Medium-severity CVEs (page 4)
Page 4 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100595 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to acce… |
CVE-2026-100594 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and… |
CVE-2026-100593 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group c… |
CVE-2026-100592 | Medium | 6.3 | 2026-09-26 | OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. A… |
CVE-2026-100591 | Medium | 6.3 | 2026-09-26 | OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non… |
CVE-2026-100590 | Medium | 4.3 | 2026-09-26 | OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gat… |
CVE-2026-100584 | Medium | 6.7 | 2026-09-26 | OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist m… |
CVE-2026-100583 | Medium | 4.3 | 2026-09-26 | OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retri… |
CVE-2026-100582 | Medium | 6.5 | 2026-09-26 | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channe… |
CVE-2026-100581 | Medium | 5.5 | 2026-09-26 | OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access… |
CVE-2026-100577 | Medium | 6.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious o… |
CVE-2026-100576 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protectio… |
CVE-2026-100574 | Medium | 5.9 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. For fetches that use the… |
CVE-2026-100572 | Medium | 5.3 | 2026-09-26 | OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw p… |
CVE-2026-100571 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and… |
CVE-2026-100569 | Medium | 5.5 | 2026-09-26 | OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending i… |
CVE-2026-100566 | Medium | 6.5 | 2026-09-26 | OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllow… |
CVE-2026-100564 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can i… |
CVE-2026-100563 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control U… |
CVE-2026-100562 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify se… |
CVE-2026-100556 | Medium | 6.3 | 2026-09-26 | OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender… |
CVE-2026-100554 | Medium | 4.2 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. N… |
CVE-2026-100553 | Medium | 4.3 | 2026-09-26 | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can… |
CVE-2026-100550 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a… |
CVE-2026-100549 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded… |
CVE-2026-100548 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding… |
CVE-2026-100547 | Medium | 5.5 | 2026-09-26 | OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellin… |
CVE-2026-100546 | Medium | 6.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent contro… |
CVE-2026-100545 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, fi… |
CVE-2026-100540 | Medium | 6.8 | 2026-09-26 | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can… |
CVE-2026-100538 | Medium | 6.5 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attac… |
CVE-2026-100536 | Medium | 6.5 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behin… |
CVE-2026-100533 | Medium | 5.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize va… |
CVE-2026-100531 | Medium | 6.5 | 2026-09-26 | The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to… |
CVE-2026-100529 | Medium | 6.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse… |
CVE-2026-100528 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party p… |
CVE-2026-100527 | Medium | 5.3 | 2026-09-26 | OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pendi… |
CVE-2026-100526 | Medium | 5.3 | 2026-09-26 | OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker uploa… |
CVE-2026-100525 | Medium | 4.3 | 2026-09-26 | The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authentic… |
CVE-2026-100524 | Medium | 5.4 | 2026-09-26 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions wit… |
CVE-2026-100523 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain validation. Unauthentica… |
CVE-2026-100522 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped before output in t… |
CVE-2026-100521 | Medium | 6.1 | 2026-09-26 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript esca… |
CVE-2026-100505 | Medium | 4.4 | 2026-09-26 | Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UT… |
CVE-2026-92842 | Medium | 5.9 | 2026-09-25 | The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is… |
CVE-2026-91768 | Medium | 6.5 | 2026-09-25 | The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefi… |
CVE-2026-63432 | Medium | 6.5 | 2026-09-25 | Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and employee/not_in_out_dash… |
CVE-2026-63431 | Medium | 6.5 | 2026-09-25 | Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in allowances_deductions_ta… |
CVE-2026-100502 | Medium | 5.0 | 2026-09-25 | Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain to… |
CVE-2026-100501 | Medium | 6.5 | 2026-09-25 | Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauth… |
CVE-2026-100418 | Medium | 5.3 | 2026-09-25 | Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object… |
CVE-2026-91769 | Medium | 4.3 | 2026-09-25 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC… |
CVE-2026-91767 | Medium | 6.5 | 2026-09-25 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard… |
CVE-2026-91766 | Medium | 5.9 | 2026-09-25 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the… |
