Medium-severity CVEs (page 56)
Page 56 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-47207 | Medium | 6.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if… |
CVE-2026-47204 | Medium | 6.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the envoy.filters… |
CVE-2026-56823 | Medium | 5.4 | 2026-06-26 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the `POST /api/integratio… |
CVE-2026-55686 | Medium | 5.3 | 2026-06-26 | Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink ca… |
CVE-2026-48529 | Medium | 6.0 | 2026-06-26 | GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is impl… |
CVE-2026-45407 | Medium | 5.0 | 2026-06-26 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of… |
CVE-2026-28385 | Medium | 5.0 | 2026-06-26 | In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users wit… |
CVE-2026-13434 | Medium | 4.9 | 2026-06-26 | A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied n… |
CVE-2026-9639 | Medium | 6.5 | 2026-06-26 | Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes… |
CVE-2026-44018 | Medium | 5.5 | 2026-06-26 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the ME… |
CVE-2026-9699 | Medium | 6.8 | 2026-06-26 | Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with acces… |
CVE-2026-57665 | Medium | 5.3 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. |
CVE-2026-57664 | Medium | 4.3 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. |
CVE-2026-57661 | Medium | 5.4 | 2026-06-26 | Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. |
CVE-2026-57660 | Medium | 5.3 | 2026-06-26 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. |
CVE-2026-57657 | Medium | 4.3 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. |
CVE-2026-57656 | Medium | 5.9 | 2026-06-26 | Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions. |
CVE-2026-57654 | Medium | 6.5 | 2026-06-26 | Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. |
CVE-2026-57652 | Medium | 5.3 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions. |
CVE-2026-57651 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions. |
CVE-2026-57650 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions. |
CVE-2026-57649 | Medium | 4.3 | 2026-06-26 | Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions. |
CVE-2026-57648 | Medium | 4.3 | 2026-06-26 | Contributor Broken Access Control in Nelio Content <= 4.3.4 versions. |
CVE-2026-57646 | Medium | 5.4 | 2026-06-26 | Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions. |
CVE-2026-57641 | Medium | 6.5 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. |
CVE-2026-57640 | Medium | 4.3 | 2026-06-26 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions. |
CVE-2026-57638 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions. |
CVE-2026-57637 | Medium | 4.3 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. |
CVE-2026-57635 | Medium | 6.5 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions. |
CVE-2026-57634 | Medium | 4.3 | 2026-06-26 | Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. |
CVE-2026-57633 | Medium | 5.3 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. |
CVE-2026-57632 | Medium | 5.4 | 2026-06-26 | Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions. |
CVE-2026-57630 | Medium | 5.3 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. |
CVE-2026-57629 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions. |
CVE-2026-57627 | Medium | 4.9 | 2026-06-26 | Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions. |
CVE-2026-57622 | Medium | 4.3 | 2026-06-26 | Subscriber Broken Access Control in WPCafe <= 3.0.14 versions. |
CVE-2026-57618 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions. |
CVE-2026-57617 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions. |
CVE-2026-57431 | Medium | 6.5 | 2026-06-26 | Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions. |
CVE-2026-57430 | Medium | 4.3 | 2026-06-26 | Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions. |
CVE-2026-57324 | Medium | 6.5 | 2026-06-26 | Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions. |
CVE-2026-57323 | Medium | 5.8 | 2026-06-26 | Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. |
CVE-2026-57318 | Medium | 6.5 | 2026-06-26 | Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. |
CVE-2026-57316 | Medium | 6.5 | 2026-06-26 | Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. |
CVE-2026-57313 | Medium | 6.5 | 2026-06-26 | Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions. |
CVE-2026-56066 | Medium | 5.8 | 2026-06-26 | Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions. |
CVE-2026-56048 | Medium | 6.5 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions. |
CVE-2026-56046 | Medium | 6.5 | 2026-06-26 | Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. |
CVE-2026-56026 | Medium | 6.4 | 2026-06-26 | Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions. |
CVE-2026-52701 | Medium | 6.5 | 2026-06-26 | Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions. |
CVE-2026-4339 | Medium | 6.5 | 2026-06-26 | Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to validate attachment URLs against internal or private IP ranges in the Matte… |
