2026 CVEs (page 137)

Page 137 of 666 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 137 of 666)
CVESeverityScorePublishedSummary
CVE-2026-73316High7.52026-09-08XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload mul…
CVE-2026-73315High8.62026-09-08XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause th…
CVE-2026-73314High7.52026-09-08XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment…
CVE-2026-73313Medium6.82026-09-08XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete…
CVE-2026-73312High7.42026-09-08XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to…
CVE-2026-73311High7.42026-09-08XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previo…
CVE-2026-73310Medium5.92026-09-08XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redi…
CVE-2026-73309High7.42026-09-08XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token…
CVE-2026-33920Low3.52026-09-08A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token…
CVE-2026-33391Medium5.42026-09-08An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authentic…
CVE-2026-33389High7.52026-09-08An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target…
CVE-2026-33388High7.42026-09-08An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticat…
CVE-2026-33387Medium4.62026-09-08A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with…
CVE-2026-79603Medium4.32026-09-08x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-…
CVE-2026-79602High8.82026-09-08A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
CVE-2026-77106High8.82026-09-08Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update…
CVE-2026-77105High8.82026-09-08CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Up…
CVE-2026-77104High7.52026-09-08CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-77103High7.52026-09-08CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenanc…
CVE-2026-77102High7.52026-09-08CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommS…
CVE-2026-77101High7.52026-09-08CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Comm…
CVE-2026-77098Critical9.82026-09-08Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update P…
CVE-2026-77097High8.22026-09-08Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade…
CVE-2026-77092Critical9.82026-09-08Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance releas…
CVE-2026-77091High7.82026-09-08DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Ex…
CVE-2026-77089Critical9.82026-09-08Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update…
CVE-2026-75021High8.12026-09-08fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a bro…
CVE-2026-62437Medium6.52026-09-08When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remov…
CVE-2026-192032026-09-08A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boun…
CVE-2026-126112026-09-08A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and…
CVE-2026-115732026-09-08Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodeP…
CVE-2026-86714Medium5.42026-09-08PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attacke…
CVE-2026-86713High7.12026-09-08PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and…
CVE-2026-86712High8.82026-09-08SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the No…
CVE-2026-86711High7.42026-09-08electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Ren…
CVE-2026-78234Critical9.92026-09-08A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to min…
CVE-2026-77968High8.22026-09-08A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: [create, get, list, update, watch] across all namespaces. While the operator us…
CVE-2026-76931Medium6.42026-09-08The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including…
CVE-2026-74860High8.52026-09-08A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document cont…
CVE-2026-3174High7.52026-09-08The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAut…
CVE-2026-2520Medium5.42026-09-08The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili…
CVE-2026-18021Medium6.52026-09-08The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to…
CVE-2026-17509Medium6.52026-09-08The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4…
CVE-2026-16502High8.82026-09-08The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via…
CVE-2026-12230Medium6.42026-09-08The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout_cust…
CVE-2026-776542026-09-08Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and…
CVE-2026-196142026-09-08The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.
CVE-2026-9331High7.12026-09-08The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due…
CVE-2026-865902026-09-08In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an…
CVE-2026-854002026-09-08Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show comm…
CVE-2026-771322026-09-08It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization checks. This allowed authenticated, lo…
CVE-2026-86597Medium6.52026-09-08Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-re…
CVE-2026-86550Medium6.52026-09-08NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirect…
CVE-2026-74859Medium6.82026-09-08The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can…
CVE-2026-71377Critical9.82026-09-08Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03…
CVE-2026-71376Critical9.82026-09-08OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 1…
CVE-2026-67367High8.62026-09-08A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager…
CVE-2026-62654Medium6.82026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during dev…
CVE-2026-62653Medium6.82026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when…
CVE-2026-62652Medium5.32026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been r…
CVE-2026-62650High8.82026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not pro…
CVE-2026-62649High7.52026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing…
CVE-2026-62648High7.52026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is no…
CVE-2026-62647High7.42026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as se…
CVE-2026-62646High7.42026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness…
CVE-2026-62645Critical9.82026-09-08A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the…
CVE-2026-58113Medium6.12026-09-08A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versio…
CVE-2026-50093Critical9.02026-09-08A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), S…
CVE-2026-34223High8.22026-09-08A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All ver…
CVE-2026-84820High7.12026-09-08Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.
CVE-2026-84818High7.12026-09-08Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.
CVE-2026-84817High7.12026-09-08Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.
CVE-2026-81806High7.22026-09-08Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from…
CVE-2026-81802Medium6.52026-09-08Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
CVE-2026-81798High7.12026-09-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affec…
CVE-2026-81792Medium6.52026-09-08Incorrect Privilege Assignment vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX woocommerce-catalog-enquiry allows Privile…
CVE-2026-81790High7.52026-09-08Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Se…
CVE-2026-81781High7.12026-09-08Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This…
CVE-2026-76561High7.22026-09-08A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uplo…
CVE-2026-71375High7.42026-09-08Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from…
CVE-2026-71374Critical9.82026-09-08Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-…
CVE-2026-48888High7.52026-09-08Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before…
CVE-2026-86519Medium5.32026-09-08A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backu…
CVE-2026-86518Medium6.32026-09-08A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the arg…
CVE-2026-86517Medium6.32026-09-08A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Ex…
CVE-2026-86516Medium4.72026-09-08A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared…
CVE-2026-86515Medium4.32026-09-08A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the component txt…
CVE-2026-86514Medium6.32026-09-08A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This ma…
CVE-2026-86513Medium5.32026-09-08A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file s…
CVE-2026-86512Medium6.32026-09-08A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main…
CVE-2026-86511Medium5.32026-09-08A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/mai…
CVE-2026-758112026-09-08Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potent…
CVE-2026-758102026-09-08Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requ…
CVE-2026-758092026-09-08Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypass…
CVE-2026-758082026-09-08Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exh…
CVE-2026-193972026-09-08Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct conn…
CVE-2026-180232026-09-08Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialize…
CVE-2026-160062026-09-08Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a…
CVE-2026-160052026-09-08Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the drive…
CVE-2026-160042026-09-08Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted…