2026 CVEs (page 2)
Page 2 of 658 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15911 | High | 7.4 | 2026-10-01 | Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate v… |
CVE-2026-104059 | High | 8.1 | 2026-10-01 | Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform stat… |
CVE-2026-104058 | Medium | 5.3 | 2026-10-01 | Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine instead of the BasicAuth-protecte… |
CVE-2026-104057 | High | 7.5 | 2026-10-01 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections… |
CVE-2026-104056 | | 2026-10-01 | Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poi… | |
CVE-2026-9032 | | 2026-10-01 | Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication… | |
CVE-2026-97662 | High | 8.2 | 2026-10-01 | An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to cre… |
CVE-2026-78578 | | 2026-10-01 | Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacke… | |
CVE-2026-78577 | | 2026-10-01 | Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated a… | |
CVE-2026-73976 | | 2026-10-01 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the sea… | |
CVE-2026-68496 | High | 7.5 | 2026-10-01 | The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so… |
CVE-2026-68495 | High | 7.5 | 2026-10-01 | The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so t… |
CVE-2026-56098 | Medium | 4.3 | 2026-10-01 | A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through i… |
CVE-2026-56097 | Medium | 6.5 | 2026-10-01 | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize i… |
CVE-2026-12545 | Medium | 6.7 | 2026-10-01 | A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Sate… |
CVE-2026-12542 | Medium | 5.3 | 2026-10-01 | A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-su… |
CVE-2026-104018 | High | 8.8 | 2026-10-01 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privil… |
CVE-2026-103923 | | 2026-10-01 | KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordinary JavaScript property access for… | |
CVE-2026-103922 | Critical | 9.3 | 2026-10-01 | Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigati… |
CVE-2026-103884 | Medium | 6.5 | 2026-10-01 | A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly valid… |
CVE-2026-102369 | | 2026-10-01 | Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthentica… | |
CVE-2026-102294 | | 2026-10-01 | TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorp… | |
CVE-2026-96659 | Critical | 9.1 | 2026-10-01 | A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by… |
CVE-2026-96658 | Critical | 9.9 | 2026-10-01 | A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox wit… |
CVE-2026-93546 | High | 8.8 | 2026-10-01 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persi… |
CVE-2026-79768 | Medium | 5.3 | 2026-10-01 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir dire… |
CVE-2026-77387 | Medium | 4.0 | 2026-10-01 | geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessive CPU time due to inefficient regular-expression… |
CVE-2026-73975 | | 2026-10-01 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL int… | |
CVE-2026-73637 | High | 7.3 | 2026-10-01 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to ca… |
CVE-2026-73636 | High | 8.1 | 2026-10-01 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (… |
CVE-2026-67172 | Low | 3.7 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when inval… |
CVE-2026-67171 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database inform… |
CVE-2026-63718 | High | 7.5 | 2026-10-01 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and… |
CVE-2026-63686 | High | 7.5 | 2026-10-01 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to… |
CVE-2026-63292 | High | 7.5 | 2026-10-01 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause… |
CVE-2026-63045 | High | 7.5 | 2026-10-01 | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forw… |
CVE-2026-59797 | Critical | 9.8 | 2026-10-01 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Serv… |
CVE-2026-59685 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apa… |
CVE-2026-58415 | Medium | 5.3 | 2026-10-01 | Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remo… |
CVE-2026-57941 | Critical | 9.8 | 2026-10-01 | Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 throu… |
CVE-2026-56449 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4… |
CVE-2026-56154 | Critical | 9.8 | 2026-10-01 | Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 t… |
CVE-2026-56153 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
CVE-2026-48005 | High | 7.5 | 2026-10-01 | Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remo… |
CVE-2026-21833 | Low | 3.7 | 2026-10-01 | HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cr… |
CVE-2026-14316 | High | 8.1 | 2026-10-01 | The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted… |
CVE-2026-13043 | | 2026-10-01 | A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated… | |
CVE-2026-12544 | High | 7.7 | 2026-10-01 | A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configurat… |
CVE-2026-12541 | High | 8.2 | 2026-10-01 | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly… |
