2026 CVEs (page 166)
Page 166 of 668 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82643 | Medium | 6.5 | 2026-08-30 | WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without… |
CVE-2026-82548 | Medium | 5.3 | 2026-08-30 | A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This man… |
CVE-2026-82547 | Medium | 6.5 | 2026-08-30 | A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Regis… |
CVE-2026-82545 | Medium | 6.3 | 2026-08-30 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/sup_searchfrm.php. The manipu… |
CVE-2026-82642 | High | 8.8 | 2026-08-30 | Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that… |
CVE-2026-82641 | High | 8.6 | 2026-08-30 | Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints th… |
CVE-2026-82640 | Medium | 5.5 | 2026-08-30 | browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with re… |
CVE-2026-82639 | High | 7.5 | 2026-08-30 | NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server'… |
CVE-2026-82638 | High | 7.5 | 2026-08-30 | jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery… |
CVE-2026-82637 | Medium | 5.3 | 2026-08-30 | browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrar… |
CVE-2026-82636 | High | 7.9 | 2026-08-30 | Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "sy… |
CVE-2026-82544 | Medium | 4.3 | 2026-08-30 | A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of the file wger/gym/views/gym.py of the com… |
CVE-2026-82635 | High | 8.8 | 2026-08-30 | Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filen… |
CVE-2026-82634 | Medium | 6.5 | 2026-08-30 | Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-privileged users to render arbitrary Ji… |
CVE-2026-82633 | Medium | 4.3 | 2026-08-30 | Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users… |
CVE-2026-82543 | High | 7.3 | 2026-08-30 | A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the c… |
CVE-2026-82542 | Critical | 10.0 | 2026-08-30 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of th… |
CVE-2026-82541 | Medium | 6.3 | 2026-08-30 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pag… |
CVE-2026-82540 | Medium | 6.3 | 2026-08-30 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manip… |
CVE-2026-81318 | | 2026-08-30 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller in a schema-based multitenant application to receive aggregate values computed fro… | |
CVE-2026-81316 | | 2026-08-30 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to receive an aggregate value computed over rows a more restrictive filter should… | |
CVE-2026-80227 | | 2026-08-30 | Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and p… | |
CVE-2026-78691 | | 2026-08-30 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who supplies a search term to contains/2, st… | |
CVE-2026-78228 | | 2026-08-30 | Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust wo… | |
CVE-2026-78038 | | 2026-08-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :arg… | |
CVE-2026-77454 | | 2026-08-30 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relations… | |
CVE-2026-82539 | Critical | 9.1 | 2026-08-30 | A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MA… |
CVE-2026-82488 | Low | 3.5 | 2026-08-30 | A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component User Management. The manipulation of the… |
CVE-2026-82487 | Medium | 6.3 | 2026-08-30 | A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The att… |
CVE-2026-82486 | Medium | 5.0 | 2026-08-30 | A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Perform… |
CVE-2026-82485 | Medium | 6.3 | 2026-08-30 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pr… |
CVE-2026-82484 | Medium | 6.3 | 2026-08-30 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp_searchfrm.php. This manipulation o… |
CVE-2026-82483 | Low | 3.5 | 2026-08-30 | A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file db_input.php of the comp… |
CVE-2026-82482 | Low | 3.5 | 2026-08-30 | A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.ph… |
CVE-2026-81766 | Medium | 6.6 | 2026-08-30 | The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9… |
CVE-2026-81660 | High | 8.8 | 2026-08-30 | The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does not validate or escape values submitted to some optional web fo… |
CVE-2026-78364 | Low | 3.5 | 2026-08-30 | The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, whi… |
CVE-2026-76585 | High | 8.8 | 2026-08-30 | The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpo… |
CVE-2026-19722 | Medium | 6.6 | 2026-08-30 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during res… |
CVE-2026-14835 | Medium | 6.8 | 2026-08-30 | The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved fro… |
CVE-2026-14307 | High | 7.1 | 2026-08-30 | The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served… |
CVE-2026-82480 | High | 7.4 | 2026-08-30 | A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/f… |
CVE-2026-82479 | Medium | 6.3 | 2026-08-30 | A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component… |
CVE-2026-82478 | High | 7.3 | 2026-08-30 | A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_servi… |
CVE-2026-15980 | Critical | 9.8 | 2026-08-30 | The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization i… |
CVE-2026-77846 | | 2026-08-30 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to… | |
CVE-2026-75759 | | 2026-08-30 | Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encryp… | |
CVE-2026-82562 | Low | 3.7 | 2026-08-30 | ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`)… |
CVE-2026-77970 | | 2026-08-30 | Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource t… | |
