2026 CVEs (page 12)
Page 12 of 659 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-103087 | | 2026-09-30 | Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Se… | |
CVE-2026-102847 | Medium | 4.3 | 2026-09-30 | A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file… |
CVE-2026-102846 | Medium | 4.7 | 2026-09-30 | A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of t… |
CVE-2026-102845 | Medium | 5.3 | 2026-09-30 | A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function er… |
CVE-2026-102844 | Low | 2.7 | 2026-09-30 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail… |
CVE-2026-102843 | Medium | 4.7 | 2026-09-30 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function hapus of the fi… |
CVE-2026-51936 | | 2026-09-30 | Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one attached database into… | |
CVE-2026-103057 | Medium | 4.3 | 2026-09-30 | AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POS… |
CVE-2026-103056 | Critical | 9.0 | 2026-09-30 | AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings… |
CVE-2026-103055 | High | 7.5 | 2026-09-30 | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET… |
CVE-2026-103054 | High | 7.1 | 2026-09-30 | AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portf… |
CVE-2026-103053 | Medium | 5.4 | 2026-09-30 | AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE… |
CVE-2026-102842 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function app_use… |
CVE-2026-102805 | Medium | 6.5 | 2026-09-30 | A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_im… |
CVE-2026-102804 | Medium | 6.5 | 2026-09-30 | A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwave_init in the library s… |
CVE-2026-90441 | | 2026-09-30 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (includin… | |
CVE-2026-86136 | | 2026-09-30 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (includin… | |
CVE-2026-86133 | | 2026-09-30 | An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to cr… | |
CVE-2026-86132 | | 2026-09-30 | An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending… | |
CVE-2026-86131 | | 2026-09-30 | A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server t… | |
CVE-2026-86128 | | 2026-09-30 | A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of serv… | |
CVE-2026-86105 | | 2026-09-30 | An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other… | |
CVE-2026-86104 | | 2026-09-30 | An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of se… | |
CVE-2026-86101 | | 2026-09-30 | An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access… | |
CVE-2026-81433 | | 2026-09-30 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent n… | |
CVE-2026-18145 | | 2026-09-30 | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator pr… | |
CVE-2026-18105 | | 2026-09-30 | An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of s… | |
CVE-2026-13224 | | 2026-09-30 | A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local fil… | |
CVE-2026-13046 | | 2026-09-30 | A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already o… | |
CVE-2026-103051 | Medium | 6.1 | 2026-09-30 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extens… |
CVE-2026-103050 | Medium | 6.1 | 2026-09-30 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - MassMessage extensio… |
CVE-2026-103049 | Medium | 6.1 | 2026-09-30 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allo… |
CVE-2026-103048 | Medium | 6.1 | 2026-09-30 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. … |
CVE-2026-102794 | Critical | 9.1 | 2026-09-30 | A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of… |
CVE-2026-102793 | Critical | 9.1 | 2026-09-30 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This mani… |
CVE-2026-103047 | Medium | 6.1 | 2026-09-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extensio… |
CVE-2026-103046 | Medium | 6.1 | 2026-09-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension all… |
CVE-2026-103045 | Medium | 6.1 | 2026-09-29 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allow… |
CVE-2026-103044 | Critical | 9.8 | 2026-09-29 | XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affect… |
CVE-2026-103043 | High | 7.5 | 2026-09-29 | anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attack… |
CVE-2026-103042 | High | 7.5 | 2026-09-29 | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowing unauthenticated… |
CVE-2026-103041 | Critical | 9.8 | 2026-09-29 | LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can… |
CVE-2026-103040 | Critical | 9.8 | 2026-09-29 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exp… |
CVE-2026-102792 | Critical | 9.1 | 2026-09-29 | A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetwork/set_syslog. The manipulation of the… |
CVE-2026-91191 | High | 7.5 | 2026-09-29 | The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock don… |
CVE-2026-84409 | High | 7.5 | 2026-09-29 | The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A… |
CVE-2026-74225 | High | 7.1 | 2026-09-29 | U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6… |
CVE-2026-74222 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage f… |
CVE-2026-74221 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious NFS… |
CVE-2026-74220 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying craf… |
