2026 CVEs (page 108)
Page 108 of 663 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80927 | | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the auxiliar… | |
CVE-2026-80926 | Critical | 9.8 | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2_oplock_break_noti() reads opi… |
CVE-2026-79035 | Medium | 6.1 | 2026-09-11 | A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary… |
CVE-2026-78547 | | 2026-09-11 | Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Rele… | |
CVE-2026-78546 | | 2026-09-11 | Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), befor… | |
CVE-2026-77490 | Medium | 6.1 | 2026-09-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perf… |
CVE-2026-68526 | Medium | 4.3 | 2026-09-11 | Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller (concrete/controllers/dialog/event/duplicate.ph… |
CVE-2026-54135 | High | 7.5 | 2026-09-11 | AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in the custom HTTP serve… |
CVE-2026-53952 | Critical | 9.8 | 2026-09-11 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below… |
CVE-2026-52630 | Critical | 9.8 | 2026-09-11 | SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in Us… |
CVE-2026-49463 | Medium | 6.5 | 2026-09-11 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizatio… |
CVE-2026-49462 | Medium | 5.3 | 2026-09-11 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizatio… |
CVE-2026-89329 | Medium | 6.2 | 2026-09-11 | A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands… |
CVE-2026-81910 | Medium | 6.5 | 2026-09-11 | Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style Values. Values submitted through… |
CVE-2026-79396 | Critical | 9.8 | 2026-09-11 | Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted… |
CVE-2026-79395 | Critical | 9.8 | 2026-09-11 | An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 f… |
CVE-2026-79394 | High | 7.5 | 2026-09-11 | An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.183… |
CVE-2026-79393 | High | 7.5 | 2026-09-11 | A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT… |
CVE-2026-79362 | High | 8.8 | 2026-09-11 | Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged u… |
CVE-2026-71646 | High | 7.5 | 2026-09-11 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the… |
CVE-2026-62140 | Medium | 5.3 | 2026-09-11 | Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions. |
CVE-2026-62139 | Medium | 4.3 | 2026-09-11 | Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions. |
CVE-2026-62138 | Medium | 6.5 | 2026-09-11 | Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions. |
CVE-2026-62137 | Medium | 5.3 | 2026-09-11 | Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions. |
CVE-2026-62136 | Medium | 5.3 | 2026-09-11 | Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions. |
CVE-2026-62135 | Medium | 5.3 | 2026-09-11 | Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions. |
CVE-2026-62134 | Medium | 4.3 | 2026-09-11 | Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions. |
CVE-2026-62133 | Medium | 5.4 | 2026-09-11 | Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions. |
CVE-2026-62132 | Medium | 5.3 | 2026-09-11 | Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions. |
CVE-2026-62114 | Medium | 5.3 | 2026-09-11 | Unauthenticated Broken Access Control in Passster <= 4.3.13 versions. |
CVE-2026-62113 | Medium | 4.3 | 2026-09-11 | Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions. |
CVE-2026-62112 | High | 7.6 | 2026-09-11 | Editor SQL Injection in Amelia <= 2.4.9 versions. |
CVE-2026-62111 | Medium | 6.5 | 2026-09-11 | Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions. |
CVE-2026-62110 | Medium | 6.5 | 2026-09-11 | Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions. |
CVE-2026-62109 | High | 7.6 | 2026-09-11 | Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions. |
CVE-2026-62107 | High | 8.8 | 2026-09-11 | Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
CVE-2026-62106 | High | 8.8 | 2026-09-11 | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. |
CVE-2026-62105 | Critical | 9.8 | 2026-09-11 | Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions. |
CVE-2026-62103 | Critical | 9.8 | 2026-09-11 | Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. |
CVE-2026-62102 | High | 8.8 | 2026-09-11 | Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. |
CVE-2026-62089 | High | 7.1 | 2026-09-11 | Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a… |
CVE-2026-62088 | Medium | 5.3 | 2026-09-11 | Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress… |
CVE-2026-54072 | Critical | 9.3 | 2026-09-11 | Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/authorize` endpoint accepts any `redirect_ur… |
CVE-2026-27378 | Medium | 5.3 | 2026-09-11 | Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 versions. |
CVE-2026-9160 | Medium | 4.3 | 2026-09-11 | Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This is… |
CVE-2026-89099 | High | 7.5 | 2026-09-11 | A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronizati… |
CVE-2026-89090 | Medium | 5.9 | 2026-09-11 | An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to te… |
CVE-2026-87910 | | 2026-09-11 | When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function i… | |
CVE-2026-82617 | Critical | 9.8 | 2026-09-11 | The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and DEFAULT_REGEX_NAME_FINDER… |
CVE-2026-82535 | Medium | 6.1 | 2026-09-11 | Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payl… |
