2026 CVEs (page 191)
Page 191 of 672 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77128 | | 2026-08-25 | The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter t… | |
CVE-2026-77127 | | 2026-08-25 | The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privil… | |
CVE-2026-63587 | High | 8.6 | 2026-08-25 | The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increme… |
CVE-2026-63586 | Critical | 9.8 | 2026-08-25 | The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Author… |
CVE-2026-56096 | | 2026-08-25 | The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors… | |
CVE-2026-56095 | | 2026-08-25 | The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data f… | |
CVE-2026-56094 | | 2026-08-25 | The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and… | |
CVE-2026-56093 | | 2026-08-25 | The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular searc… | |
CVE-2026-56092 | | 2026-08-25 | The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persist… | |
CVE-2026-17548 | | 2026-08-25 | Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to vi… | |
CVE-2026-78701 | Medium | 6.5 | 2026-08-25 | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND p… |
CVE-2026-78322 | Medium | 6.5 | 2026-08-25 | A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's… |
CVE-2026-67578 | High | 7.5 | 2026-08-25 | FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings… |
CVE-2026-66882 | | 2026-08-25 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the… | |
CVE-2026-65633 | | 2026-08-25 | Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resour… | |
CVE-2026-59769 | Critical | 9.1 | 2026-08-25 | FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the set… |
CVE-2026-19851 | High | 7.7 | 2026-08-25 | A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts crea… |
CVE-2026-18512 | Medium | 6.4 | 2026-08-25 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Bo… |
CVE-2026-18328 | High | 7.2 | 2026-08-25 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the… |
CVE-2026-18323 | High | 7.2 | 2026-08-25 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field (Save… |
CVE-2026-18100 | Medium | 6.4 | 2026-08-25 | The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf_form_id… |
CVE-2026-16601 | High | 8.8 | 2026-08-25 | The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions u… |
CVE-2026-78656 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of… |
CVE-2026-69665 | High | 7.8 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to… |
CVE-2026-68960 | High | 8.5 | 2026-08-25 | A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in… |
CVE-2026-68959 | High | 8.5 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy… |
CVE-2026-68062 | High | 8.5 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy… |
CVE-2026-66109 | High | 7.8 | 2026-08-25 | A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the… |
CVE-2026-78654 | High | 7.3 | 2026-08-25 | A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The… |
CVE-2026-78638 | Low | 3.3 | 2026-08-25 | A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Ext… |
CVE-2026-78478 | High | 8.1 | 2026-08-25 | The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attack… |
CVE-2026-78470 | Medium | 6.5 | 2026-08-25 | The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the… |
CVE-2026-78637 | High | 7.3 | 2026-08-25 | A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pd… |
CVE-2026-13215 | Medium | 6.8 | 2026-08-25 | The Zephyr ext2 filesystem driver fails to validate the s_log_block_size field of the on-disk superblock when mounting a filesystem. ext2_verify_disk_superbloc… |
CVE-2026-13214 | Critical | 9.8 | 2026-08-25 | The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request from th… |
CVE-2026-12561 | Medium | 6.4 | 2026-08-25 | The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in all versions up to and including 5.4.5… |
CVE-2026-76063 | Medium | 6.4 | 2026-08-25 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' paramete… |
CVE-2026-75930 | Medium | 4.3 | 2026-08-25 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. Thi… |
CVE-2026-19943 | Medium | 6.4 | 2026-08-25 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titleTag' Block Attribute… |
CVE-2026-19892 | High | 8.8 | 2026-08-25 | The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to… |
CVE-2026-17089 | Medium | 6.1 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parame… |
CVE-2026-14280 | Medium | 6.6 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7… |
CVE-2026-78685 | High | 8.8 | 2026-08-25 | Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS com… |
CVE-2026-75982 | Medium | 4.4 | 2026-08-25 | The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the l… |
CVE-2026-75019 | Medium | 6.4 | 2026-08-25 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2026-10627 | Medium | 5.3 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7… |
CVE-2026-78683 | Critical | 9.6 | 2026-08-25 | NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/trans… |
CVE-2026-78682 | High | 7.5 | 2026-08-25 | NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/d… |
CVE-2026-78681 | High | 7.5 | 2026-08-25 | NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft… |
CVE-2026-78680 | High | 7.8 | 2026-08-25 | NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, a… |
CVE-2026-78679 | Medium | 6.5 | 2026-08-25 | GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe optio… |
CVE-2026-78678 | Medium | 6.5 | 2026-08-25 | GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attacke… |
