2026 CVEs (page 102)
Page 102 of 663 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90503 | Low | 2.3 | 2026-09-13 | A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Exec… |
CVE-2026-90502 | Low | 3.5 | 2026-09-13 | A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generat… |
CVE-2026-90501 | Medium | 6.3 | 2026-09-13 | A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such… |
CVE-2026-90500 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component… |
CVE-2026-90499 | Medium | 5.4 | 2026-09-13 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Pass… |
CVE-2026-90498 | High | 7.3 | 2026-09-13 | A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to u… |
CVE-2026-90497 | Low | 3.5 | 2026-09-13 | A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/view… |
CVE-2026-90496 | Medium | 4.7 | 2026-09-13 | A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function update_system_module_order/update_dimension_order of the file ap… |
CVE-2026-89080 | High | 7.5 | 2026-09-13 | The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor en… |
CVE-2026-88995 | Medium | 5.3 | 2026-09-13 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allo… |
CVE-2026-88912 | Medium | 4.2 | 2026-09-13 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and… |
CVE-2026-88764 | Medium | 5.4 | 2026-09-13 | The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level con… |
CVE-2026-86407 | Low | 3.7 | 2026-09-13 | The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account… |
CVE-2026-86406 | High | 7.5 | 2026-09-13 | The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate… |
CVE-2026-80072 | Medium | 4.7 | 2026-09-13 | The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unaut… |
CVE-2026-80071 | High | 7.2 | 2026-09-13 | The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attac… |
CVE-2026-77773 | Medium | 5.3 | 2026-09-13 | The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its pu… |
CVE-2026-90679 | Medium | 4.3 | 2026-09-13 | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeo… |
CVE-2026-90678 | High | 7.5 | 2026-09-13 | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with Q… |
CVE-2026-90495 | High | 7.3 | 2026-09-13 | A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models… |
CVE-2026-90494 | Medium | 5.3 | 2026-09-13 | A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation caus… |
CVE-2026-90493 | High | 8.8 | 2026-09-13 | A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp… |
CVE-2026-90668 | High | 7.5 | 2026-09-13 | The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial… |
CVE-2026-90492 | Medium | 6.3 | 2026-09-13 | A security vulnerability has been detected in webgjc web_robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller_listen/controller_recover of… |
CVE-2026-90491 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in sanjevirau gsubs up to 1.0.3. Impacted is the function showQuerySuccessPage of the file renderer/index.js of the component El… |
CVE-2026-90490 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulat… |
CVE-2026-90651 | High | 8.1 | 2026-09-13 | Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the api_ssl_verif… |
CVE-2026-90648 | | 2026-09-13 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does… | |
CVE-2026-90489 | Low | 3.5 | 2026-09-13 | A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the ar… |
CVE-2026-90488 | Medium | 6.3 | 2026-09-13 | A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/co… |
CVE-2026-90647 | High | 7.4 | 2026-09-12 | ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 T… |
CVE-2026-90487 | Medium | 4.3 | 2026-09-12 | A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/… |
CVE-2026-90486 | Medium | 6.3 | 2026-09-12 | A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown function… |
CVE-2026-79300 | Low | 3.5 | 2026-09-12 | SEP sesam before 5.2.0.24 mishandles User Authorization with MFA. If AD authentication is configured and MFA is enforced, an attacker can create a second OTP a… |
CVE-2026-90485 | Medium | 5.5 | 2026-09-12 | A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL… |
CVE-2026-90616 | High | 7.4 | 2026-09-12 | In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code e… |
CVE-2026-90560 | High | 8.2 | 2026-09-12 | zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments… |
CVE-2026-90559 | High | 7.5 | 2026-09-12 | snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is… |
CVE-2026-90558 | Critical | 9.8 | 2026-09-12 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. A… |
CVE-2026-90557 | Medium | 6.1 | 2026-09-12 | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit acti… |
CVE-2026-90556 | High | 7.8 | 2026-09-12 | Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fix… |
CVE-2026-90555 | Medium | 6.5 | 2026-09-12 | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks… |
CVE-2026-90554 | Medium | 6.2 | 2026-09-12 | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In na… |
CVE-2026-90553 | High | 7.8 | 2026-09-12 | vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loa… |
CVE-2026-90552 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/cale… |
CVE-2026-90551 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpoint, allowing unaut… |
CVE-2026-90550 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the PlayerSkins mediaSession.json.php endpoint before… |
CVE-2026-90549 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize access to the videosAndroid.json.php endpoint, allowing unauthe… |
CVE-2026-90548 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the ImageGallery list.json.php endpoint, allowing una… |
CVE-2026-90547 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the Bookmark plugin getBookmarks.json.php endpoint, a… |