CVE-2026-45256 | Medium | 5.5 | 2026-06-26 | When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation was permitted but did not check the re… |
CVE-2026-30040 | Medium | 6.5 | 2026-06-26 | A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current pro… |
CVE-2026-24547 | Medium | 5.3 | 2026-06-26 | Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. |
CVE-2025-68075 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions. |
CVE-2025-68074 | Medium | 6.5 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions. |
CVE-2025-66123 | Medium | 5.3 | 2026-06-26 | Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions. |
CVE-2025-64637 | Medium | 5.3 | 2026-06-26 | Unauthenticated Content Injection in Auros Core <= 5.3.1 versions. |
CVE-2025-64636 | Medium | 5.3 | 2026-06-26 | Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions. |
CVE-2025-63079 | Medium | 4.3 | 2026-06-26 | Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions. |
CVE-2025-63078 | Medium | 4.3 | 2026-06-26 | Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions. |
CVE-2025-63041 | Medium | 5.4 | 2026-06-26 | Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions. |
CVE-2026-57925 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags |
CVE-2026-57924 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details |
CVE-2026-57923 | Medium | 5.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings |
CVE-2026-57921 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint |
CVE-2026-53914 | Medium | 6.7 | 2026-06-26 | In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata |
CVE-2026-13426 | Medium | 5.4 | 2026-06-26 | The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths w… |
CVE-2026-57914 | Medium | 6.5 | 2026-06-26 | By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of s… |
CVE-2026-57620 | Medium | 6.5 | 2026-06-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS… |
CVE-2026-6658 | Medium | 5.4 | 2026-06-26 | A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `d… |
CVE-2026-1869 | Medium | 6.5 | 2026-06-26 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin… |
CVE-2026-8380 | Medium | 6.5 | 2026-06-26 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing au… |
CVE-2025-10268 | Medium | 5.3 | 2026-06-26 | The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the atta… |
CVE-2026-8661 | Medium | 4.8 | 2026-06-26 | Server-Side Request Forgery in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin on Linux in versions prior to 4.0.2 allows remote attackers… |
CVE-2026-50745 | Medium | 6.1 | 2026-06-26 | A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best pra… |
CVE-2026-50744 | Medium | 4.3 | 2026-06-26 | A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in th… |
CVE-2026-50742 | Medium | 5.4 | 2026-06-26 | A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused… |
CVE-2026-50740 | Medium | 5.4 | 2026-06-26 | A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could expl… |
CVE-2026-50739 | Medium | 4.3 | 2026-06-26 | A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers throug… |
CVE-2026-48934 | Medium | 4.3 | 2026-06-26 | A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: **… |
CVE-2026-48928 | Medium | 5.4 | 2026-06-26 | A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release… |
CVE-2026-48618 | Medium | 6.5 | 2026-06-26 | A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver a… |
CVE-2026-13226 | Medium | 6.5 | 2026-06-26 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'after' parameter in all versio… |
CVE-2026-9219 | Medium | 6.5 | 2026-06-26 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derived from IMEI. The enrollment system lack… |
CVE-2026-13318 | Medium | 6.4 | 2026-06-26 | A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInst… |
CVE-2026-13218 | Medium | 4.2 | 2026-06-26 | A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and… |
CVE-2026-13083 | Medium | 6.9 | 2026-06-26 | A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker wit… |
CVE-2026-12993 | Medium | 6.5 | 2026-06-26 | A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or… |
CVE-2026-40941 | Medium | 6.5 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which al… |
CVE-2026-40084 | Medium | 6.5 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file… |
CVE-2026-40082 | Medium | 5.4 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Sess… |
CVE-2026-40080 | Medium | 6.1 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather… |
CVE-2026-6330 | Medium | 6.5 | 2026-06-25 | The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA… |
CVE-2026-6329 | Medium | 6.5 | 2026-06-25 | PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted… |
CVE-2026-6092 | Medium | 5.3 | 2026-06-25 | When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC. |
CVE-2026-55962 | Medium | 6.5 | 2026-06-25 | TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the client having sent a Certificate and Cert… |
CVE-2026-44622 | Medium | 6.5 | 2026-06-25 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
CVE-2026-13282 | Medium | 6.8 | 2026-06-25 | Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical acc… |
CVE-2026-10098 | Medium | 5.3 | 2026-06-25 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer SingleResponse whose serial is a prefix of the target serial t… |