2026 CVEs (page 113)
Page 113 of 664 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-52098 | Critical | 9.8 | 2026-09-10 | An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint |
CVE-2026-52097 | Medium | 6.8 | 2026-09-10 | An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), OpenFilex.open, loca… |
CVE-2026-88959 | High | 8.8 | 2026-09-10 | Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to creat… |
CVE-2026-88940 | Medium | 5.3 | 2026-09-10 | knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories… |
CVE-2026-88939 | High | 8.3 | 2026-09-10 | knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. At… |
CVE-2026-88938 | Medium | 6.5 | 2026-09-10 | knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywher… |
CVE-2026-88937 | High | 8.8 | 2026-09-10 | knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitr… |
CVE-2026-88899 | Critical | 9.8 | 2026-09-10 | knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can suppl… |
CVE-2026-88018 | Critical | 9.8 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with… |
CVE-2026-88017 | High | 7.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driv… |
CVE-2026-88016 | High | 7.1 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --l… |
CVE-2026-88015 | Medium | 5.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or li… |
CVE-2026-88014 | Medium | 6.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend… |
CVE-2026-88013 | Low | 3.7 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attach… |
CVE-2026-88012 | Medium | 5.3 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.res… |
CVE-2026-88011 | High | 8.1 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Auth… |
CVE-2026-88009 | High | 8.2 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores i… |
CVE-2026-87913 | Medium | 5.9 | 2026-09-10 | A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source… |
CVE-2026-87912 | Medium | 5.9 | 2026-09-10 | A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obt… |
CVE-2026-81468 | Critical | 9.1 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
CVE-2026-81467 | Critical | 9.8 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera… |
CVE-2026-81052 | Medium | 6.8 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical acc… |
CVE-2026-81051 | Medium | 6.6 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physi… |
CVE-2026-81049 | Medium | 4.4 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could… |
CVE-2026-81048 | Critical | 9.6 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A… |
CVE-2026-81046 | Critical | 9.4 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could pote… |
CVE-2026-79987 | High | 8.8 | 2026-09-10 | A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker. |
CVE-2026-4130 | High | 7.1 | 2026-09-10 | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain s… |
CVE-2026-4129 | High | 8.1 | 2026-09-10 | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system… |
CVE-2026-88924 | High | 7.0 | 2026-09-10 | A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the li… |
CVE-2026-88898 | Medium | 6.5 | 2026-09-10 | AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing authenticated users to… |
CVE-2026-88897 | Medium | 5.9 | 2026-09-10 | Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web… |
CVE-2026-88008 | Critical | 9.1 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header req… |
CVE-2026-88007 | Critical | 9.1 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.A… |
CVE-2026-88006 | Medium | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issue… |
CVE-2026-88005 | Medium | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues… |
CVE-2026-88004 | High | 7.4 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStr… |
CVE-2026-85310 | Medium | 6.5 | 2026-09-10 | import_contacts Path Traversal in Groundhogg <= 4.7.1 versions. |
CVE-2026-84821 | High | 7.5 | 2026-09-10 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions. |
CVE-2026-84819 | High | 7.1 | 2026-09-10 | Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions. |
CVE-2026-84816 | High | 7.1 | 2026-09-10 | Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions. |
CVE-2026-81805 | High | 8.1 | 2026-09-10 | Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions. |
CVE-2026-81804 | High | 7.5 | 2026-09-10 | Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions. |
CVE-2026-81803 | High | 7.5 | 2026-09-10 | Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. |
CVE-2026-81801 | High | 8.1 | 2026-09-10 | Subscriber Settings Change in WP-Stateless <= 4.4.1 versions. |
CVE-2026-81800 | Critical | 9.3 | 2026-09-10 | Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions. |
CVE-2026-81799 | High | 7.5 | 2026-09-10 | Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce <= 4.6.4 versions. |
CVE-2026-81796 | High | 7.3 | 2026-09-10 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue af… |
CVE-2026-81795 | High | 7.1 | 2026-09-10 | Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions. |
CVE-2026-81794 | High | 7.5 | 2026-09-10 | Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions. |
CVE-2026-81793 | Medium | 6.5 | 2026-09-10 | Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2026-81791 | Medium | 6.5 | 2026-09-10 | Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions. |
CVE-2026-81789 | High | 8.6 | 2026-09-10 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce… |
CVE-2026-81788 | Medium | 6.3 | 2026-09-10 | Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions. |
