29 | A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file… |
CVE-2026-102261 | Medium | 5.4 | 2026-09-29 | A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of… |
CVE-2026-102292 | Medium | 4.3 | 2026-09-29 | A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functional… |
CVE-2026-97029 | Medium | 5.7 | 2026-09-29 | Flatpak's process ID namespace separation does not prevent a sandboxed app's kill(0, signal) or killpg(0, signal) calls from reaching processes outside the san… |
CVE-2026-102247 | Medium | 6.8 | 2026-09-29 | A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component… |
CVE-2026-102244 | Medium | 4.3 | 2026-09-29 | A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsense_backend/app/routes/editor_routes… |
CVE-2026-101859 | Medium | 5.4 | 2026-09-29 | A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/del_… |
CVE-2026-101858 | Medium | 4.7 | 2026-09-29 | A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/W… |
CVE-2026-102374 | Medium | 6.1 | 2026-09-29 | GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects… |
CVE-2026-102373 | Medium | 6.5 | 2026-09-29 | GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can… |
CVE-2026-102372 | Medium | 6.1 | 2026-09-29 | GestSup versions before 3.2.62 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary J… |
CVE-2026-101279 | Medium | 6.5 | 2026-09-29 | A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc… |
CVE-2026-101278 | Medium | 4.3 | 2026-09-29 | A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_… |
CVE-2026-18747 | Medium | 6.8 | 2026-09-29 | The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing… |
CVE-2026-18746 | Medium | 5.9 | 2026-09-29 | parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of… |
CVE-2026-18417 | Medium | 6.5 | 2026-09-29 | The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's void user_data field (ctx->user_data = IN… |
CVE-2026-102367 | Medium | 5.4 | 2026-09-29 | mall4j through 4.0 contains an insufficient session expiration vulnerability in the token refresh endpoint that fails to validate the enabled flag when issuing… |
CVE-2026-102366 | Medium | 4.4 | 2026-09-29 | mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file type… |
CVE-2026-102365 | Medium | 6.5 | 2026-09-29 | mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer address data. Authenticated attackers ca… |
CVE-2026-102364 | Medium | 5.4 | 2026-09-29 | mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing thei… |
CVE-2026-102362 | Medium | 5.3 | 2026-09-29 | mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbi… |
CVE-2026-101277 | Medium | 6.5 | 2026-09-29 | A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkim_process_set of the file dkim.c o… |
CVE-2026-102333 | Medium | 6.1 | 2026-09-28 | httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffi… |
CVE-2026-102332 | Medium | 6.1 | 2026-09-28 | Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can la… |
CVE-2026-102297 | Medium | 4.3 | 2026-09-28 | ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission… |
CVE-2026-102296 | Medium | 6.5 | 2026-09-28 | ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting a… |
CVE-2026-101205 | Medium | 6.3 | 2026-09-28 | A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out… |
CVE-2026-101204 | Medium | 6.3 | 2026-09-28 | A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. Th… |
CVE-2026-101203 | Medium | 6.3 | 2026-09-28 | A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipula… |
CVE-2026-101202 | Medium | 6.3 | 2026-09-28 | A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipula… |
CVE-2026-101093 | Medium | 5.4 | 2026-09-28 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verifica… |
CVE-2026-101092 | Medium | 5.3 | 2026-09-28 | SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve image asset paths fr… |
CVE-2024-58386 | Medium | 6.5 | 2026-09-28 | ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The… |
CVE-2026-18415 | Medium | 6.3 | 2026-09-28 | ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer (tx_frame_buf_pool, sized IE… |
CVE-2026-102277 | Medium | 5.3 | 2026-09-28 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function h… |
CVE-2026-102275 | Medium | 6.5 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in jwt/algorithms.py is affected because pr… |
CVE-2026-102274 | Medium | 5.9 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JW… |
CVE-2026-102270 | Medium | 4.4 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT is_pem_format is affected because lazy PEM regular expression backtracks e… |
CVE-2026-102269 | Medium | 4.8 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts c… |
CVE-2026-102265 | Medium | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is affected because parser catches ValueE… |
CVE-2026-102006 | Medium | 5.5 | 2026-09-28 | In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated ker… |
CVE-2026-102005 | Medium | 5.5 | 2026-09-28 | Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, caus… |
CVE-2026-101918 | Medium | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_key_from_jwt is affected because payload… |
CVE-2026-101917 | Medium | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown kid misses force refr… |
CVE-2026-101146 | Medium | 4.3 | 2026-09-28 | A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom… |
CVE-2026-101145 | Medium | 4.3 | 2026-09-28 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the co… |
CVE-2026-101144 | Medium | 6.3 | 2026-09-28 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Quer… |
CVE-2026-100370 | Medium | 4.7 | 2026-09-28 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is responsible for rejecting dangerous URL values… |