CVE-2026-6103 | Medium | 4.3 | 2026-09-25 | phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to… |
CVE-2026-100388 | Medium | 5.4 | 2026-09-25 | RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux… |
CVE-2025-14181 | Medium | 6.5 | 2026-09-25 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed… |
CVE-2026-93682 | Medium | 5.8 | 2026-09-25 | When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end o… |
CVE-2026-100373 | Medium | 4.1 | 2026-09-25 | OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to properly resolve DNS hos… |
CVE-2026-97895 | Medium | 6.3 | 2026-09-25 | A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/… |
CVE-2026-100306 | Medium | 5.3 | 2026-09-25 | TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote unauthenticated atta… |
CVE-2026-100305 | Medium | 4.3 | 2026-09-25 | TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated at… |
CVE-2026-100304 | Medium | 5.3 | 2026-09-25 | TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist, allowing auth… |
CVE-2026-100303 | Medium | 5.4 | 2026-09-25 | TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated non-admin… |
CVE-2026-100192 | Medium | 6.5 | 2026-09-25 | X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Un… |
CVE-2026-97886 | Medium | 6.3 | 2026-09-25 | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an… |
CVE-2026-97884 | Medium | 6.3 | 2026-09-25 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the… |
CVE-2026-93366 | Medium | 5.4 | 2026-09-25 | Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media fil… |
CVE-2026-97879 | Medium | 5.3 | 2026-09-25 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the… |
CVE-2026-93365 | Medium | 6.5 | 2026-09-25 | Bludit CMS through 3.22.0 contains a missing authorization vulnerability that allows authenticated users holding the Author or Editor role to read the full con… |
CVE-2026-93364 | Medium | 4.3 | 2026-09-25 | Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated users with the Author role to modify privileged page fields reserv… |
CVE-2026-93363 | Medium | 4.3 | 2026-09-25 | The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass col… |
CVE-2026-18320 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This conf… |
CVE-2026-18312 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates… |
CVE-2026-18311 | Medium | 6.1 | 2026-09-25 | Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Att… |
CVE-2026-100237 | Medium | 6.1 | 2026-09-25 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension all… |
CVE-2026-97869 | Medium | 4.1 | 2026-09-25 | A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson o… |
CVE-2026-97469 | Medium | 4.3 | 2026-09-25 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_outpu… |
CVE-2026-85293 | Medium | 4.8 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2-beta-1, InvoicePlane stores client_email v… |
CVE-2026-85292 | Medium | 4.8 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's User_Controller compares the… |
CVE-2026-85291 | Medium | 6.5 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::change_password() met… |
CVE-2026-85290 | Medium | 5.3 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur() method writes… |
CVE-2026-85289 | Medium | 6.5 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensure_valid_post_reques… |
CVE-2026-85274 | Medium | 6.5 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Recurring::stop() as a… |
CVE-2026-54790 | Medium | 6.0 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores an administrator-contro… |
CVE-2026-39372 | Medium | 4.9 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded ima… |
CVE-2026-100230 | Medium | 5.3 | 2026-09-25 | Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction an… |
CVE-2026-97866 | Medium | 5.6 | 2026-09-25 | A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Aut… |
CVE-2026-93030 | Medium | 6.5 | 2026-09-25 | FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw. |
CVE-2026-88389 | Medium | 6.2 | 2026-09-25 | Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Crafted raw/binary string input can cause… |
CVE-2026-97864 | Medium | 5.3 | 2026-09-25 | A vulnerability has been found in GibbonEdu Gibbon up to 30.0.01. The affected element is the function makeBlock of the file modules/Planner/units_add_blockAja… |
CVE-2026-97222 | Medium | 5.5 | 2026-09-25 | A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML pa… |
CVE-2026-88420 | Medium | 6.1 | 2026-09-25 | A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers w… |
CVE-2026-78902 | Medium | 6.1 | 2026-09-25 | Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package |
CVE-2026-92573 | Medium | 6.5 | 2026-09-25 | Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message conversion and HTTP ma… |
CVE-2026-88848 | Medium | 4.2 | 2026-09-25 | The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor th… |
CVE-2026-86837 | Medium | 5.3 | 2026-09-25 | The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers… |
CVE-2026-80514 | Medium | 5.3 | 2026-09-25 | The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-vis… |
CVE-2026-96448 | Medium | 6.6 | 2026-09-25 | A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access management solution. The issue occurs when the sys… |
CVE-2026-93747 | Medium | 6.4 | 2026-09-25 | The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'telegram' profile field in versions up to, and including, 3.1.6. Th… |