2026 CVEs (page 199)
Page 199 of 681 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-79662 | High | 8.0 | 2026-08-25 | Ech0 through 4.5.6 contains an OAuth redirect URI validation vulnerability in parseAndValidateClientRedirect (internal/service/auth/auth.go) that compares only… |
CVE-2026-79661 | Medium | 6.5 | 2026-08-25 | Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers… |
CVE-2026-79660 | Medium | 5.3 | 2026-08-25 | Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Un… |
CVE-2026-79659 | High | 7.7 | 2026-08-25 | Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe… |
CVE-2026-79658 | High | 7.5 | 2026-08-25 | Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The… |
CVE-2026-79657 | Critical | 9.8 | 2026-08-25 | NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific… |
CVE-2026-78864 | Medium | 6.3 | 2026-08-25 | A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journ… |
CVE-2026-78684 | Medium | 5.3 | 2026-08-25 | vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can a… |
CVE-2026-77997 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com… | |
CVE-2026-77996 | | 2026-08-25 | Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a X… | |
CVE-2026-77824 | Medium | 4.9 | 2026-08-25 | The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and inc… |
CVE-2026-75971 | High | 7.2 | 2026-08-25 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions… |
CVE-2026-75908 | Medium | 4.3 | 2026-08-25 | The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly v… |
CVE-2026-57910 | | 2026-08-25 | Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevat… | |
CVE-2026-57909 | | 2026-08-25 | A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected sy… | |
CVE-2026-19949 | High | 8.8 | 2026-08-25 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and includi… |
CVE-2026-18547 | Medium | 6.4 | 2026-08-25 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored… |
CVE-2026-17587 | Medium | 5.3 | 2026-08-25 | The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3… |
CVE-2026-79652 | Medium | 5.9 | 2026-08-25 | A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handl… |
CVE-2026-78863 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre… |
CVE-2026-59335 | High | 8.7 | 2026-08-25 | Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote aut… |
CVE-2026-55976 | Critical | 9.1 | 2026-08-25 | Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privil… |
CVE-2026-53561 | High | 7.4 | 2026-08-25 | An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on depl… |
CVE-2026-49845 | Critical | 9.8 | 2026-08-25 | SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hiv… |
CVE-2026-21758 | Low | 3.7 | 2026-08-25 | HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment. |
CVE-2026-21754 | Medium | 5.4 | 2026-08-25 | HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakou… |
CVE-2026-21753 | Medium | 4.2 | 2026-08-25 | HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependen… |
CVE-2026-12600 | | 2026-08-25 | Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an applicatio… | |
CVE-2026-76128 | Medium | 6.4 | 2026-08-25 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and incl… |
CVE-2026-75038 | Medium | 6.1 | 2026-08-25 | UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0. |
CVE-2026-75037 | High | 7.0 | 2026-08-25 | Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by… |
CVE-2026-49050 | High | 8.8 | 2026-08-25 | General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade t… |
CVE-2026-16231 | High | 8.1 | 2026-08-25 | hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaqu… |
CVE-2026-12878 | High | 8.8 | 2026-08-25 | In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions. |
CVE-2026-77146 | | 2026-08-25 | The extension's invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), all… | |
CVE-2026-77145 | | 2026-08-25 | The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event… | |
CVE-2026-77144 | | 2026-08-25 | The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its ow… | |
CVE-2026-77143 | | 2026-08-25 | The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows… | |
CVE-2026-77142 | | 2026-08-25 | The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own… | |
CVE-2026-77141 | | 2026-08-25 | The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no owner… | |
CVE-2026-77140 | | 2026-08-25 | The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An… | |
CVE-2026-77139 | | 2026-08-25 | The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An auth… | |
CVE-2026-77138 | | 2026-08-25 | The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attack… | |
CVE-2026-77137 | | 2026-08-25 | The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL th… | |
CVE-2026-77136 | | 2026-08-25 | The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, wi… | |
CVE-2026-77135 | | 2026-08-25 | The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to t… | |
CVE-2026-77134 | | 2026-08-25 | The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainabl… | |
CVE-2026-77133 | | 2026-08-25 | The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field… | |
CVE-2026-77131 | | 2026-08-25 | When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the at… | |
CVE-2026-77130 | | 2026-08-25 | The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with… | |
