2026 CVEs (page 167)
Page 167 of 471 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24697 | High | 7.2 | 2026-07-08 | An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers… |
CVE-2026-15067 | High | 8.8 | 2026-07-08 | Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input co… |
CVE-2026-15062 | Critical | 9.6 | 2026-07-08 | SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to… |
CVE-2026-15044 | Medium | 6.3 | 2026-07-08 | A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these s… |
CVE-2026-15036 | Medium | 4.3 | 2026-07-08 | A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of the file app/api/controller/gitspace/lis… |
CVE-2026-11903 | High | 8.0 | 2026-07-08 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue aff… |
CVE-2026-10708 | High | 7.5 | 2026-07-08 | This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a minimal leaderboard component may return u… |
CVE-2026-10706 | High | 7.5 | 2026-07-08 | In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbI… |
CVE-2026-10699 | High | 7.5 | 2026-07-08 | Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: fro… |
CVE-2026-10698 | High | 7.2 | 2026-07-08 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit… |
CVE-2026-60125 | | 2026-07-08 | MISP’s importModule() path used getEnabledModule() to resolve a single import module by name, but this lookup did not enforce the per-organisation module restr… | |
CVE-2026-60124 | | 2026-07-08 | An authorization bypass in MISP’s EventsController::importModule() allowed authenticated users or read-only API keys with event view access to persist data to… | |
CVE-2026-60092 | Medium | 6.1 | 2026-07-08 | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetI… |
CVE-2026-59257 | High | 8.8 | 2026-07-08 | n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1 node's executeQuery operation. T… |
CVE-2026-59253 | Medium | 5.0 | 2026-07-08 | n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can… |
CVE-2026-58657 | Medium | 4.8 | 2026-07-08 | Grav before 2.0.0 (affected through 2.0.0-rc.9 and the 2.0 branch) contains a stored CSS injection vulnerability in the Markdown image resize() media action. P… |
CVE-2026-58656 | High | 7.5 | 2026-07-08 | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: *, allowing unauthent… |
CVE-2026-58654 | Medium | 4.3 | 2026-07-08 | The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload endpoint (/api/v1/users/user/avatar… |
CVE-2026-58480 | Critical | 9.8 | 2026-07-08 | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload execut… |
CVE-2026-56778 | Medium | 6.4 | 2026-07-08 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workf… |
CVE-2026-56776 | High | 7.4 | 2026-07-08 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access us… |
CVE-2026-56775 | Medium | 5.4 | 2026-07-08 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing a… |
CVE-2026-56374 | Low | 3.3 | 2026-07-08 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote a… |
CVE-2026-56362 | Low | 3.3 | 2026-07-08 | ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before… |
CVE-2026-56360 | Medium | 4.0 | 2026-07-08 | n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook UR… |
CVE-2026-56359 | Medium | 5.4 | 2026-07-08 | n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs… |
CVE-2026-56298 | Medium | 4.3 | 2026-07-08 | Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can up… |
CVE-2026-56297 | High | 7.0 | 2026-07-08 | FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_cal… |
CVE-2026-56293 | Medium | 5.4 | 2026-07-08 | Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org when transferring applications between org… |
CVE-2026-56284 | Medium | 5.3 | 2026-07-08 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function public.get_total_metrics(org_id)… |
CVE-2026-56283 | Medium | 5.4 | 2026-07-08 | Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to inject malicious HTML content. At… |
CVE-2026-56273 | Medium | 6.5 | 2026-07-08 | Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that accept unsanitized basePath parameters… |
CVE-2026-56250 | High | 7.5 | 2026-07-08 | Capgo before 12.128.2 allows upload-scoped API keys to modify the mutable app_versions.r2_path field through PostgREST, enabling retargeting to arbitrary R2 bu… |
CVE-2026-56246 | High | 8.1 | 2026-07-08 | Capgo before 12.128.2 contains a broken access control vulnerability in the organization management API where a scoped API key (limited_to_orgs) inherits its o… |
CVE-2026-56226 | High | 7.5 | 2026-07-08 | Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the… |
CVE-2026-56220 | Medium | 6.5 | 2026-07-08 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.manifest INSERT policy that allows read-only org members to insert OTA manif… |
CVE-2026-56217 | Medium | 4.3 | 2026-07-08 | Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped API keys to downgrade encrypted bundles… |
CVE-2026-56086 | High | 8.8 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30… |
CVE-2026-54061 | Critical | 9.1 | 2026-07-08 | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public g… |
CVE-2026-53482 | High | 7.5 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30… |
CVE-2026-53480 | Low | 2.7 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30… |
CVE-2026-44840 | High | 7.5 | 2026-07-08 | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Qu… |
CVE-2026-41122 | High | 7.1 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30… |
CVE-2026-22927 | High | 7.8 | 2026-07-08 | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. |
CVE-2026-15053 | High | 7.5 | 2026-07-08 | Tanium addressed a denial of service vulnerability in Tanium Server. |
CVE-2026-15035 | Medium | 5.3 | 2026-07-08 | A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repos… |
