2026 CVEs (page 195)
Page 195 of 471 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6432 | | 2026-06-25 | Improper bounds validation in EmberZNet SDK versions 9.0.2 and earlier may result in crashes or dynamic memory leakage. | |
CVE-2026-57588 | Low | 3.3 | 2026-06-25 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQ… |
CVE-2026-57587 | Medium | 5.3 | 2026-06-25 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL i… |
CVE-2026-57536 | | 2026-06-25 | Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one p… | |
CVE-2026-57535 | | 2026-06-25 | Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags. If the src attribute of these images pointed to a… | |
CVE-2026-57534 | | 2026-06-25 | Malicious HTML content could be injected into the content of a page in the pretix-pages plugin. | |
CVE-2026-57533 | | 2026-06-25 | Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since this page has a Content-Security-Poli… | |
CVE-2026-57532 | | 2026-06-25 | Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser. This… | |
CVE-2026-57437 | Medium | 5.3 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source documen… |
CVE-2026-57436 | Medium | 5.3 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated only that the new r… |
CVE-2026-57435 | High | 7.5 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrappe… |
CVE-2026-57434 | High | 7.5 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on all… |
CVE-2026-57236 | High | 8.2 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding= with an invalid encoding (e.g… |
CVE-2026-57235 | High | 8.2 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[] (and its alias #slice) checked th… |
CVE-2026-57234 | Low | 2.6 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default… |
CVE-2026-49319 | Medium | 6.5 | 2026-06-25 | Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attac… |
CVE-2026-46735 | High | 7.8 | 2026-06-25 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman… |
CVE-2026-13314 | | 2026-06-25 | Malicious HTML content could be injected into the content rendered by the pretix-digital plugin. | |
CVE-2026-13225 | | 2026-06-25 | Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual… | |
CVE-2026-13223 | | 2026-06-25 | Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment st… | |
CVE-2026-13222 | | 2026-06-25 | Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment statu… | |
CVE-2026-57619 | Medium | 6.5 | 2026-06-25 | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. |
CVE-2026-57429 | Medium | 6.5 | 2026-06-25 | Contributor Broken Access Control in Slim SEO <= 4.6.2 versions. |
CVE-2026-56122 | High | 7.5 | 2026-06-25 | Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GE… |
CVE-2026-56071 | High | 7.1 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. |
CVE-2026-56054 | High | 7.7 | 2026-06-25 | Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions. |
CVE-2026-56053 | High | 8.8 | 2026-06-25 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |
CVE-2026-56051 | High | 7.1 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions. |
CVE-2026-56050 | Medium | 6.5 | 2026-06-25 | Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue af… |
CVE-2026-56049 | High | 8.5 | 2026-06-25 | Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions. |
CVE-2026-56042 | High | 7.1 | 2026-06-25 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. |
CVE-2026-56023 | Medium | 5.4 | 2026-06-25 | Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. |
CVE-2026-56014 | High | 7.1 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions. |
CVE-2026-56013 | Medium | 6.5 | 2026-06-25 | Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions. |
CVE-2026-56006 | High | 7.1 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions. |
CVE-2026-56005 | High | 7.1 | 2026-06-25 | Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 versions. |
CVE-2026-54849 | Critical | 9.3 | 2026-06-25 | Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions. |
CVE-2026-54848 | High | 8.3 | 2026-06-25 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This… |
CVE-2026-54845 | High | 8.1 | 2026-06-25 | Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions. |
CVE-2026-54844 | High | 7.5 | 2026-06-25 | Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. |
CVE-2026-54843 | Critical | 9.3 | 2026-06-25 | Unauthenticated SQL Injection in MDTF <= 1.3.7 versions. |
CVE-2026-54842 | High | 8.1 | 2026-06-25 | Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Roy… |
CVE-2026-54841 | High | 7.5 | 2026-06-25 | Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. |
CVE-2026-54838 | High | 8.5 | 2026-06-25 | Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. |
CVE-2026-54836 | Critical | 9.3 | 2026-06-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection. This issue affects YMC… |
CVE-2026-54830 | High | 7.5 | 2026-06-25 | Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions. |
CVE-2026-54829 | High | 7.5 | 2026-06-25 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL I… |