CVE-2026-78677 | High | 7.5 | 2026-08-25 | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clo… |
CVE-2026-78676 | Critical | 9.8 | 2026-08-25 | GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected direc… |
CVE-2026-78675 | High | 8.4 | 2026-08-25 | GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file… |
CVE-2026-76846 | High | 7.5 | 2026-08-25 | Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets. Attack… |
CVE-2026-76839 | Medium | 6.5 | 2026-08-25 | Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet() and offsetexists() methods that lack field… |
CVE-2026-75575 | Medium | 5.3 | 2026-08-25 | Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The me… |
CVE-2026-75574 | High | 8.8 | 2026-08-25 | The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authent… |
CVE-2026-72702 | Medium | 5.4 | 2026-08-25 | Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer() and Pages::referrerRoute() methods, which validate the Referer header using… |
CVE-2026-72701 | Low | 3.7 | 2026-08-25 | Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison with the === operator instead of h… |
CVE-2026-72700 | High | 7.5 | 2026-08-25 | The getgrav/grav-plugin-login Composer plugin before 3.9.1 (used by Grav) compares password reset and account activation tokens using a non-constant-time === s… |
CVE-2026-72699 | Medium | 5.3 | 2026-08-25 | The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register() method in classes/Login.php throws a… |
CVE-2026-72698 | Medium | 6.5 | 2026-08-25 | Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing content editors to read sensitive confi… |
CVE-2026-72697 | Medium | 6.5 | 2026-08-25 | Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to validate filesystem paths, allowing authent… |
CVE-2026-72696 | High | 8.4 | 2026-08-25 | Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows local attackers to overwrite arbitrary files b… |
CVE-2026-72695 | High | 8.1 | 2026-08-25 | Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile() that allows authenticated users with media management permissions… |
CVE-2026-56710 | Critical | 9.8 | 2026-08-25 | Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler. An attacker with a… |
CVE-2026-56709 | High | 7.5 | 2026-08-25 | Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail() function when constructing token-bearing invitation links. Attackers ca… |
CVE-2026-56708 | Medium | 5.3 | 2026-08-25 | Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by D… |
CVE-2026-56707 | High | 7.7 | 2026-08-25 | Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-e… |
CVE-2026-56706 | Medium | 6.8 | 2026-08-25 | Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing an… |
CVE-2026-56705 | Critical | 9.8 | 2026-08-25 | Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via… |
CVE-2026-56704 | Medium | 6.1 | 2026-08-25 | Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controllin… |
CVE-2026-56703 | High | 7.2 | 2026-08-25 | Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Auth… |
CVE-2026-56702 | High | 8.8 | 2026-08-25 | Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP f… |
CVE-2026-34968 | High | 8.1 | 2026-08-25 | Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions bef… |
CVE-2026-34967 | Medium | 5.4 | 2026-08-25 | Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php… |
CVE-2026-34964 | Medium | 5.8 | 2026-08-25 | Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for… |
CVE-2026-34959 | Medium | 4.7 | 2026-08-25 | Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no trusted-proxy check and no validation of t… |
CVE-2026-19801 | Medium | 4.3 | 2026-08-25 | The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all vers… |
CVE-2026-16434 | | 2026-08-25 | Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability (GHSA-8478-xrj3-h9c2). The validation guar… | |
CVE-2026-15023 | Medium | 6.5 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'meta_key' via Event/Locatio… |
CVE-2026-10630 | Medium | 4.3 | 2026-08-25 | The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Objec… |
CVE-2026-66766 | High | 7.5 | 2026-08-25 | SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacke… |
CVE-2026-59183 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.1… |
CVE-2026-55373 | Medium | 6.2 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.1… |
CVE-2026-55371 | | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Version… | |
CVE-2026-55059 | Medium | 6.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.1… |
CVE-2026-54920 | Unrated | | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.1… |
CVE-2026-53532 | | 2026-08-24 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.1… | |
CVE-2026-78435 | Low | 3.8 | 2026-08-24 | A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsControlle… |
CVE-2026-78434 | Medium | 6.5 | 2026-08-24 | A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpde… |
CVE-2026-78284 | High | 8.6 | 2026-08-24 | Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions. |
CVE-2026-78282 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions. |
CVE-2026-78268 | High | 7.5 | 2026-08-24 | Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versi… |
CVE-2026-78267 | Critical | 9.8 | 2026-08-24 | Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions. |
CVE-2026-78266 | Medium | 6.5 | 2026-08-24 | Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions. |
CVE-2026-78265 | Critical | 9.8 | 2026-08-24 | Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions. |
CVE-2026-78264 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions. |