CVE-2026-81787 | Medium | 6.5 | 2026-09-10 | Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions. |
CVE-2026-81786 | High | 7.5 | 2026-09-10 | Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions. |
CVE-2026-81785 | Medium | 6.5 | 2026-09-10 | Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions. |
CVE-2026-81784 | High | 8.1 | 2026-09-10 | Unauthenticated PHP Object Injection in Wise Chat <= 3.4 versions. |
CVE-2026-81783 | High | 7.1 | 2026-09-10 | Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions. |
CVE-2026-81782 | Medium | 6.5 | 2026-09-10 | Subscriber Cross Site Scripting (XSS) in WP Docs <= 2.3.1 versions. |
CVE-2026-81275 | Medium | 6.5 | 2026-09-10 | Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions. |
CVE-2026-78536 | Medium | 6.5 | 2026-09-10 | Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions. |
CVE-2026-66674 | Medium | 5.6 | 2026-09-10 | Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions. |
CVE-2026-66632 | Medium | 6.5 | 2026-09-10 | Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions. |
CVE-2026-46387 | High | 7.5 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suric… |
CVE-2026-45747 | High | 7.5 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS cert… |
CVE-2026-15461 | Medium | 5.3 | 2026-09-10 | The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl78xx/) embeds a generic struct gnss_nmea0183_match… |
CVE-2026-88921 | | 2026-09-10 | MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references (attrib… | |
CVE-2026-88915 | | 2026-09-10 | Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution =… | |
CVE-2026-88896 | Medium | 5.3 | 2026-09-10 | EspoCRM before 10.0.4 is vulnerable to server-side request forgery. HostCheck::ipAddressIsNotInternal(), which validates outbound URLs to block requests to int… |
CVE-2026-88895 | High | 7.2 | 2026-09-10 | CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived toke… |
CVE-2026-88894 | Medium | 5.4 | 2026-09-10 | Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the checkout target. Unlike the single, bulk… |
CVE-2026-88893 | High | 7.5 | 2026-09-10 | OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated… |
CVE-2026-88892 | Medium | 5.0 | 2026-09-10 | In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard (apps/api/src/utils/s… |
CVE-2026-88891 | High | 8.3 | 2026-09-10 | OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and pub… |
CVE-2026-88890 | High | 8.5 | 2026-09-10 | OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers befo… |
CVE-2026-88889 | High | 7.8 | 2026-09-10 | Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifyi… |
CVE-2026-88888 | High | 7.0 | 2026-09-10 | Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization paramete… |
CVE-2026-88887 | High | 8.6 | 2026-09-10 | Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote regi… |
CVE-2026-88886 | High | 7.8 | 2026-09-10 | Renovate is a dependency update automation tool. In versions before 44.14.7 (and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-ente… |
CVE-2026-88885 | High | 7.0 | 2026-09-10 | Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update comm… |
CVE-2026-88884 | Medium | 5.8 | 2026-09-10 | Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15… |
CVE-2026-88883 | High | 7.7 | 2026-09-10 | Renovate is an automated dependency update tool. In versions before 44.14.4 (and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edit… |
CVE-2026-88882 | High | 8.6 | 2026-09-10 | Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterpr… |
CVE-2026-88881 | High | 8.6 | 2026-09-10 | Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header when interacting with GitHub.com, GitHub E… |
CVE-2026-88880 | High | 8.6 | 2026-09-10 | Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-b… |
CVE-2026-88879 | High | 8.2 | 2026-09-10 | Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11, header names are canonicalized only on… |
CVE-2026-88878 | Medium | 5.3 | 2026-09-10 | Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v3.7.11, the entryPoints.<name>.transpor… |
CVE-2026-88877 | Critical | 9.8 | 2026-09-10 | Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry… |
CVE-2026-88876 | High | 7.5 | 2026-09-10 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/PlayerSkins/seo.php that allows unaut… |
CVE-2026-88875 | Medium | 4.3 | 2026-09-10 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) incompletely sanitizes sensitive user fields in the APIName=video respons… |
CVE-2026-88874 | High | 7.5 | 2026-09-10 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Live stream password check on the stats endpoint or… |
CVE-2026-88873 | High | 7.1 | 2026-09-10 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows… |
CVE-2026-88872 | High | 7.1 | 2026-09-10 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that al… |
CVE-2026-88871 | Medium | 4.3 | 2026-09-10 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains a cross-site request forgery vulnerability in the CustomizeUs… |
CVE-2026-88870 | High | 7.1 | 2026-09-10 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endp… |
CVE-2026-88869 | Critical | 9.3 | 2026-09-10 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the AD_Server plugin's log.php endpoint… |
CVE-2026-88868 | High | 8.7 | 2026-09-10 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and des… |
CVE-2026-88867 | High | 8.7 | 2026-09-10 | WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a stored cross-site scripting vulnerability. objects/cat… |
CVE-2026-88866 | High | 8.7 | 2026-09-10 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails… |