CVE-2026-54828 | High | 7.5 | 2026-06-25 | Unauthenticated Broken Access Control in Motors <= 1.4.109 versions. |
CVE-2026-54823 | Critical | 9.9 | 2026-06-25 | Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions. |
CVE-2026-54822 | High | 8.5 | 2026-06-25 | Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions. |
CVE-2026-54821 | High | 7.4 | 2026-06-25 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. |
CVE-2026-52690 | Medium | 5.9 | 2026-06-25 | Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to… |
CVE-2026-4526 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These mess… |
CVE-2026-49506 | High | 7.2 | 2026-06-25 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabil… |
CVE-2026-47154 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the proc… |
CVE-2026-47153 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a… |
CVE-2026-47152 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a… |
CVE-2026-47151 | High | 7.1 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location… |
CVE-2026-47150 | High | 7.1 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and… |
CVE-2026-47149 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These me… |
CVE-2026-47148 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process… |
CVE-2026-47147 | High | 7.1 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read bac… |
CVE-2026-47146 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that h… |
CVE-2026-47145 | Medium | 6.5 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that h… |
CVE-2026-46734 | High | 7.3 | 2026-06-25 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with… |
CVE-2026-46733 | High | 7.8 | 2026-06-25 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with loc… |
CVE-2026-46732 | Medium | 6.7 | 2026-06-25 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Rac… |
CVE-2026-42390 | Medium | 5.3 | 2026-06-25 | An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. |
CVE-2026-42389 | Medium | 5.3 | 2026-06-25 | This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers. |
CVE-2026-42388 | Medium | 5.9 | 2026-06-25 | Incomplete validation of the SOA record present in a catalog zone might lead to a crash. |
CVE-2026-42387 | Medium | 5.9 | 2026-06-25 | A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation. |
CVE-2026-41120 | Critical | 9.8 | 2026-06-25 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged… |
CVE-2026-40012 | Medium | 5.3 | 2026-06-25 | ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled; |
CVE-2026-2815 | | 2026-06-25 | Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys | |
CVE-2026-27366 | High | 7.5 | 2026-06-25 | Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions. |
CVE-2026-12755 | Low | 2.7 | 2026-06-25 | Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGro… |
CVE-2026-42004 | Low | 3.7 | 2026-06-25 | An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client… |
CVE-2026-40211 | Medium | 5.3 | 2026-06-25 | An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed a… |
CVE-2026-40210 | Medium | 4.8 | 2026-06-25 | An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. |
CVE-2026-40209 | Medium | 5.3 | 2026-06-25 | An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXF… |
CVE-2026-40208 | Low | 3.7 | 2026-06-25 | An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. |
CVE-2026-40011 | Low | 3.7 | 2026-06-25 | An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be pro… |
CVE-2026-33612 | High | 7.5 | 2026-06-25 | A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning. |
CVE-2026-42005 | Medium | 4.3 | 2026-06-25 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web serve… |
CVE-2026-56130 | | 2026-06-25 | "Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after t… | |
CVE-2026-56091 | | 2026-06-25 | When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnera… | |
CVE-2026-54226 | | 2026-06-25 | A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fi… | |
CVE-2026-53277 | High | 8.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation w… |
CVE-2026-53276 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the… |
CVE-2026-53275 | High | 8.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query… |
CVE-2026-53274 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __… |
CVE-2026-53273 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b… |
CVE-2026-53272 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompress_kickoff() can race w… |
CVE-2026-53271 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers smb2_oplock_break_n… |
CVE-2026-53270 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ip_vs_edit_service() while unbinding the… |
CVE-2026-53269 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastru… |
CVE-2026-53268 | High | 8.2 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've… |
CVE-2026-53267 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: bail out on template ct in get eval I noticed this issue while looking… |
CVE-2026-53266 | High | 8.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the… |
CVE-2026-53265 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de ("dm cach… |