2026 CVEs (page 169)
Page 169 of 668 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-51639 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi sche… |
CVE-2026-51638 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configurat… |
CVE-2026-51637 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain mesh portal table i… |
CVE-2026-51636 | Critical | 9.1 | 2026-08-28 | Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi ACL rules via se… |
CVE-2026-51635 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi scheduling ru… |
CVE-2026-51634 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain core wireless settings… |
CVE-2026-51633 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain simplified guest W… |
CVE-2026-51632 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain advanced wireless s… |
CVE-2026-51631 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS runtime status… |
CVE-2026-51630 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS configuration, includi… |
CVE-2026-51629 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain static DHCP reserva… |
CVE-2026-51628 | Critical | 9.1 | 2026-08-28 | Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to generate and retrieve a… |
CVE-2026-51627 | High | 7.5 | 2026-08-28 | Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration… |
CVE-2026-51626 | Critical | 9.1 | 2026-08-28 | Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS configuration, inclu… |
CVE-2026-51625 | High | 7.5 | 2026-08-28 | Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive information s… |
CVE-2026-51624 | High | 7.5 | 2026-08-28 | Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain a client MAC address… |
CVE-2026-51623 | High | 7.5 | 2026-08-28 | Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS runtime status and… |
CVE-2026-51622 | Critical | 9.1 | 2026-08-28 | Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN configuration data via s… |
CVE-2026-51621 | High | 7.5 | 2026-08-28 | Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive device configurat… |
CVE-2026-51620 | High | 7.5 | 2026-08-28 | Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain network topology and int… |
CVE-2026-51619 | High | 7.5 | 2026-08-28 | Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain online client informat… |
CVE-2026-51618 | High | 7.5 | 2026-08-28 | Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain setup wizard and onboardi… |
CVE-2026-51617 | High | 7.5 | 2026-08-28 | Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive information… |
CVE-2026-51616 | High | 7.5 | 2026-08-28 | Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP co… |
CVE-2026-51615 | High | 7.5 | 2026-08-28 | Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP conf… |
CVE-2026-51614 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain access-device polic… |
CVE-2026-51613 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the getDeviceInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain device identification de… |
CVE-2026-51611 | Critical | 9.8 | 2026-08-28 | Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily force a reboot v… |
CVE-2026-51610 | Medium | 4.3 | 2026-08-28 | Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily force an immediate r… |
CVE-2026-51376 | Medium | 6.5 | 2026-08-28 | An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache |
CVE-2026-50980 | Medium | 6.1 | 2026-08-28 | Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScri… |
CVE-2026-39071 | Medium | 5.4 | 2026-08-28 | WordPress plugin (Spiffy Plugin) before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privil… |
CVE-2026-39070 | Medium | 4.8 | 2026-08-28 | WordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged… |
CVE-2026-82330 | Medium | 6.1 | 2026-08-28 | A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memo… |
CVE-2026-82328 | Medium | 6.1 | 2026-08-28 | A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palet… |
CVE-2026-82327 | Medium | 5.5 | 2026-08-28 | A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache file… |
CVE-2026-82324 | Medium | 6.1 | 2026-08-28 | A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the… |
CVE-2026-82227 | High | 8.5 | 2026-08-28 | Contributor SQL Injection in WPBulky <= 1.2.2 versions. |
CVE-2026-82220 | Medium | 5.3 | 2026-08-28 | Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions. |
CVE-2026-82181 | Medium | 5.5 | 2026-08-28 | Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive informa… |
CVE-2026-82112 | Low | 3.5 | 2026-08-28 | A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component code_task_fi… |
CVE-2026-82078 | Critical | 9.1 | 2026-08-28 | An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database… |
CVE-2026-81767 | High | 7.5 | 2026-08-28 | Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions. |
CVE-2026-81761 | Medium | 4.3 | 2026-08-28 | Subscriber Broken Access Control in WpEvently <= 5.5.0 versions. |
CVE-2026-81760 | High | 7.1 | 2026-08-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue af… |
CVE-2026-81759 | Medium | 5.4 | 2026-08-28 | Contributor Broken Access Control in WpEvently <= 5.5.0 versions. |
CVE-2026-81757 | High | 7.2 | 2026-08-28 | Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions. |
CVE-2026-81578 | Critical | 9.8 | 2026-08-28 | An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remo… |
CVE-2026-81341 | Medium | 6.5 | 2026-08-28 | wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number car… |
