2026 CVEs (page 188)
Page 188 of 679 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-43621 | High | 8.1 | 2026-08-26 | Simple Machines Forum (SMF) through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows a… |
CVE-2026-21810 | Medium | 4.4 | 2026-08-26 | HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain… |
CVE-2026-21809 | Low | 3.9 | 2026-08-26 | HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can… |
CVE-2026-16809 | | 2026-08-26 | LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged… | |
CVE-2026-79921 | | 2026-08-26 | amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process… | |
CVE-2026-77573 | Low | 3.5 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component… |
CVE-2026-77507 | Medium | 5.3 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do… |
CVE-2026-75415 | High | 7.5 | 2026-08-26 | AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of t… |
CVE-2026-75414 | Critical | 9.8 | 2026-08-26 | In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerabili… |
CVE-2026-75413 | High | 7.5 | 2026-08-26 | DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and downlo… |
CVE-2026-75411 | Critical | 9.8 | 2026-08-26 | JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the `SecurityC… |
CVE-2026-75364 | Medium | 6.8 | 2026-08-26 | Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt fails to sanitize the display_name… |
CVE-2026-75363 | Medium | 6.8 | 2026-08-26 | An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters… |
CVE-2026-62326 | Medium | 6.5 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit sourc… |
CVE-2026-62249 | Medium | 4.3 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to… |
CVE-2026-61792 | High | 7.7 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read fil… |
CVE-2026-61790 | Medium | 4.4 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a team can require its members to co… |
CVE-2026-55228 | High | 8.1 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did not properly enforc… |
CVE-2026-55227 | Medium | 4.3 | 2026-08-26 | Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting th… |
CVE-2026-52473 | Medium | 4.3 | 2026-08-26 | An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder. |
CVE-2026-52103 | Critical | 9.8 | 2026-08-26 | A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbit… |
CVE-2026-39275 | Medium | 6.1 | 2026-08-26 | Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and… |
CVE-2026-15973 | | 2026-08-26 | LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user w… | |
CVE-2026-79939 | Medium | 5.8 | 2026-08-26 | Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local… |
CVE-2026-79938 | High | 7.6 | 2026-08-26 | Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could… |
CVE-2026-77652 | High | 7.8 | 2026-08-26 | A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer al… |
CVE-2026-77508 | Low | 3.5 | 2026-08-26 | Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/u… |
CVE-2026-75601 | Medium | 4.3 | 2026-08-26 | Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics fe… |
CVE-2026-75334 | Critical | 9.8 | 2026-08-26 | The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the t_report_sql_res… |
CVE-2026-75327 | Critical | 9.8 | 2026-08-26 | In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability: |
CVE-2026-74774 | Medium | 5.9 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access co… |
CVE-2026-74771 | Medium | 6.5 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with r… |
CVE-2026-74770 | High | 8.8 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulne… |
CVE-2026-71172 | Medium | 4.3 | 2026-08-26 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access… |
CVE-2026-71054 | Medium | 6.5 | 2026-08-26 | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unaut… |
CVE-2026-68863 | High | 7.5 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could p… |
CVE-2026-68861 | High | 8.8 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulne… |
CVE-2026-68000 | Critical | 9.8 | 2026-08-26 | The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause of… |
CVE-2026-67275 | Medium | 5.3 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with… |
CVE-2026-66003 | | 2026-08-26 | Frappe is a full-stack web application framework written in Python and JavaScript. Prior to version 15.115.0, an access control bypass in the REST API allows a… | |
CVE-2026-60004 | Critical | 9.8 | 2026-08-26 | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. |
CVE-2026-56547 | Low | 3.5 | 2026-08-26 | The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Addres… |
CVE-2026-54245 | | 2026-08-26 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is v… | |
CVE-2026-49809 | Medium | 6.5 | 2026-08-26 | Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… |
CVE-2026-47848 | Medium | 6.1 | 2026-08-26 | In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this… |
CVE-2026-47844 | Medium | 5.3 | 2026-08-26 | In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be conf… |
CVE-2026-47843 | Low | 3.7 | 2026-08-26 | In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS re… |
CVE-2026-47842 | Medium | 6.5 | 2026-08-26 | Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES… |
CVE-2026-47834 | Medium | 4.8 | 2026-08-26 | Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring… |
CVE-2026-46371 | Medium | 6.5 | 2026-08-26 | Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/… |