CVE-2026-72510 | Critical | 9.0 | 2026-09-29 | The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection. |
CVE-2026-72507 | Critical | 9.0 | 2026-09-29 | The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulner… |
CVE-2026-71974 | Medium | 4.8 | 2026-09-29 | U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds… |
CVE-2026-71973 | Medium | 5.2 | 2026-09-29 | U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory table buffer. Attack… |
CVE-2026-71972 | Medium | 5.9 | 2026-09-29 | U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c. Attackers can… |
CVE-2026-71971 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote a… |
CVE-2026-71379 | Critical | 10.0 | 2026-09-29 | The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request. |
CVE-2026-71302 | High | 7.1 | 2026-09-29 | The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a s… |
CVE-2026-71189 | Low | 3.5 | 2026-09-29 | An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user… |
CVE-2026-70356 | Critical | 9.1 | 2026-09-29 | The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web ser… |
CVE-2026-69662 | Low | 3.7 | 2026-09-29 | The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. |
CVE-2026-68954 | Critical | 9.0 | 2026-09-29 | The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability. |
CVE-2026-68068 | Critical | 9.0 | 2026-09-29 | The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL inj… |
CVE-2026-63713 | Critical | 9.0 | 2026-09-29 | The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability. |
CVE-2026-102771 | Medium | 4.7 | 2026-09-29 | A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-… |
CVE-2026-102621 | Low | 3.3 | 2026-09-29 | A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such man… |
CVE-2026-96587 | Critical | 10.0 | 2026-09-29 | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critic… |
CVE-2026-94952 | Critical | 9.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-94204 | High | 7.5 | 2026-09-29 | The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored obj… |
CVE-2026-93853 | | 2026-09-29 | Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots… | |
CVE-2026-81842 | Medium | 4.3 | 2026-09-29 | An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library… |
CVE-2026-81841 | Medium | 5.3 | 2026-09-29 | Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused s… |
CVE-2026-102938 | | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the line-oriented p… | |
CVE-2026-102937 | | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate… | |
CVE-2026-102930 | | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for p… | |
CVE-2026-102925 | High | 7.8 | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place… |
CVE-2026-102904 | Medium | 5.4 | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5… |
CVE-2026-102620 | Low | 3.3 | 2026-09-29 | A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.c… |
CVE-2026-102253 | High | 7.5 | 2026-09-29 | iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive wo… |
CVE-2026-96274 | High | 7.4 | 2026-09-29 | In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS pa… |
CVE-2026-94953 | High | 8.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-79538 | Critical | 9.8 | 2026-09-29 | metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (create… |
CVE-2026-79537 | Critical | 9.1 | 2026-09-29 | metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch. The session store (getSession in… |
CVE-2026-79536 | Critical | 9.1 | 2026-09-29 | bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to acc… |
CVE-2026-79535 | Medium | 6.3 | 2026-09-29 | mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a caller-supplied val… |
CVE-2026-79534 | Medium | 5.9 | 2026-09-29 | mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helpe… |
CVE-2026-79417 | Medium | 5.3 | 2026-09-29 | Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle acces… |
CVE-2026-79403 | High | 8.4 | 2026-09-29 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint |
CVE-2026-79348 | Medium | 4.3 | 2026-09-29 | KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET /api/reservations/:id in… |
CVE-2026-76738 | Low | 2.7 | 2026-09-29 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileg… |
CVE-2026-76737 | Low | 3.0 | 2026-09-29 | An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacke… |
CVE-2026-76736 | Low | 3.3 | 2026-09-29 | A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege aut… |
CVE-2026-76735 | Medium | 4.1 | 2026-09-29 | A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an… |
CVE-2026-76734 | Medium | 4.8 | 2026-09-29 | A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of… |
CVE-2026-76733 | Medium | 4.9 | 2026-09-29 | A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privil… |
CVE-2026-76732 | Medium | 6.4 | 2026-09-29 | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerabili… |
CVE-2026-76731 | Medium | 6.5 | 2026-09-29 | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing… |
CVE-2026-76730 | Medium | 6.5 | 2026-09-29 | An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to ci… |
CVE-2026-76729 | Medium | 6.6 | 2026-09-29 | A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause m… |
CVE-2026-76728 | High | 7.2 | 2026-09-29 | A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side… |