CVE-2026-77129 | | 2026-08-25 | The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to… | |
CVE-2026-77128 | | 2026-08-25 | The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter t… | |
CVE-2026-77127 | | 2026-08-25 | The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privil… | |
CVE-2026-63587 | High | 8.6 | 2026-08-25 | The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increme… |
CVE-2026-63586 | Critical | 9.8 | 2026-08-25 | The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Author… |
CVE-2026-56096 | | 2026-08-25 | The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors… | |
CVE-2026-56095 | | 2026-08-25 | The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data f… | |
CVE-2026-56094 | | 2026-08-25 | The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and… | |
CVE-2026-56093 | | 2026-08-25 | The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular searc… | |
CVE-2026-56092 | | 2026-08-25 | The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persist… | |
CVE-2026-17548 | | 2026-08-25 | Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to vi… | |
CVE-2026-78701 | Medium | 6.5 | 2026-08-25 | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND p… |
CVE-2026-78322 | Medium | 6.5 | 2026-08-25 | A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's… |
CVE-2026-67578 | High | 7.5 | 2026-08-25 | FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings… |
CVE-2026-66882 | | 2026-08-25 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the… | |
CVE-2026-65633 | | 2026-08-25 | Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resour… | |
CVE-2026-59769 | Critical | 9.1 | 2026-08-25 | FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the set… |
CVE-2026-19851 | High | 7.7 | 2026-08-25 | A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts crea… |
CVE-2026-18512 | Medium | 6.4 | 2026-08-25 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Bo… |
CVE-2026-18328 | High | 7.2 | 2026-08-25 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the… |
CVE-2026-18323 | High | 7.2 | 2026-08-25 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field (Save… |
CVE-2026-18100 | Medium | 6.4 | 2026-08-25 | The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf_form_id… |
CVE-2026-16601 | High | 8.8 | 2026-08-25 | The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions u… |
CVE-2026-78656 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of… |
CVE-2026-69665 | High | 7.8 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to… |
CVE-2026-68960 | High | 8.5 | 2026-08-25 | A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in… |
CVE-2026-68959 | High | 8.5 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy… |
CVE-2026-68062 | High | 8.5 | 2026-08-25 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy… |
CVE-2026-66109 | High | 7.8 | 2026-08-25 | A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the… |
CVE-2026-78654 | High | 7.3 | 2026-08-25 | A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The… |
CVE-2026-78638 | Low | 3.3 | 2026-08-25 | A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Ext… |
CVE-2026-78478 | High | 8.1 | 2026-08-25 | The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attack… |
CVE-2026-78470 | Medium | 6.5 | 2026-08-25 | The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the… |
CVE-2026-78637 | High | 7.3 | 2026-08-25 | A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pd… |
CVE-2026-13215 | Medium | 6.8 | 2026-08-25 | The Zephyr ext2 filesystem driver fails to validate the s_log_block_size field of the on-disk superblock when mounting a filesystem. ext2_verify_disk_superbloc… |
CVE-2026-13214 | Critical | 9.8 | 2026-08-25 | The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request from th… |
CVE-2026-12561 | Medium | 6.4 | 2026-08-25 | The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in all versions up to and including 5.4.5… |
CVE-2026-76063 | Medium | 6.4 | 2026-08-25 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' paramete… |
CVE-2026-75930 | Medium | 4.3 | 2026-08-25 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. Thi… |
CVE-2026-19943 | Medium | 6.4 | 2026-08-25 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titleTag' Block Attribute… |
CVE-2026-19892 | High | 8.8 | 2026-08-25 | The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to… |
CVE-2026-17089 | Medium | 6.1 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parame… |
CVE-2026-14280 | Medium | 6.6 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7… |
CVE-2026-78685 | High | 8.8 | 2026-08-25 | Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS com… |
CVE-2026-75982 | Medium | 4.4 | 2026-08-25 | The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the l… |
CVE-2026-75019 | Medium | 6.4 | 2026-08-25 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2026-10627 | Medium | 5.3 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7… |
CVE-2026-78683 | Critical | 9.6 | 2026-08-25 | NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/trans… |
CVE-2026-78682 | High | 7.5 | 2026-08-25 | NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/d… |
CVE-2026-78681 | High | 7.5 | 2026-08-25 | NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft… |