CVE-2026-90546 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-i… |
CVE-2026-90545 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing… |
CVE-2026-90544 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint befor… |
CVE-2026-90543 | Medium | 5.3 | 2026-09-12 | WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, contains a missing authentication vulnerability in pl… |
CVE-2026-90542 | Medium | 5.4 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can access live schedules before creating reminders… |
CVE-2026-90541 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require authentication in the plugin/TopMenu/menus.json.php endpoint, allowing una… |
CVE-2026-90540 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding v… |
CVE-2026-90539 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php en… |
CVE-2026-90538 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows un… |
CVE-2026-90537 | High | 8.2 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/Scheduler/sendEmail.json.php that… |
CVE-2026-90536 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthenticated attackers t… |
CVE-2026-90535 | High | 7.5 | 2026-09-12 | Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplie… |
CVE-2026-90534 | Medium | 6.5 | 2026-09-12 | Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounte… |
CVE-2026-90533 | Medium | 6.5 | 2026-09-12 | Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrie… |
CVE-2026-15451 | High | 8.8 | 2026-09-12 | The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39. This is due to a mass a… |
CVE-2026-10148 | Medium | 6.4 | 2026-09-12 | The Booking for Appointments and Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Elementor widgets in versions u… |
CVE-2026-90474 | Medium | 6.8 | 2026-09-12 | MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by… |
CVE-2026-90473 | Medium | 5.3 | 2026-09-12 | msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element count… |
CVE-2026-90472 | Medium | 5.3 | 2026-09-12 | msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nest… |
CVE-2026-89172 | | 2026-09-12 | Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A… | |
CVE-2026-85200 | High | 7.5 | 2026-09-12 | The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_info_wind… |
CVE-2026-85198 | Medium | 6.5 | 2026-09-12 | The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versio… |
CVE-2026-78175 | High | 8.8 | 2026-09-12 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via… |
CVE-2026-78159 | Critical | 9.8 | 2026-09-12 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse_array function… |
CVE-2026-78006 | Critical | 9.8 | 2026-09-12 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_safe_widget_instanc… |
CVE-2026-77161 | Medium | 6.5 | 2026-09-12 | The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and includi… |
CVE-2026-17585 | Medium | 5.3 | 2026-09-12 | The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up… |
CVE-2026-16482 | High | 7.5 | 2026-09-12 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versi… |
CVE-2026-11355 | Medium | 5.3 | 2026-09-12 | The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJA… |
CVE-2026-87919 | Medium | 4.9 | 2026-09-12 | The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the… |
CVE-2026-87918 | Medium | 5.3 | 2026-09-12 | The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI prov… |
CVE-2026-87916 | Medium | 5.3 | 2026-09-12 | The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenti… |
CVE-2026-87894 | Medium | 5.3 | 2026-09-12 | The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation detai… |
CVE-2026-87892 | Medium | 5.3 | 2026-09-12 | The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing w… |
CVE-2026-87891 | Medium | 6.5 | 2026-09-12 | The Rox Appointment Booking WordPress plugin before 1.2.0 does not perform any capability or authorization check when saving its holiday schedule, allowing un… |
CVE-2026-87888 | High | 8.0 | 2026-09-12 | The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the sub… |
CVE-2026-87842 | High | 7.5 | 2026-09-12 | The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allow… |
CVE-2026-87797 | Medium | 4.3 | 2026-09-12 | The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through… |
CVE-2026-87759 | High | 8.8 | 2026-09-12 | The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carry… |
CVE-2026-86790 | Medium | 6.8 | 2026-09-12 | The WP Highlight Box WordPress plugin through 1.0 does not escape some shortcode attributes before outputting them in a page where the shortcode is embedded, w… |
CVE-2026-85681 | Critical | 9.8 | 2026-09-12 | The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users… |
CVE-2026-84171 | Critical | 9.8 | 2026-09-12 | The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible… |
CVE-2026-84099 | High | 8.1 | 2026-09-12 | The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input withou… |
CVE-2026-84047 | High | 8.6 | 2026-09-12 | The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticate… |
CVE-2026-84025 | Low | 2.2 | 2026-09-12 | The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing… |
CVE-2026-84024 | Medium | 4.3 | 2026-09-12 | The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configu… |
CVE-2026-84023 | Medium | 6.5 | 2026-09-12 | The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify… |
CVE-2026-83532 | Medium | 6.8 | 2026-09-12 | The Custom Menu Wizard Widget WordPress plugin through 3.3.1 does not sanitize and escape several shortcode attributes before rendering them into HTML, allowin… |
CVE-2026-82851 | Low | 2.7 | 2026-09-12 | The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing user… |
CVE-2026-82847 | Medium | 6.8 | 2026-09-12 | The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing… |