CVE-2026-77831 | | 2026-08-30 | Inefficient Algorithmic Complexity vulnerability in ash-project ash_paper_trail allows a user who can submit a large array attribute to a paper-trailed create… | |
CVE-2026-75847 | | 2026-08-30 | Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource t… | |
CVE-2026-82417 | Medium | 5.3 | 2026-08-30 | ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member… |
CVE-2026-82424 | Medium | 6.3 | 2026-08-29 | A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_ed… |
CVE-2026-82423 | Medium | 5.4 | 2026-08-29 | A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payme… |
CVE-2026-82422 | Medium | 6.3 | 2026-08-29 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipul… |
CVE-2026-82421 | Medium | 6.3 | 2026-08-29 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The… |
CVE-2026-15369 | Critical | 9.8 | 2026-08-29 | The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is… |
CVE-2026-75807 | High | 7.5 | 2026-08-29 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mo_… |
CVE-2026-82476 | Medium | 5.3 | 2026-08-29 | Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attack… |
CVE-2026-82475 | High | 8.1 | 2026-08-29 | iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authentic… |
CVE-2026-82474 | High | 7.8 | 2026-08-29 | Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific comman… |
CVE-2026-82473 | High | 8.2 | 2026-08-29 | KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on po… |
CVE-2026-82472 | High | 7.5 | 2026-08-29 | Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Un… |
CVE-2026-82470 | Medium | 5.4 | 2026-08-29 | Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Atta… |
CVE-2026-82469 | Medium | 5.4 | 2026-08-29 | Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT access tokens without requiring a refresh to… |
CVE-2026-82468 | Medium | 4.7 | 2026-08-29 | Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cr… |
CVE-2026-82467 | Medium | 4.7 | 2026-08-29 | Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_t… |
CVE-2026-82466 | High | 8.7 | 2026-08-29 | Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other acco… |
CVE-2026-82465 | Medium | 5.3 | 2026-08-29 | pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an IdP sends… |
CVE-2026-82464 | Medium | 6.1 | 2026-08-29 | pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-prefixed logout redirect targets matchin… |
CVE-2026-82463 | High | 8.1 | 2026-08-29 | pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attacker… |
CVE-2026-82462 | Medium | 6.5 | 2026-08-29 | pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation. Attackers can substitute access… |
CVE-2026-82461 | High | 8.1 | 2026-08-29 | pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attackers can f… |
CVE-2026-82460 | Critical | 9.8 | 2026-08-29 | Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path… |
CVE-2026-82481 | | 2026-08-29 | The cohttp package before 6.3.0 for OCaml allows directory traversal. | |
CVE-2026-82477 | Medium | 5.8 | 2026-08-29 | In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy end… |
CVE-2026-82457 | High | 7.8 | 2026-08-29 | su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-… |
CVE-2026-82456 | Critical | 10.0 | 2026-08-29 | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is con… |
CVE-2026-82454 | Critical | 9.1 | 2026-08-29 | The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken fu… |
CVE-2026-82453 | High | 7.5 | 2026-08-29 | rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retr… |
CVE-2026-82452 | Critical | 9.8 | 2026-08-29 | rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handle… |
CVE-2026-82451 | Medium | 6.1 | 2026-08-29 | Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated a… |
CVE-2026-82450 | High | 8.8 | 2026-08-29 | BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Crea… |
CVE-2026-82449 | Medium | 5.3 | 2026-08-29 | Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attack… |
CVE-2026-82448 | Critical | 9.8 | 2026-08-29 | Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary databas… |
CVE-2026-82447 | High | 8.8 | 2026-08-29 | Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and th… |
CVE-2026-14494 | Critical | 9.8 | 2026-08-29 | The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission func… |
CVE-2026-82364 | Medium | 4.2 | 2026-08-29 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Su… |
CVE-2026-80725 | Critical | 9.8 | 2026-08-29 | In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate p… |
CVE-2026-81346 | Medium | 4.3 | 2026-08-29 | The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated use… |
CVE-2026-81342 | Medium | 4.7 | 2026-08-29 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it… |
CVE-2026-81200 | Low | 2.7 | 2026-08-29 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instru… |
CVE-2026-81026 | Medium | 4.8 | 2026-08-29 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before… |
CVE-2026-80488 | Medium | 4.1 | 2026-08-29 | The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, whi… |
CVE-2026-80311 | Medium | 4.3 | 2026-08-29 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting cust… |
CVE-2026-77786 | Medium | 4.9 | 2026-08-29 | The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires… |
CVE-2026-77704 | Low | 2.7 | 2026-08-29 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them ch… |
CVE-2026-77012 | Critical | 9.3 | 2026-08-29 | The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default… |
CVE-2026-77010 | Medium | 6.5 | 2026-08-29 | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not… |
CVE-2026-77008 | Medium | 6.5 | 2026-08-29 | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its s… |