CVE-2026-46370 | Medium | 6.5 | 2026-08-26 | Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint (GET /api/v1/flee… |
CVE-2026-46369 | High | 7.5 | 2026-08-26 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict… |
CVE-2026-26449 | High | 7.5 | 2026-08-26 | In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference (or access to invalid… |
CVE-2026-26448 | Critical | 9.8 | 2026-08-26 | Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client (or a… |
CVE-2026-26447 | High | 7.5 | 2026-08-26 | Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and the… |
CVE-2026-26446 | High | 7.5 | 2026-08-26 | Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server proces… |
CVE-2026-26445 | High | 7.5 | 2026-08-26 | stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with th… |
CVE-2026-79940 | Medium | 5.9 | 2026-08-26 | Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated… |
CVE-2026-75466 | Medium | 6.5 | 2026-08-26 | libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palet… |
CVE-2026-75325 | Critical | 9.8 | 2026-08-26 | DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters. |
CVE-2026-71171 | High | 7.2 | 2026-08-26 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu… |
CVE-2026-70419 | Critical | 9.1 | 2026-08-26 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu… |
CVE-2026-63179 | Medium | 4.9 | 2026-08-26 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose… |
CVE-2026-51106 | Critical | 9.3 | 2026-08-26 | An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component |
CVE-2026-48786 | Medium | 6.5 | 2026-08-26 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint (POST /api/latest/fleet/targets) r… |
CVE-2026-41262 | Medium | 4.3 | 2026-08-26 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.85.0, the global policy read endpoint (GET /api/latest/fleet/polici… |
CVE-2026-36851 | High | 7.5 | 2026-08-26 | Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration. |
CVE-2026-19485 | | 2026-08-26 | A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud… | |
CVE-2026-76784 | | 2026-08-26 | Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacke… | |
CVE-2026-58474 | High | 8.8 | 2026-08-26 | whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace reposit… |
CVE-2026-54256 | Medium | 5.4 | 2026-08-26 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload form widget truste… |
CVE-2026-47841 | High | 7.4 | 2026-08-26 | An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Secur… |
CVE-2026-47837 | Medium | 6.8 | 2026-08-26 | Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpo… |
CVE-2026-47836 | High | 7.2 | 2026-08-26 | The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check… |
CVE-2026-32639 | Medium | 6.8 | 2026-08-26 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handl… |
CVE-2026-32593 | Medium | 5.9 | 2026-08-26 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter widget is vulnerable t… |
CVE-2026-35445 | | 2026-08-26 | Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the handler name submit… | |
CVE-2026-32258 | High | 8.1 | 2026-08-26 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated backend users with… |
CVE-2026-32257 | High | 8.1 | 2026-08-26 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settin… |
CVE-2026-81036 | High | 8.1 | 2026-08-26 | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crate… |
CVE-2026-81035 | High | 8.1 | 2026-08-26 | Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, w… |
CVE-2026-81034 | Medium | 6.5 | 2026-08-26 | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose s… |
CVE-2026-81033 | Medium | 5.3 | 2026-08-26 | Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/in… |
CVE-2026-81032 | Critical | 9.8 | 2026-08-26 | NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp… |
CVE-2026-81031 | High | 7.2 | 2026-08-26 | IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controll… |
CVE-2026-81030 | Medium | 6.5 | 2026-08-26 | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai/api/resources/BrowserItemResource… |
CVE-2026-81029 | High | 8.1 | 2026-08-26 | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request para… |
CVE-2026-81028 | Medium | 4.9 | 2026-08-26 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The c… |
CVE-2026-81027 | High | 8.5 | 2026-08-26 | one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix o… |
CVE-2026-80428 | Critical | 9.8 | 2026-08-26 | ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arb… |
CVE-2026-80427 | High | 8.4 | 2026-08-26 | bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied sour… |
CVE-2026-80426 | High | 7.1 | 2026-08-26 | FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.t… |
CVE-2026-54614 | Medium | 4.3 | 2026-08-26 | DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewContro… |
CVE-2026-54606 | | 2026-08-26 | SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/mo… | |
CVE-2026-54569 | Critical | 9.8 | 2026-08-26 | SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthentic… |
CVE-2026-48549 | Medium | 6.5 | 2026-08-26 | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie pr… |
CVE-2026-48548 | Medium | 6.5 | 2026-08-26 | Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagForm… |
CVE-2026-80589 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_release() undoes blk… |
CVE-2026-80588 | High | 7.5 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mpt… |
CVE-2026-80587 | Critical | 9.8 | 2026-08-26 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclus… |