CVE-2026-81909 | | 2026-09-11 | Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route (Process::alias() in concrete/controllers/backend/block/process.ph… | |
CVE-2026-81908 | | 2026-09-11 | Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups() method in concrete/src/Api/Con… | |
CVE-2026-7298 | Medium | 6.1 | 2026-09-11 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerc… |
CVE-2026-78807 | High | 7.1 | 2026-09-11 | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing… |
CVE-2026-68528 | | 2026-09-11 | Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting. An atta… | |
CVE-2026-67211 | High | 7.5 | 2026-09-11 | OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellche… |
CVE-2026-18495 | Medium | 6.1 | 2026-09-11 | A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted B… |
CVE-2026-18122 | | 2026-09-11 | Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Missing Authorization; the Concrete CMS REST API's Express en… | |
CVE-2026-72710 | Critical | 9.8 | 2026-09-11 | SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet action that allows unauthenticated attackers to write arbitrary rows to any SQL… |
CVE-2026-72709 | Critical | 9.8 | 2026-09-11 | SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to in… |
CVE-2026-72708 | High | 7.5 | 2026-09-11 | SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbi… |
CVE-2026-54047 | | 2026-09-11 | Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an improper authentication… | |
CVE-2026-18061 | Medium | 5.9 | 2026-09-11 | Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with… |
CVE-2026-8304 | Medium | 5.5 | 2026-09-11 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Con… |
CVE-2026-89265 | Medium | 4.3 | 2026-09-11 | MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify ann… |
CVE-2026-89264 | Medium | 4.3 | 2026-09-11 | MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attribu… |
CVE-2026-89263 | Medium | 5.3 | 2026-09-11 | MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email no… |
CVE-2026-89262 | High | 7.5 | 2026-09-11 | MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields… |
CVE-2026-89261 | Medium | 6.5 | 2026-09-11 | MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search service without authentication, allowing remote attackers to delete, r… |
CVE-2026-89260 | High | 7.5 | 2026-09-11 | MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.inde… |
CVE-2026-89066 | High | 7.8 | 2026-09-11 | Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attack… |
CVE-2026-89065 | High | 7.1 | 2026-09-11 | Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delet… |
CVE-2026-89013 | High | 7.5 | 2026-09-11 | Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document… |
CVE-2026-89012 | Medium | 6.5 | 2026-09-11 | Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers… |
CVE-2026-81861 | | 2026-09-11 | CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU function… | |
CVE-2026-7863 | High | 8.4 | 2026-09-11 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Insti… |
CVE-2026-70341 | High | 8.5 | 2026-09-11 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2026-68497 | High | 7.5 | 2026-09-11 | jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to Da… |
CVE-2026-3869 | | 2026-09-11 | CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the… | |
CVE-2026-15439 | Medium | 6.5 | 2026-09-11 | The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of the wpForo integration AJAX selector (ac… |
CVE-2026-8303 | High | 7.8 | 2026-09-11 | Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issu… |
CVE-2026-8301 | High | 7.8 | 2026-09-11 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Insti… |
CVE-2026-89010 | Critical | 9.8 | 2026-09-11 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote at… |
CVE-2026-89009 | Critical | 9.1 | 2026-09-11 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote at… |
CVE-2026-87988 | | 2026-09-11 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allow… | |
CVE-2026-87987 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments precedi… | |
CVE-2026-87986 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inte… | |
CVE-2026-87985 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments… | |
CVE-2026-87984 | | 2026-09-11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspac… | |
CVE-2026-87983 | | 2026-09-11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute pa… | |
CVE-2026-87020 | High | 8.1 | 2026-09-11 | An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied… |
CVE-2026-85979 | | 2026-09-11 | Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitr… | |
CVE-2026-85083 | Medium | 6.8 | 2026-09-11 | The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this we… |
CVE-2026-82583 | High | 8.3 | 2026-09-11 | NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could r… |
CVE-2026-82578 | High | 7.5 | 2026-09-11 | When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restriction… |
CVE-2026-78224 | High | 8.2 | 2026-09-11 | The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-… |
CVE-2026-38058 | High | 8.1 | 2026-09-11 | The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt pass… |
CVE-2026-38056 | High | 8.8 | 2026-09-11 | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deploy… |
CVE-2026-89298 | Medium | 4.9 | 2026-09-11 | A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user w… |
CVE-2026-89212 | High | 8.6 | 2026-09-11 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The… |