CVE-2026-15034 | Medium | 4.3 | 2026-07-08 | A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by this issue is some unknown functionality. Such manipulatio… |
CVE-2026-15033 | Medium | 6.3 | 2026-07-08 | A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/p… |
CVE-2026-8315 | Medium | 5.4 | 2026-07-08 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This… |
CVE-2026-8310 | Medium | 6.1 | 2026-07-08 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. Th… |
CVE-2026-8307 | Critical | 9.8 | 2026-07-08 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. Th… |
CVE-2026-6820 | High | 7.2 | 2026-07-08 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, an… |
CVE-2026-6740 | Medium | 6.4 | 2026-07-08 | The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon'… |
CVE-2026-6459 | Medium | 6.4 | 2026-07-08 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Cale… |
CVE-2026-5459 | Medium | 5.3 | 2026-07-08 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct O… |
CVE-2026-5356 | High | 7.5 | 2026-07-08 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and… |
CVE-2026-14454 | Critical | 9.8 | 2026-07-08 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as ne… |
CVE-2026-12002 | Medium | 4.7 | 2026-07-08 | The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl… |
CVE-2026-6854 | High | 7.5 | 2026-07-08 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mc_auth' parameter in all versions up… |
CVE-2026-6818 | High | 7.2 | 2026-07-08 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'special_requests' parameter in all version… |
CVE-2026-6742 | Medium | 6.4 | 2026-07-08 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'additional' parameter in all versions up to, and including, 2026… |
CVE-2026-6371 | Medium | 4.8 | 2026-07-08 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This i… |
CVE-2026-6230 | High | 7.5 | 2026-07-08 | The Tainacan plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geoquery' parameter in all versions up to and including 1.0.3 due to… |
CVE-2026-41042 | Critical | 9.1 | 2026-07-08 | Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT param… |
CVE-2026-3688 | High | 8.1 | 2026-07-08 | The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version… |
CVE-2026-14250 | Medium | 6.3 | 2026-07-08 | The Themehunk Login Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.2. This is due to the handle_… |
CVE-2026-12936 | Medium | 4.9 | 2026-07-08 | The Recurio – Ultimate Subscription for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to… |
CVE-2026-15041 | Low | 3.7 | 2026-07-08 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password hashes instead of a co… |
CVE-2026-56003 | High | 8.5 | 2026-07-08 | A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 befor… |
CVE-2026-56002 | High | 8.5 | 2026-07-08 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code w… |
CVE-2026-6280 | Medium | 6.5 | 2026-07-08 | Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Fun… |
CVE-2026-57260 | High | 7.8 | 2026-07-08 | The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object… |
CVE-2026-57259 | Medium | 6.5 | 2026-07-08 | The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF… |
CVE-2026-57258 | Medium | 6.1 | 2026-07-08 | The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads… |
CVE-2026-57257 | Medium | 6.1 | 2026-07-08 | During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a… |
CVE-2026-57256 | High | 7.8 | 2026-07-08 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form… |
CVE-2026-57255 | Medium | 6.1 | 2026-07-08 | The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is… |
CVE-2026-57254 | High | 7.8 | 2026-07-08 | There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checki… |
CVE-2026-57253 | Medium | 6.1 | 2026-07-08 | An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, res… |
CVE-2026-57252 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel… |
CVE-2026-57251 | High | 7.8 | 2026-07-08 | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bo… |
CVE-2026-57250 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the ap… |
CVE-2026-57249 | High | 7.8 | 2026-07-08 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the r… |
CVE-2026-57248 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result… |
CVE-2026-57247 | High | 7.8 | 2026-07-08 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before… |
CVE-2026-57246 | High | 7.8 | 2026-07-08 | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin… |
CVE-2026-57245 | High | 7.8 | 2026-07-08 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationship… |
CVE-2026-57244 | High | 7.8 | 2026-07-08 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the c… |
CVE-2026-57243 | Medium | 6.1 | 2026-07-08 | During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page in… |
CVE-2026-57242 | High | 7.8 | 2026-07-08 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value val… |
CVE-2026-57241 | Medium | 6.1 | 2026-07-08 | The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose… |
CVE-2026-57240 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid point… |
CVE-2026-57239 | High | 8.2 | 2026-07-08 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate t… |
CVE-2026-57238 | High | 7.8 | 2026-07-08 | After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the appli… |
CVE-2026-57237 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program… |
CVE-2026-56001 | High | 8.5 | 2026-07-08 | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server… |
CVE-2026-56000 | High | 7.8 | 2026-07-08 | Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use Af… |
CVE-2026-55999 | High | 8.5 | 2026-07-08 | Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffe… |
CVE-2026-13129 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form obje… |
CVE-2026-13128 | High | 7.8 | 2026-07-08 | Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document vi… |