2026 CVEs (page 110)
Page 110 of 664 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-87987 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments precedi… | |
CVE-2026-87986 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot inte… | |
CVE-2026-87985 | | 2026-09-11 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments… | |
CVE-2026-87984 | | 2026-09-11 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspac… | |
CVE-2026-87983 | | 2026-09-11 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute pa… | |
CVE-2026-87020 | High | 8.1 | 2026-09-11 | An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied… |
CVE-2026-85979 | | 2026-09-11 | Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitr… | |
CVE-2026-85083 | Medium | 6.8 | 2026-09-11 | The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this we… |
CVE-2026-82583 | High | 8.3 | 2026-09-11 | NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could r… |
CVE-2026-82578 | High | 7.5 | 2026-09-11 | When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restriction… |
CVE-2026-78224 | High | 8.2 | 2026-09-11 | The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-… |
CVE-2026-38058 | High | 8.1 | 2026-09-11 | The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt pass… |
CVE-2026-38056 | High | 8.8 | 2026-09-11 | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deploy… |
CVE-2026-89298 | Medium | 4.9 | 2026-09-11 | A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user w… |
CVE-2026-89212 | High | 8.6 | 2026-09-11 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The… |
CVE-2026-71644 | Critical | 9.8 | 2026-09-11 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning a… |
CVE-2026-71641 | High | 7.5 | 2026-09-11 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via… |
CVE-2026-71416 | High | 8.8 | 2026-09-11 | Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin`… |
CVE-2026-57843 | Medium | 5.5 | 2026-09-11 | NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual add… |
CVE-2026-57842 | High | 7.0 | 2026-09-11 | NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return stat… |
CVE-2026-15710 | | 2026-09-11 | An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal comm… | |
CVE-2026-11765 | Low | 3.3 | 2026-09-11 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Par… |
CVE-2026-84390 | Critical | 9.8 | 2026-09-11 | A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2… |
CVE-2026-80462 | Critical | 10.0 | 2026-09-11 | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Auto… |
CVE-2026-89259 | Critical | 9.8 | 2026-09-11 | Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec… |
CVE-2026-89258 | Medium | 6.3 | 2026-09-11 | Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups… |
CVE-2026-89257 | Medium | 5.4 | 2026-09-11 | AVideo through 29.0 contains an insecure direct object reference (IDOR) vulnerability in objects/categoryDeleteAssets.json.php. The endpoint validates only the… |
CVE-2026-89256 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names… |
CVE-2026-89255 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HT… |
CVE-2026-89254 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the CustomizeUser plugin where the field… |
CVE-2026-89253 | High | 8.7 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile fie… |
CVE-2026-89252 | Medium | 6.5 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated use… |
CVE-2026-89251 | Medium | 6.5 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_Server/log.php, allowing logged-in users to submit… |
CVE-2026-89250 | High | 7.5 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint tha… |
CVE-2026-89249 | High | 8.7 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied… |
CVE-2026-89248 | Medium | 5.3 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebR… |
CVE-2026-89247 | Medium | 6.1 | 2026-09-11 | WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/AD_Server/VMAP.php, which is reach… |
CVE-2026-89246 | Medium | 5.4 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that… |
CVE-2026-89245 | Medium | 6.5 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.php that allows attac… |
CVE-2026-89244 | Medium | 6.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php… |
CVE-2026-89243 | High | 8.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name() that fa… |
CVE-2026-89242 | High | 7.2 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability in the _json_decode function that fetc… |
CVE-2026-89241 | Medium | 6.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that cop… |
CVE-2026-89240 | Medium | 6.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword… |
CVE-2026-89239 | Medium | 6.1 | 2026-09-11 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in the showAlertMessage() function… |
CVE-2026-89148 | Medium | 5.4 | 2026-09-11 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a *.json.php… |
CVE-2026-87776 | High | 7.5 | 2026-09-11 | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still… |
CVE-2026-86793 | Critical | 9.8 | 2026-09-11 | SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be… |
CVE-2026-89147 | High | 7.5 | 2026-09-11 | Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without ti… |
CVE-2026-89146 | High | 7.5 | 2026-09-11 | libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A m… |
