2026 CVEs (page 190)
Page 190 of 672 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70551 | High | 8.5 | 2026-08-25 | A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL. |
CVE-2026-69104 | High | 7.6 | 2026-08-25 | An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unautho… |
CVE-2026-55624 | | 2026-08-25 | MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blo… | |
CVE-2026-55541 | | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _create_agents_app()… | |
CVE-2026-55540 | High | 7.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.realpath() for the wo… |
CVE-2026-55538 | High | 7.3 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config["api_key"] but _create_agents_app() does not authentic… |
CVE-2026-55537 | High | 7.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.g… |
CVE-2026-55535 | Medium | 6.8 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind th… |
CVE-2026-55534 | High | 8.6 | 2026-08-25 | PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --api-key but _create_agents_app() does not authent… |
CVE-2026-55531 | Medium | 6.5 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creates a new _sessions entry for every initialize req… |
CVE-2026-55530 | Medium | 6.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools… |
CVE-2026-55529 | Medium | 6.9 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so… |
CVE-2026-55528 | High | 8.2 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not chec… |
CVE-2026-55527 | High | 7.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized user_id into self.user_path. A caller su… |
CVE-2026-55526 | High | 8.5 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_pag… |
CVE-2026-16599 | | 2026-08-25 | GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line… | |
CVE-2026-16286 | Critical | 9.8 | 2026-08-25 | Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Sof… |
CVE-2026-15310 | | 2026-08-25 | When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possi… | |
CVE-2026-79655 | High | 7.8 | 2026-08-25 | A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By… |
CVE-2026-79623 | Medium | 6.3 | 2026-08-25 | A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of… |
CVE-2026-79622 | High | 7.3 | 2026-08-25 | A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-… |
CVE-2026-55525 | High | 7.5 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _crawl_with_httpx uses h… |
CVE-2026-79406 | Medium | 4.3 | 2026-08-25 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/upd… |
CVE-2026-78887 | Low | 3.7 | 2026-08-25 | A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Execut… |
CVE-2026-78886 | Low | 3.7 | 2026-08-25 | A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controll… |
CVE-2026-78885 | Medium | 5.6 | 2026-08-25 | A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService… |
CVE-2026-78581 | Medium | 4.2 | 2026-08-25 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constr… |
CVE-2026-77998 | | 2026-08-25 | Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On –… | |
CVE-2026-75803 | Critical | 9.1 | 2026-08-25 | Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the… |
CVE-2026-63076 | High | 7.5 | 2026-08-25 | Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before t… |
CVE-2026-63075 | High | 7.5 | 2026-08-25 | Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC… |
CVE-2026-63074 | Medium | 5.9 | 2026-08-25 | Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (fo… |
CVE-2026-63073 | Critical | 9.8 | 2026-08-25 | Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Im… |
CVE-2026-63072 | High | 7.5 | 2026-08-25 | Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can wr… |
CVE-2026-57863 | High | 8.8 | 2026-08-25 | Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files o… |
CVE-2026-54874 | High | 7.5 | 2026-08-25 | Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requ… |
CVE-2026-18798 | High | 7.5 | 2026-08-25 | Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads… |
CVE-2026-14457 | High | 7.5 | 2026-08-25 | Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) confi… |
CVE-2026-79673 | Medium | 6.5 | 2026-08-25 | Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An at… |
CVE-2026-79672 | Medium | 5.5 | 2026-08-25 | Ech0 before 4.4.3 fails to enforce scope-based authorization on nine comment panel admin endpoints, allowing access tokens with minimal scopes to perform full… |
CVE-2026-79671 | Medium | 5.5 | 2026-08-25 | Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function (webhook_setting_service.go), which only validates li… |
CVE-2026-79670 | Medium | 4.8 | 2026-08-25 | Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied heade… |
CVE-2026-79669 | Medium | 4.3 | 2026-08-25 | Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers ca… |
CVE-2026-79668 | Medium | 5.3 | 2026-08-25 | Ech0 before 4.7.3 contains an authentication bypass vulnerability in the PUT /api/echo/like/:id endpoint that allows unauthenticated attackers to increment eng… |
CVE-2026-79667 | High | 7.6 | 2026-08-25 | Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token (least-privilege) restrictions on several privileged admin routes. Multiple privil… |
CVE-2026-79666 | Medium | 6.5 | 2026-08-25 | Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers wit… |
CVE-2026-79665 | High | 8.8 | 2026-08-25 | Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non… |
CVE-2026-79664 | High | 7.4 | 2026-08-25 | Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after… |
