2026 CVEs (page 162)
Page 162 of 668 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82921 | High | 7.3 | 2026-08-31 | A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of t… |
CVE-2026-82882 | High | 8.8 | 2026-08-31 | Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin… |
CVE-2026-82398 | Medium | 5.3 | 2026-08-31 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/_utils.py functi… |
CVE-2026-82397 | High | 7.5 | 2026-08-31 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with url… |
CVE-2026-82396 | Medium | 5.4 | 2026-08-31 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller… |
CVE-2026-82395 | | 2026-08-31 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its pe… | |
CVE-2026-82394 | | 2026-08-31 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link endpoint and src/Sulu… | |
CVE-2026-82393 | High | 7.5 | 2026-08-31 | pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's package.json manifest name because pnpm… |
CVE-2026-77353 | Medium | 4.6 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar… |
CVE-2026-77352 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. From version 2.0.0 to before version 5.0.0, any authenticated Wallos user (no admin righ… |
CVE-2026-77351 | Low | 3.5 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host… |
CVE-2026-77348 | High | 8.2 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-33407 (GHSA-hhjq-82f8-m6rc, "SSRF via HTTP… |
CVE-2026-83596 | High | 8.8 | 2026-08-31 | A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. |
CVE-2026-82919 | High | 7.3 | 2026-08-31 | A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit… |
CVE-2026-82914 | High | 7.3 | 2026-08-31 | A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipula… |
CVE-2026-82909 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of… |
CVE-2026-82908 | High | 8.8 | 2026-08-31 | A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of… |
CVE-2026-82906 | Low | 3.7 | 2026-08-31 | A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of… |
CVE-2026-82852 | Medium | 5.4 | 2026-08-31 | Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions. |
CVE-2026-82392 | High | 7.1 | 2026-08-31 | pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-controlled pnpm-lock.yaml packages keys w… |
CVE-2026-82346 | | 2026-08-31 | A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local a… | |
CVE-2026-82229 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions. |
CVE-2026-82228 | High | 8.1 | 2026-08-31 | Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions. |
CVE-2026-82226 | Critical | 9.8 | 2026-08-31 | Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions. |
CVE-2026-82225 | High | 7.4 | 2026-08-31 | Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions. |
CVE-2026-82224 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions. |
CVE-2026-82221 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions. |
CVE-2026-81892 | High | 8.1 | 2026-08-31 | EasyAdmin is a fast and modern admin generator for Symfony applications. From 4.0.0 until 4.29.16 and 5.5.1, EasyAdmin serves all backend requests through a si… |
CVE-2026-81891 | High | 8.1 | 2026-08-31 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems() in php/elFinderVolumeDriver.class… |
CVE-2026-81890 | Medium | 5.4 | 2026-08-31 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted from elFinderConnector… |
CVE-2026-81889 | High | 8.6 | 2026-08-31 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can byp… |
CVE-2026-81888 | Medium | 5.4 | 2026-08-31 | @hono/oauth-providers is Authentication middleware for Hono. Prior to version 0.8.6, the built-in social login providers accept an OAuth callback even when the… |
CVE-2026-81887 | | 2026-08-31 | Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, in… | |
CVE-2026-81780 | Critical | 10.0 | 2026-08-31 | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. |
CVE-2026-81779 | Critical | 10.0 | 2026-08-31 | Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspaper… |
CVE-2026-81778 | Medium | 6.5 | 2026-08-31 | Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions. |
CVE-2026-81768 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions. |
CVE-2026-81765 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions. |
CVE-2026-81764 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions. |
CVE-2026-81763 | Critical | 9.3 | 2026-08-31 | Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions. |
CVE-2026-81762 | Medium | 6.5 | 2026-08-31 | Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions. |
CVE-2026-81758 | Medium | 6.3 | 2026-08-31 | Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions. |
CVE-2026-81756 | Critical | 9.3 | 2026-08-31 | Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions. |
CVE-2026-81298 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions. |
CVE-2026-81297 | High | 7.5 | 2026-08-31 | Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions. |
CVE-2026-81296 | High | 7.5 | 2026-08-31 | Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions. |
CVE-2026-81293 | Critical | 9.3 | 2026-08-31 | Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions. |
CVE-2026-81291 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions. |
CVE-2026-81290 | High | 7.1 | 2026-08-31 | Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions. |
CVE-2026-81287 | High | 8.5 | 2026-08-31 | Subscriber SQL Injection in Charitable <= 1.8.12.1 versions. |
