2026 CVEs (page 172)
Page 172 of 668 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19084 | High | 7.5 | 2026-08-28 | The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers… |
CVE-2026-14567 | Medium | 5.3 | 2026-08-28 | The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retriev… |
CVE-2026-14558 | High | 7.2 | 2026-08-28 | The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises user-controlled post metadata when renderi… |
CVE-2026-12514 | Medium | 5.3 | 2026-08-28 | The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handle… |
CVE-2026-12513 | Medium | 6.8 | 2026-08-28 | The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend fi… |
CVE-2026-82090 | | 2026-08-28 | Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bri… | |
CVE-2026-82089 | | 2026-08-28 | The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView. | |
CVE-2026-82082 | Critical | 9.8 | 2026-08-28 | NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute th… |
CVE-2026-82081 | Medium | 6.4 | 2026-08-28 | wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export. |
CVE-2026-77365 | High | 7.2 | 2026-08-28 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… |
CVE-2026-76053 | High | 7.2 | 2026-08-28 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key I… |
CVE-2026-3129 | Medium | 6.4 | 2026-08-28 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `<img>` tag attributes in all versions up to, and including… |
CVE-2026-18983 | High | 7.5 | 2026-08-28 | The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via th… |
CVE-2026-18978 | High | 7.2 | 2026-08-28 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to in… |
CVE-2026-18324 | High | 7.2 | 2026-08-28 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textare… |
CVE-2026-16759 | Medium | 6.5 | 2026-08-28 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation i… |
CVE-2026-16654 | Medium | 6.4 | 2026-08-28 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and includin… |
CVE-2026-15798 | Medium | 6.4 | 2026-08-28 | The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.3… |
CVE-2026-78618 | | 2026-08-28 | A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by send… | |
CVE-2026-78617 | | 2026-08-28 | WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automate… | |
CVE-2026-78616 | | 2026-08-28 | A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execu… | |
CVE-2026-78615 | | 2026-08-28 | A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authe… | |
CVE-2026-78614 | | 2026-08-28 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administr… | |
CVE-2026-78613 | | 2026-08-28 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administrat… | |
CVE-2026-78612 | | 2026-08-28 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report admin… | |
CVE-2026-78610 | | 2026-08-28 | WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global… | |
CVE-2026-78500 | | 2026-08-28 | A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to… | |
CVE-2026-78499 | | 2026-08-28 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate… | |
CVE-2026-78498 | | 2026-08-28 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerat… | |
CVE-2026-78495 | | 2026-08-28 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker… | |
CVE-2026-78174 | | 2026-08-28 | WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retr… | |
CVE-2026-78103 | | 2026-08-28 | WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/un… | |
CVE-2026-78047 | | 2026-08-28 | A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inje… | |
CVE-2026-78011 | | 2026-08-28 | An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) cond… | |
CVE-2026-78010 | | 2026-08-28 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service… | |
CVE-2026-78009 | | 2026-08-28 | An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) con… | |
CVE-2026-78008 | | 2026-08-28 | A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of… | |
CVE-2026-61802 | Medium | 6.5 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low… |
CVE-2026-61800 | Critical | 9.1 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a part… |
CVE-2026-38822 | High | 7.6 | 2026-08-28 | In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command… |
CVE-2026-38821 | High | 7.1 | 2026-08-28 | A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the o… |
CVE-2026-38820 | High | 8.3 | 2026-08-28 | openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preaut… |
CVE-2026-38819 | Medium | 5.3 | 2026-08-28 | Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device wi… |
CVE-2026-19318 | | 2026-08-28 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by se… | |
CVE-2026-19317 | | 2026-08-28 | An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) con… | |
CVE-2026-19316 | | 2026-08-28 | A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition i… | |
CVE-2026-19315 | | 2026-08-28 | A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending spec… | |
CVE-2026-19314 | | 2026-08-28 | An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) cond… | |
CVE-2026-19313 | | 2026-08-28 | An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending special… | |
CVE-2026-13108 | | 2026-08-28 | WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service. | |
CVE-2026-13086 | | 2026-08-28 | A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows… | |