CVE-2026-101914 | Medium | 6.5 | 2026-09-28 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) mat… |
CVE-2026-101143 | Medium | 4.3 | 2026-09-28 | A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.scorecard.webui.Scor… |
CVE-2026-101142 | Medium | 6.3 | 2026-09-28 | A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the… |
CVE-2026-97686 | Medium | 5.5 | 2026-09-28 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and s… |
CVE-2026-13018 | Medium | 4.3 | 2026-09-28 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds mem… |
CVE-2026-101105 | Medium | 6.3 | 2026-09-28 | A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of… |
CVE-2026-96740 | Medium | 6.5 | 2026-09-28 | A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into the conso… |
CVE-2026-55156 | Medium | 5.3 | 2026-09-28 | Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to vers… |
CVE-2026-101102 | Medium | 6.3 | 2026-09-28 | A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulat… |
CVE-2026-101101 | Medium | 4.3 | 2026-09-28 | A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the compon… |
CVE-2026-101100 | Medium | 5.4 | 2026-09-28 | A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/p… |
CVE-2026-101099 | Medium | 4.3 | 2026-09-28 | A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin Community… |
CVE-2026-101098 | Medium | 4.3 | 2026-09-28 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHt… |
CVE-2026-101083 | Medium | 5.3 | 2026-09-28 | A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation l… |
CVE-2026-101082 | Medium | 5.3 | 2026-09-28 | A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argume… |
CVE-2026-101861 | Medium | 4.1 | 2026-09-28 | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code… |
CVE-2026-101080 | Medium | 4.8 | 2026-09-28 | A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.p… |
CVE-2026-101078 | Medium | 6.3 | 2026-09-28 | A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src… |
CVE-2026-93540 | Medium | 6.5 | 2026-09-28 | A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options… |
CVE-2026-93539 | Medium | 5.4 | 2026-09-28 | A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests… |
CVE-2026-80359 | Medium | 6.8 | 2026-09-28 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerabili… |
CVE-2026-80358 | Medium | 5.1 | 2026-09-28 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerabili… |
CVE-2026-70413 | Medium | 5.6 | 2026-09-28 | Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access c… |
CVE-2026-93537 | Medium | 6.5 | 2026-09-28 | A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or… |
CVE-2026-87798 | Medium | 5.8 | 2026-09-28 | Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8… |
CVE-2026-86335 | Medium | 6.3 | 2026-09-28 | Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images fr… |
CVE-2026-86334 | Medium | 4.2 | 2026-09-28 | Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allow… |
CVE-2026-15953 | Medium | 5.0 | 2026-09-28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).
This issue af… |
CVE-2026-15952 | Medium | 6.4 | 2026-09-28 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and cont… |
CVE-2026-101071 | Medium | 6.3 | 2026-09-28 | A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/uplo… |
CVE-2026-101070 | Medium | 5.3 | 2026-09-28 | A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers… |
CVE-2026-82326 | Medium | 4.1 | 2026-09-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allo… |
CVE-2026-59563 | Medium | 4.6 | 2026-09-28 | Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP clien… |
CVE-2026-101069 | Medium | 6.5 | 2026-09-28 | A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js o… |
CVE-2026-101068 | Medium | 6.5 | 2026-09-28 | A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js… |
CVE-2026-101055 | Medium | 5.3 | 2026-09-28 | A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET_STATUS of the component TCP Service. T… |
CVE-2026-87752 | Medium | 6.1 | 2026-09-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Information Technologies Tourism Industry and Tr… |
CVE-2026-19444 | Medium | 6.5 | 2026-09-28 | A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl ru… |
CVE-2026-101054 | Medium | 5.3 | 2026-09-28 | A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the component TCP Se… |
CVE-2026-101040 | Medium | 6.5 | 2026-09-28 | A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTT… |
CVE-2026-101036 | Medium | 5.3 | 2026-09-28 | A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createPars… |
CVE-2026-101035 | Medium | 5.3 | 2026-09-28 | A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component n… |
CVE-2026-101018 | Medium | 4.7 | 2026-09-28 | A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function group_all_edit of the file dayrui/App/Member/Controllers/Admin/… |
CVE-2026-94287 | Medium | 5.5 | 2026-09-28 | A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and mem… |
CVE-2026-94285 | Medium | 5.1 | 2026-09-28 | An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. |
CVE-2026-94284 | Medium | 5.5 | 2026-09-28 | An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attac… |
CVE-2026-94283 | Medium | 6.5 | 2026-09-28 | An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash att… |
CVE-2026-94282 | Medium | 5.6 | 2026-09-28 | An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X clien… |
CVE-2026-86507 | Medium | 6.1 | 2026-09-28 | Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in th… |
CVE-2026-82969 | Medium | 5.4 | 2026-09-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and… |
CVE-2026-82915 | Medium | 6.5 | 2026-09-28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workf… |
CVE-2026-101017 | Medium | 6.5 | 2026-09-28 | A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opend… |