CVE-2026-81280 | Medium | 6.5 | 2026-08-31 | Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions. |
CVE-2026-81278 | Medium | 5.4 | 2026-08-31 | Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SM… |
CVE-2026-79483 | Medium | 5.3 | 2026-08-31 | FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attack… |
CVE-2026-79408 | Critical | 9.8 | 2026-08-31 | An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views… |
CVE-2026-79407 | High | 7.5 | 2026-08-31 | A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name()… |
CVE-2026-75594 | | 2026-08-31 | Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed… | |
CVE-2026-75592 | | 2026-08-31 | Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem co… | |
CVE-2026-75460 | Medium | 6.5 | 2026-08-31 | XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role para… |
CVE-2026-75458 | High | 8.1 | 2026-08-31 | The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege escalatio vulnerability… |
CVE-2026-71415 | | 2026-08-31 | Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did not run the relevant… | |
CVE-2026-62993 | | 2026-08-31 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 4.5.7 and 5.8.2, depending on the… | |
CVE-2026-61641 | High | 8.1 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallos's OIDC login links an incoming OIDC i… |
CVE-2026-61640 | | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, Admin-configured OIDC token_url and user_info_url in includes/oi… | |
CVE-2026-61639 | | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo() wit… | |
CVE-2026-61638 | | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notifications/testemailnotifications.php accepts… | |
CVE-2026-54600 | | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/import.php has no authentication. The only guard is… | |
CVE-2026-54599 | | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login.php generates an OIDC state nonce stored in $_SESSION['oid… | |
CVE-2026-54598 | High | 7.5 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations whe… |
CVE-2026-54179 | Medium | 4.4 | 2026-08-31 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administratio… |
CVE-2026-50199 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/update_exchange.php loads the first Fixer/API… |
CVE-2026-50198 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription a… |
CVE-2026-38577 | Critical | 9.8 | 2026-08-31 | Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access. |
CVE-2026-82905 | Medium | 6.3 | 2026-08-31 | A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs… |
CVE-2026-82835 | Medium | 5.4 | 2026-08-31 | A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of… |
CVE-2026-82834 | Medium | 5.4 | 2026-08-31 | A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a… |
CVE-2026-82833 | Medium | 6.3 | 2026-08-31 | A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Docum… |
CVE-2026-81267 | Medium | 5.4 | 2026-08-31 | A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to r… |
CVE-2026-52730 | Medium | 4.3 | 2026-08-31 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing Authorization… |
CVE-2026-51740 | Critical | 9.8 | 2026-08-31 | Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via s… |
CVE-2026-51739 | Medium | 5.9 | 2026-08-31 | Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger cloud update che… |
CVE-2026-51738 | Critical | 9.8 | 2026-08-31 | Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset the device configuratio… |
CVE-2026-51737 | Medium | 5.3 | 2026-08-31 | Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase traceroute logs via… |
CVE-2026-51736 | Critical | 9.1 | 2026-08-31 | Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a c… |
CVE-2026-51735 | High | 7.5 | 2026-08-31 | Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve recent system logs via se… |
CVE-2026-51734 | Critical | 9.8 | 2026-08-31 | Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger mesh slave update c… |
CVE-2026-51733 | Critical | 9.8 | 2026-08-31 | Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries… |
CVE-2026-51732 | Medium | 5.3 | 2026-08-31 | Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entr… |
CVE-2026-51731 | Critical | 9.1 | 2026-08-31 | Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a… |
CVE-2026-14697 | Medium | 6.5 | 2026-08-31 | net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unr… |
CVE-2026-13732 | High | 7.0 | 2026-08-31 | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code tha… |
CVE-2026-83497 | High | 8.8 | 2026-08-31 | Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic re… |
CVE-2026-82821 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF… |
CVE-2026-82820 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The man… |
CVE-2026-82818 | Medium | 6.3 | 2026-08-31 | A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resourc… |
CVE-2026-72001 | High | 8.1 | 2026-08-31 | Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an a… |
CVE-2026-53553 | High | 7.7 | 2026-08-31 | Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, spec… |
CVE-2026-53552 | Critical | 9.6 | 2026-08-31 | Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in… |
CVE-2026-53508 | | 2026-08-31 | oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did n… | |
CVE-2026-53507 | | 2026-08-31 | oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff ac… | |
CVE-2026-14696 | Medium | 6.5 | 2026-08-31 | When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bridge/bridge_input.c decides how each fra… |