CVE-2026-79663 | Medium | 4.8 | 2026-08-25 | Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML es… |
CVE-2026-79662 | High | 8.0 | 2026-08-25 | Ech0 through 4.5.6 contains an OAuth redirect URI validation vulnerability in parseAndValidateClientRedirect (internal/service/auth/auth.go) that compares only… |
CVE-2026-79661 | Medium | 6.5 | 2026-08-25 | Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers… |
CVE-2026-79660 | Medium | 5.3 | 2026-08-25 | Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Un… |
CVE-2026-79659 | High | 7.7 | 2026-08-25 | Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe… |
CVE-2026-79658 | High | 7.5 | 2026-08-25 | Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The… |
CVE-2026-79657 | Critical | 9.8 | 2026-08-25 | NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific… |
CVE-2026-78864 | Medium | 6.3 | 2026-08-25 | A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journ… |
CVE-2026-78684 | Medium | 5.3 | 2026-08-25 | vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can a… |
CVE-2026-77997 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com… | |
CVE-2026-77996 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a X… | |
CVE-2026-77824 | Medium | 4.9 | 2026-08-25 | The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and inc… |
CVE-2026-75971 | High | 7.2 | 2026-08-25 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions… |
CVE-2026-75908 | Medium | 4.3 | 2026-08-25 | The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly v… |
CVE-2026-57910 | | 2026-08-25 | Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevat… | |
CVE-2026-57909 | | 2026-08-25 | A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected sy… | |
CVE-2026-19949 | High | 8.8 | 2026-08-25 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and includi… |
CVE-2026-18547 | Medium | 6.4 | 2026-08-25 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored… |
CVE-2026-17587 | Medium | 5.3 | 2026-08-25 | The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3… |
CVE-2026-79652 | Medium | 5.9 | 2026-08-25 | A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handl… |
CVE-2026-78863 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre… |
CVE-2026-59335 | High | 8.7 | 2026-08-25 | Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote aut… |
CVE-2026-55976 | Critical | 9.1 | 2026-08-25 | Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privil… |
CVE-2026-53561 | High | 7.4 | 2026-08-25 | An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on depl… |
CVE-2026-49845 | Critical | 9.8 | 2026-08-25 | SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hiv… |
CVE-2026-21758 | Low | 3.7 | 2026-08-25 | HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment. |
CVE-2026-21754 | Medium | 5.4 | 2026-08-25 | HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakou… |
CVE-2026-21753 | Medium | 4.2 | 2026-08-25 | HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependen… |
CVE-2026-12600 | | 2026-08-25 | Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an applicatio… | |
CVE-2026-76128 | Medium | 6.4 | 2026-08-25 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and incl… |
CVE-2026-75038 | Medium | 6.1 | 2026-08-25 | UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0. |
CVE-2026-75037 | High | 7.0 | 2026-08-25 | Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by… |
CVE-2026-49050 | High | 8.8 | 2026-08-25 | General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade t… |
CVE-2026-16231 | High | 8.1 | 2026-08-25 | hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaqu… |
CVE-2026-12878 | High | 8.8 | 2026-08-25 | In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions. |
CVE-2026-77146 | | 2026-08-25 | The extension's invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), all… | |
CVE-2026-77145 | | 2026-08-25 | The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event… | |
CVE-2026-77144 | | 2026-08-25 | The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its ow… | |
CVE-2026-77143 | | 2026-08-25 | The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows… | |
CVE-2026-77142 | | 2026-08-25 | The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own… | |
CVE-2026-77141 | | 2026-08-25 | The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no owner… | |
CVE-2026-77140 | | 2026-08-25 | The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An… | |
CVE-2026-77139 | | 2026-08-25 | The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An auth… | |
CVE-2026-77138 | | 2026-08-25 | The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attack… | |
CVE-2026-77137 | | 2026-08-25 | The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL th… | |
CVE-2026-77136 | | 2026-08-25 | The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, wi… | |
CVE-2026-77135 | | 2026-08-25 | The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to t… | |
CVE-2026-77134 | | 2026-08-25 | The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainabl… | |
CVE-2026-77133 | | 2026-08-25 | The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field… | |
CVE-2026-77131 | | 2026-08-25 | When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the at… | |
CVE-2026-77130 | | 2026-08-25 | The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with… | |
CVE-2026-77129 | | 2026-08-25 | The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to… |