CVE-2026-12540 | High | 8.2 | 2026-10-01 | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an under… |
CVE-2026-12423 | High | 7.5 | 2026-10-01 | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in… |
CVE-2026-12405 | High | 8.8 | 2026-10-01 | A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a j… |
CVE-2026-103921 | High | 7.4 | 2026-10-01 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function… |
CVE-2026-101890 | Medium | 5.4 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by… |
CVE-2026-101889 | Medium | 6.5 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary director… |
CVE-2026-101888 | High | 7.2 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary… |
CVE-2026-9864 | Medium | 4.8 | 2026-10-01 | Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Dire… |
CVE-2026-94620 | | 2026-10-01 | Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones… | |
CVE-2026-79896 | High | 7.5 | 2026-10-01 | Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker c… |
CVE-2026-47360 | High | 7.5 | 2026-10-01 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove cha… |
CVE-2026-46729 | High | 7.5 | 2026-10-01 | NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 thro… |
CVE-2026-42528 | Medium | 4.3 | 2026-10-01 | A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processe… |
CVE-2026-42356 | Low | 3.7 | 2026-10-01 | Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and ex… |
CVE-2026-17053 | Medium | 4.4 | 2026-10-01 | The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in drivers/smbus/smbus_handlers.c… |
CVE-2026-12627 | Critical | 9.8 | 2026-10-01 | Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network acces… |
CVE-2026-103690 | Medium | 6.3 | 2026-10-01 | A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing… |
CVE-2026-103505 | Medium | 6.5 | 2026-10-01 | Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow re… |
CVE-2026-101322 | | 2026-10-01 | In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorizat… | |
CVE-2026-97297 | High | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions. |
CVE-2026-97284 | High | 8.8 | 2026-10-01 | Contributor PHP Object Injection in Icegram <= 3.1.31 versions. |
CVE-2026-97281 | Medium | 6.3 | 2026-10-01 | Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. |
CVE-2026-97280 | Medium | 6.5 | 2026-10-01 | Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. Thi… |
CVE-2026-97277 | High | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Social Boost <= 3.6.2 versions. |
CVE-2026-97273 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
CVE-2026-97269 | Medium | 6.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions. |
CVE-2026-97268 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
CVE-2026-97260 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions. |
CVE-2026-97258 | Medium | 6.5 | 2026-10-01 | Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions. |
CVE-2026-97251 | Medium | 6.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions. |
CVE-2026-95588 | High | 8.6 | 2026-10-01 | Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions. |
CVE-2026-94390 | High | 7.2 | 2026-10-01 | Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions. |
CVE-2026-79900 | Medium | 6.5 | 2026-10-01 | boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the dig… |
CVE-2026-79899 | High | 7.9 | 2026-10-01 | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting… |
CVE-2026-79898 | Critical | 9.1 | 2026-10-01 | Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP… |
CVE-2026-67106 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information… |
CVE-2026-67105 | High | 7.4 | 2026-10-01 | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept u… |
CVE-2026-67104 | Medium | 5.3 | 2026-10-01 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessi… |
CVE-2026-62073 | High | 7.5 | 2026-10-01 | Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions. |
CVE-2026-62071 | Critical | 9.3 | 2026-10-01 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions. |
CVE-2026-56599 | Low | 2.2 | 2026-10-01 | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing securit… |
CVE-2026-56589 | High | 7.2 | 2026-10-01 | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scr… |
CVE-2026-103752 | Critical | 9.8 | 2026-10-01 | Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions. |
CVE-2026-103687 | High | 7.3 | 2026-10-01 | A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the compone… |
CVE-2026-103347 | Medium | 5.3 | 2026-10-01 | Unauthenticated Bypass Vulnerability in hCaptcha for WP <= 5.3.0 versions. |
CVE-2026-103068 | High | 8.8 | 2026-10-01 | Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions. |
CVE-2026-103004 | | 2026-10-01 | Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params… | |
CVE-2026-102378 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions. |
CVE-2026-100517 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions. |
CVE-2026-100514 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions. |
CVE-2026-79901 | Critical | 9.9 | 2026-10-01 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-r… |