CVE-2026-81299 | Medium | 4.3 | 2026-08-28 | Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions. |
CVE-2026-81285 | High | 7.5 | 2026-08-28 | Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions. |
CVE-2026-81284 | Medium | 4.3 | 2026-08-28 | Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions. |
CVE-2026-81020 | High | 7.4 | 2026-08-28 | wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL… |
CVE-2026-81019 | High | 7.4 | 2026-08-28 | wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every… |
CVE-2026-75758 | | 2026-08-28 | Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_ch… | |
CVE-2026-6176 | High | 7.2 | 2026-08-28 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up… |
CVE-2026-5953 | Medium | 6.1 | 2026-08-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. … |
CVE-2026-5934 | High | 7.2 | 2026-08-28 | The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input s… |
CVE-2026-5800 | Medium | 6.1 | 2026-08-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platf… |
CVE-2026-5096 | Medium | 5.3 | 2026-08-28 | The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the `load_previ… |
CVE-2026-58107 | | 2026-08-28 | CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompr… | |
CVE-2026-58106 | | 2026-08-28 | CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-to… | |
CVE-2026-56854 | High | 7.5 | 2026-08-28 | The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyC… |
CVE-2026-50979 | High | 8.1 | 2026-08-28 | A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute ar… |
CVE-2026-4378 | Medium | 5.4 | 2026-08-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack… |
CVE-2026-3423 | Medium | 6.4 | 2026-08-28 | The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, a… |
CVE-2026-38725 | Medium | 5.4 | 2026-08-28 | xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in a… |
CVE-2026-38638 | High | 7.5 | 2026-08-28 | An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2026-38636 | High | 7.5 | 2026-08-28 | An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2026-38093 | Low | 3.3 | 2026-08-28 | file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation. The op… |
CVE-2026-37751 | Critical | 9.8 | 2026-08-28 | An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arb… |
CVE-2026-37736 | High | 7.5 | 2026-08-28 | An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2026-37710 | Medium | 6.1 | 2026-08-28 | Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function |
CVE-2026-37237 | High | 7.5 | 2026-08-28 | vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch… |
CVE-2026-37236 | Critical | 9.8 | 2026-08-28 | grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restr… |
CVE-2026-19412 | | 2026-08-28 | This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are i… | |
CVE-2026-15603 | Medium | 5.3 | 2026-08-28 | morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the… |
CVE-2026-13761 | | 2026-08-28 | Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial… | |
CVE-2026-82261 | High | 7.5 | 2026-08-28 | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form des… |
CVE-2026-82260 | High | 7.5 | 2026-08-28 | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory ex… |
CVE-2026-82259 | High | 7.5 | 2026-08-28 | SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experimental form remote function. When an app… |
CVE-2026-82258 | Medium | 4.8 | 2026-08-28 | SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a sing… |
CVE-2026-82257 | Medium | 4.3 | 2026-08-28 | SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-control… |
CVE-2026-82256 | Medium | 5.3 | 2026-08-28 | SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads… |
CVE-2026-82255 | Medium | 6.8 | 2026-08-28 | gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controll… |
CVE-2026-82254 | High | 7.5 | 2026-08-28 | gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attack… |
CVE-2026-82253 | High | 7.5 | 2026-08-28 | gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate… |
CVE-2026-82252 | High | 7.5 | 2026-08-28 | gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadat… |
CVE-2026-82251 | High | 7.5 | 2026-08-28 | gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attac… |
CVE-2026-82250 | Medium | 6.5 | 2026-08-28 | gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines w… |
CVE-2026-82249 | Low | 3.1 | 2026-08-28 | gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carri… |
CVE-2026-82248 | Medium | 5.3 | 2026-08-28 | gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing te… |
CVE-2026-82247 | High | 7.5 | 2026-08-28 | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as terminating the authority component, cont… |
CVE-2026-82246 | High | 7.1 | 2026-08-28 | Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs befor… |
CVE-2026-82245 | High | 8.1 | 2026-08-28 | Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or man… |
CVE-2026-82244 | Critical | 9.1 | 2026-08-28 | Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary cod… |
CVE-2026-82243 | High | 7.6 | 2026-08-28 | Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply… |
CVE-2026-82242 | High | 7.7 | 2026-08-28 | Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders… |
CVE-2026-82241 | High | 7.1 | 2026-08-28 | Budibase backend-core (@budibase/backend-core, as used by @budibase/server) omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist… |
CVE-2026-82240 | High | 8.1 | 2026-08-28 | Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scop… |