2026 CVEs (page 191)

Page 191 of 471 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 191 of 471)
CVESeverityScorePublishedSummary
CVE-2026-53279Medium5.52026-06-26In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C ada…
CVE-2026-53278Medium5.52026-06-26In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_comp…
CVE-2026-52785Critical9.92026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProjec…
CVE-2026-52784High8.82026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a CSRF on TARGET through /users/:id via POST parameter…
CVE-2026-52783High8.22026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint use…
CVE-2026-52782Critical9.92026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects/<A>/settings/project_storages…
CVE-2026-52781Medium6.42026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the HTML sanitizer grants <macro> elements unrestricted data-* a…
CVE-2026-52780Critical9.62026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This…
CVE-2026-52779Medium5.42026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, a cross-project IDOR / authorization context confusion in the Ca…
CVE-2026-49991High8.62026-06-26RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject permission on their own bucket can exploi…
CVE-2026-49355Medium4.32026-06-26OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET /api/v3/meetings/:meeting_id/agenda_items/:agenda_item_id` discloses p…
CVE-2026-47193High7.52026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field valu…
CVE-2026-46386Critical9.92026-06-26OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRET_KEY_BASE=OVERW…
CVE-2026-44736Medium6.52026-06-26OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authenticated user to retriev…
CVE-2026-44735Medium6.52026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL wo…
CVE-2026-44734Medium6.52026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, a Missing Authorization vulnerability exists in OpenProject's Co…
CVE-2026-44733Medium5.92026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, Business Logic Error on OpenProject through PATCH request to /ap…
CVE-2026-44732Medium4.32026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, OpenProject exposes a document update endpoint used to modify ex…
CVE-2026-44731Medium4.32026-06-26OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the web application's meetings filter feature leaks whether a gi…
CVE-2026-44696Medium5.72026-06-26OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text (markdown) rendering pipeline uses Sanitize::Config…
CVE-2026-32833High8.82026-06-26Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary…
CVE-2026-29509Medium5.42026-06-26Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.1…
CVE-2026-54753Medium5.92026-06-26Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and 23.0.0-beta.2, the local HTTP server started by nx graph sent Acc…
CVE-2026-48090Medium5.92026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (envoy.filte…
CVE-2026-47220High7.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y…
CVE-2026-47205Medium5.92026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF) vul…
CVE-2026-13372High7.22026-06-26Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authen…
CVE-2026-56876High8.12026-06-26extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like…
CVE-2026-55448Medium6.32026-06-26mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026.6.4, mise loads github.credential_command from local project config b…
CVE-2026-55441High8.62026-06-26mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through…
CVE-2026-54557Medium5.52026-06-26mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP backend builds its install symlink destination from the raw re…
CVE-2026-54341High7.52026-06-26Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in Drago…
CVE-2026-48743High7.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a down…
CVE-2026-48706Medium5.92026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulnerability e…
CVE-2026-48497Medium5.92026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS fil…
CVE-2026-48044High7.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability…
CVE-2026-48042High7.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object…
CVE-2026-47778Medium4.42026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a structural flaw was iden…
CVE-2026-47775Medium6.82026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's e…
CVE-2026-47692Medium4.82026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol v2…
CVE-2026-47221Medium5.92026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router filter…
CVE-2026-47207Medium6.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if…
CVE-2026-472062026-06-26Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply…
CVE-2026-47204Medium6.52026-06-26Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the envoy.filters…
CVE-2026-33646Critical9.62026-06-26mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during…
CVE-2026-57518High8.82026-06-26Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privilege…
CVE-2026-57231High7.52026-06-26Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no va…
CVE-2026-56823Medium5.42026-06-26AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the `POST /api/integratio…
CVE-2026-56663High8.52026-06-26AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated us…
CVE-2026-55686Medium5.32026-06-26Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink ca…
CVE-2026-55677High7.52026-06-26Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the…
CVE-2026-54636Critical9.02026-06-26Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku user. An app…
CVE-2026-48529Medium6.02026-06-26GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is impl…
CVE-2026-45408Critical9.02026-06-26Dokku is a docker-powered PaaS. Prior to 0.38.2, the app name validation regex (^[a-z0-9][^/:_A-Z]*$) permits shell metacharacters. When an authenticated user…
CVE-2026-45407Medium5.02026-06-26Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of…
CVE-2026-45406Critical9.02026-06-26Dokku is a docker-powered PaaS. Prior to 0.38.2, the openresty-vhosts plugin copies files from an app's openresty/http-includes/ git repository directory to th…
CVE-2026-45405Critical9.02026-06-26Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/zip archives into temporary directories…
CVE-2026-28385Medium5.02026-06-26In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users wit…
CVE-2026-13434Medium4.92026-06-26A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied n…
CVE-2026-117792026-06-26An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.
CVE-2026-9640High7.22026-06-26A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restrict…
CVE-2026-9639Medium6.52026-06-26Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes…
CVE-2026-5757High7.52026-06-26Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap m…
CVE-2026-47214High7.12026-06-26Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backen…
CVE-2026-45195High7.82026-06-26Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted r…
CVE-2026-44018Medium5.52026-06-26Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the ME…
CVE-2026-21734High7.72026-06-26A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co…
CVE-2026-12411High8.42026-06-26Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's cust…
CVE-2026-0828High7.52026-06-26Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and t…
CVE-2026-0685Critical9.82026-06-26Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote co…
CVE-2026-9699Medium6.82026-06-26Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with acces…
CVE-2026-57667High8.52026-06-26Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
CVE-2026-57665Medium5.32026-06-26Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.
CVE-2026-57664Medium4.32026-06-26Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.
CVE-2026-57663High8.52026-06-26Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.
CVE-2026-57662High8.52026-06-26Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.
CVE-2026-57661Medium5.42026-06-26Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
CVE-2026-57660Medium5.32026-06-26Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
CVE-2026-57659High8.82026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions.
CVE-2026-57658Critical9.12026-06-26Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions.
CVE-2026-57657Medium4.32026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions.
CVE-2026-57656Medium5.92026-06-26Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.
CVE-2026-57655High8.22026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.
CVE-2026-57654Medium6.52026-06-26Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
CVE-2026-57653High8.52026-06-26Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.
CVE-2026-57652Medium5.32026-06-26Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.
CVE-2026-57651Medium6.52026-06-26Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.
CVE-2026-57650Medium6.52026-06-26Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions.
CVE-2026-57649Medium4.32026-06-26Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.
CVE-2026-57648Medium4.32026-06-26Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.
CVE-2026-57647High7.52026-06-26Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions.
CVE-2026-57646Medium5.42026-06-26Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions.
CVE-2026-57645High8.12026-06-26newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-57644High8.52026-06-26Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.
CVE-2026-57643High8.52026-06-26Contributor SQL Injection in WP Post Author <= 3.9.1 versions.
CVE-2026-57642High8.52026-06-26Contributor SQL Injection in Gallery <= 4.7.8 versions.
CVE-2026-57641Medium6.52026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.
CVE-2026-57640Medium4.32026-06-26Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.
CVE-2026-57638Medium6.52026-06-26Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.
CVE-2026-57637Medium4.32026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.