CVE-2026-86813 | Medium | 4.8 | 2026-09-11 | The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email head… |
CVE-2026-86809 | Medium | 5.3 | 2026-09-11 | The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to… |
CVE-2026-85116 | Medium | 6.5 | 2026-09-11 | The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, i… |
CVE-2026-82215 | Medium | 5.9 | 2026-09-11 | The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before… |
CVE-2026-82213 | Medium | 5.3 | 2026-09-11 | The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing una… |
CVE-2026-77159 | Medium | 5.5 | 2026-09-11 | A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without chec… |
CVE-2026-87859 | Medium | 5.3 | 2026-09-11 | morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField() function does not escape the double quote character, w… |
CVE-2026-87123 | Medium | 5.9 | 2026-09-11 | hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with… |
CVE-2026-47839 | | 2026-09-11 | A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through… | |
CVE-2026-17037 | High | 7.2 | 2026-09-11 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘comment’ parameter i… |
CVE-2026-87727 | Medium | 6.5 | 2026-09-11 | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the a… |
CVE-2026-80469 | High | 8.3 | 2026-09-11 | An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, a… |
CVE-2026-19486 | | 2026-09-11 | A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Pl… | |
CVE-2026-89179 | Medium | 4.3 | 2026-09-11 | WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the… |
CVE-2026-89178 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same netwo… |
CVE-2026-89177 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unau… |
CVE-2026-89176 | High | 8.8 | 2026-09-11 | WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the sa… |
CVE-2026-89175 | Medium | 5.3 | 2026-09-11 | Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can… |
CVE-2026-89174 | High | 7.5 | 2026-09-11 | Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers… |
CVE-2026-89173 | Medium | 5.3 | 2026-09-11 | Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enu… |
CVE-2026-6642 | Medium | 6.4 | 2026-09-11 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up t… |
CVE-2026-6641 | Medium | 6.4 | 2026-09-11 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to and including 3… |
CVE-2026-6640 | Medium | 6.4 | 2026-09-11 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_link_attributes' parameter in all versions up to, an… |
CVE-2026-87908 | High | 7.5 | 2026-09-11 | multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound… |
CVE-2026-86815 | Medium | 5.5 | 2026-09-11 | The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-executi… |
CVE-2026-86812 | Medium | 6.5 | 2026-09-11 | The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks re… |
CVE-2026-86782 | Medium | 5.5 | 2026-09-11 | The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and ab… |
CVE-2026-86781 | Medium | 5.3 | 2026-09-11 | The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file down… |
CVE-2026-86780 | Medium | 6.8 | 2026-09-11 | The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow u… |
CVE-2026-86779 | Low | 2.7 | 2026-09-11 | The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-obj… |
CVE-2026-85678 | Medium | 6.8 | 2026-09-11 | The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end… |
CVE-2026-85677 | High | 8.8 | 2026-09-11 | The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, app… |
CVE-2026-83546 | Medium | 6.8 | 2026-09-11 | The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contribu… |
CVE-2026-83545 | Medium | 6.8 | 2026-09-11 | The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with co… |
CVE-2026-82305 | Medium | 5.3 | 2026-09-11 | The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated use… |
CVE-2026-74925 | High | 7.2 | 2026-09-11 | The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to g… |
CVE-2026-73785 | High | 7.5 | 2026-09-11 | A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS). |
CVE-2026-73784 | High | 8.8 | 2026-09-11 | A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user. |
CVE-2026-14566 | Medium | 4.3 | 2026-09-11 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order ite… |
CVE-2026-14565 | Medium | 5.4 | 2026-09-11 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to… |
CVE-2026-14563 | Critical | 9.8 | 2026-09-11 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email addres… |
CVE-2026-14562 | Medium | 5.3 | 2026-09-11 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadat… |
CVE-2026-14560 | Critical | 10.0 | 2026-09-11 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preservi… |
CVE-2026-14559 | Critical | 9.8 | 2026-09-11 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers… |
CVE-2026-13326 | | 2026-09-11 | An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure… | |
CVE-2026-89169 | | 2026-09-11 | live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. | |
CVE-2026-89162 | Low | 2.9 | 2026-09-11 | In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is… |
CVE-2026-89060 | High | 7.7 | 2026-09-11 | A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn config… |
CVE-2026-8778 | Critical | 9.8 | 2026-09-11 | The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to mi… |
CVE-2026-89161 | High | 7.4 | 2026-09-11 | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. |