CVE-2026-82072 | High | 8.8 | 2026-08-28 | Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-81851 | | 2026-08-28 | A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a d… | |
CVE-2026-81848 | Low | 3.5 | 2026-08-28 | A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file sr… |
CVE-2026-81847 | Medium | 5.5 | 2026-08-28 | A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_t… |
CVE-2026-81845 | Medium | 6.3 | 2026-08-28 | A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session/export_session of the file mcp_sequent… |
CVE-2026-81837 | Medium | 6.3 | 2026-08-28 | A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the com… |
CVE-2026-81836 | Low | 3.7 | 2026-08-28 | A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of… |
CVE-2026-81835 | Medium | 5.5 | 2026-08-28 | A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch_instructions of the file malicious_mcp_server.p… |
CVE-2026-80179 | Medium | 5.9 | 2026-08-28 | A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malfor… |
CVE-2026-78239 | Critical | 9.8 | 2026-08-28 | Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative servic… |
CVE-2026-78037 | High | 8.8 | 2026-08-28 | Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary… |
CVE-2026-77977 | High | 8.1 | 2026-08-28 | Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default c… |
CVE-2026-77358 | | 2026-08-28 | cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing t… | |
CVE-2026-77341 | | 2026-08-28 | cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directl… | |
CVE-2026-76945 | High | 7.5 | 2026-08-28 | The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate auth… |
CVE-2026-76943 | Critical | 9.8 | 2026-08-28 | Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtai… |
CVE-2026-76940 | High | 7.5 | 2026-08-28 | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacke… |
CVE-2026-76179 | Critical | 9.8 | 2026-08-28 | An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management inte… |
CVE-2026-76060 | High | 8.8 | 2026-08-28 | An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsaniti… |
CVE-2026-75814 | High | 8.8 | 2026-08-28 | The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attac… |
CVE-2026-75813 | High | 7.5 | 2026-08-28 | Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings… |
CVE-2026-75548 | Medium | 5.4 | 2026-08-28 | The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote at… |
CVE-2026-75419 | High | 8.8 | 2026-08-28 | go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer() function in app/admin/service/internal/data/data.go and app/ap… |
CVE-2026-75418 | High | 7.5 | 2026-08-28 | A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. An attacker with network access to the serve… |
CVE-2026-75417 | High | 7.2 | 2026-08-28 | A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within application/admin/controller/category.class.php… |
CVE-2026-75339 | High | 8.8 | 2026-08-28 | The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous att… |
CVE-2026-75337 | Critical | 9.8 | 2026-08-28 | The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to t… |
CVE-2026-73839 | Medium | 4.6 | 2026-08-28 | Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through v… |
CVE-2026-73809 | High | 7.5 | 2026-08-28 | A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately pr… |
CVE-2026-73125 | Critical | 9.8 | 2026-08-28 | Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated… |
CVE-2026-71396 | Medium | 5.4 | 2026-08-28 | Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control. |
CVE-2026-71187 | Critical | 9.8 | 2026-08-28 | The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication re… |
CVE-2026-69658 | Critical | 9.8 | 2026-08-28 | MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized de… |
CVE-2026-68967 | Medium | 6.5 | 2026-08-28 | Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write prim… |
CVE-2026-68929 | | 2026-08-28 | FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoint… | |
CVE-2026-67560 | High | 7.5 | 2026-08-28 | Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to re… |
CVE-2026-61783 | Medium | 6.5 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an au… |
CVE-2026-5706 | | 2026-08-28 | In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code executi… | |
CVE-2026-54330 | High | 8.1 | 2026-08-28 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway… |
CVE-2026-54085 | High | 7.1 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multip… |
CVE-2026-54084 | Medium | 5.3 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a mali… |
CVE-2026-54083 | High | 8.1 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response scr… |
CVE-2026-50152 | Critical | 9.1 | 2026-08-28 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription… |
CVE-2026-44629 | High | 7.9 | 2026-08-28 | Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series)… |
CVE-2026-39944 | High | 8.8 | 2026-08-28 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW)… |
CVE-2026-38350 | High | 7.5 | 2026-08-28 | An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS… |
CVE-2026-38349 | High | 7.5 | 2026-08-28 | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2026-38348 | High | 7.5 | 2026-08-28 | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a craf… |
CVE-2026-38347 | High | 7.5 | 2026-08-28 | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Servi… |