2026 CVEs (page 200)
Page 200 of 681 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19892 | High | 8.8 | 2026-08-25 | The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to… |
CVE-2026-17089 | Medium | 6.1 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parame… |
CVE-2026-14280 | Medium | 6.6 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7… |
CVE-2026-78685 | High | 8.8 | 2026-08-25 | Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS com… |
CVE-2026-75982 | Medium | 4.4 | 2026-08-25 | The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the l… |
CVE-2026-75019 | Medium | 6.4 | 2026-08-25 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2026-10627 | Medium | 5.3 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7… |
CVE-2026-78683 | Critical | 9.6 | 2026-08-25 | NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/trans… |
CVE-2026-78682 | High | 7.5 | 2026-08-25 | NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/d… |
CVE-2026-78681 | High | 7.5 | 2026-08-25 | NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft… |
CVE-2026-78680 | High | 7.8 | 2026-08-25 | NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, a… |
CVE-2026-78679 | Medium | 6.5 | 2026-08-25 | GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe optio… |
CVE-2026-78678 | Medium | 6.5 | 2026-08-25 | GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attacke… |
CVE-2026-78677 | High | 7.5 | 2026-08-25 | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clo… |
CVE-2026-78676 | Critical | 9.8 | 2026-08-25 | GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected direc… |
CVE-2026-78675 | High | 8.4 | 2026-08-25 | GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file… |
CVE-2026-76846 | High | 7.5 | 2026-08-25 | Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets. Attack… |
CVE-2026-76839 | Medium | 6.5 | 2026-08-25 | Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet() and offsetexists() methods that lack field… |
CVE-2026-75575 | Medium | 5.3 | 2026-08-25 | Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The me… |
CVE-2026-75574 | High | 8.8 | 2026-08-25 | The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authent… |
CVE-2026-72702 | Medium | 5.4 | 2026-08-25 | Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer() and Pages::referrerRoute() methods, which validate the Referer header using… |
CVE-2026-72701 | Low | 3.7 | 2026-08-25 | Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison with the === operator instead of h… |
CVE-2026-72700 | High | 7.5 | 2026-08-25 | The getgrav/grav-plugin-login Composer plugin before 3.9.1 (used by Grav) compares password reset and account activation tokens using a non-constant-time === s… |
CVE-2026-72699 | Medium | 5.3 | 2026-08-25 | The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register() method in classes/Login.php throws a… |
CVE-2026-72698 | Medium | 6.5 | 2026-08-25 | Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing content editors to read sensitive confi… |
CVE-2026-72697 | Medium | 6.5 | 2026-08-25 | Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to validate filesystem paths, allowing authent… |
CVE-2026-72696 | High | 8.4 | 2026-08-25 | Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows local attackers to overwrite arbitrary files b… |
CVE-2026-72695 | High | 8.1 | 2026-08-25 | Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile() that allows authenticated users with media management permissions… |
CVE-2026-56710 | Critical | 9.8 | 2026-08-25 | Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler. An attacker with a… |
CVE-2026-56709 | High | 7.5 | 2026-08-25 | Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail() function when constructing token-bearing invitation links. Attackers ca… |
CVE-2026-56708 | Medium | 5.3 | 2026-08-25 | Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by D… |
CVE-2026-56707 | High | 7.7 | 2026-08-25 | Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-e… |
CVE-2026-56706 | Medium | 6.8 | 2026-08-25 | Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing an… |
CVE-2026-56705 | Critical | 9.8 | 2026-08-25 | Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via… |
CVE-2026-56704 | Medium | 6.1 | 2026-08-25 | Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controllin… |
CVE-2026-56703 | High | 7.2 | 2026-08-25 | Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Auth… |
CVE-2026-56702 | High | 8.8 | 2026-08-25 | Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP f… |
CVE-2026-34968 | High | 8.1 | 2026-08-25 | Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions bef… |
CVE-2026-34967 | Medium | 5.4 | 2026-08-25 | Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php… |
CVE-2026-34964 | Medium | 5.8 | 2026-08-25 | Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for… |
CVE-2026-34959 | Medium | 4.7 | 2026-08-25 | Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no trusted-proxy check and no validation of t… |
CVE-2026-19801 | Medium | 4.3 | 2026-08-25 | The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all vers… |
CVE-2026-16434 | | 2026-08-25 | Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability (GHSA-8478-xrj3-h9c2). The validation guar… | |
CVE-2026-15023 | Medium | 6.5 | 2026-08-25 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'meta_key' via Event/Locatio… |
CVE-2026-10630 | Medium | 4.3 | 2026-08-25 | The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Objec… |
CVE-2026-66766 | High | 7.5 | 2026-08-25 | SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacke… |
CVE-2026-59183 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.1… |
CVE-2026-55373 | Medium | 6.2 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.1… |
CVE-2026-55371 | | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Version… | |
CVE-2026-55059 | Medium | 6.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.1… |
CVE-2026-54920 | Unrated | | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.1… |
CVE-2026-53532 | | 2026-08-24 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.1… | |
CVE-2026-78435 | Low | 3.8 | 2026-08-24 | A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsControlle… |
CVE-2026-78434 | Medium | 6.5 | 2026-08-24 | A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpde… |
CVE-2026-78284 | High | 8.6 | 2026-08-24 | Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions. |
CVE-2026-78282 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions. |
CVE-2026-78268 | High | 7.5 | 2026-08-24 | Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versi… |
CVE-2026-78267 | Critical | 9.8 | 2026-08-24 | Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions. |
CVE-2026-78266 | Medium | 6.5 | 2026-08-24 | Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions. |
CVE-2026-78265 | Critical | 9.8 | 2026-08-24 | Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions. |
CVE-2026-78264 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions. |
CVE-2026-78263 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions. |
CVE-2026-78262 | Critical | 9.8 | 2026-08-24 | Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions. |
CVE-2026-78259 | High | 7.3 | 2026-08-24 | Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions. |
CVE-2026-77384 | High | 7.5 | 2026-08-24 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the s… |
CVE-2026-77337 | | 2026-08-24 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through 3… | |
CVE-2026-68516 | Medium | 6.5 | 2026-08-24 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4… |
CVE-2026-45404 | | 2026-08-24 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized… | |
CVE-2026-32563 | Critical | 9.8 | 2026-08-24 | Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
CVE-2026-32561 | High | 8.8 | 2026-08-24 | Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions. |
CVE-2026-32560 | High | 8.8 | 2026-08-24 | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions. |
CVE-2026-32559 | Critical | 9.9 | 2026-08-24 | Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions. |
CVE-2026-32556 | High | 7.1 | 2026-08-24 | Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions. |
CVE-2026-32555 | Critical | 9.3 | 2026-08-24 | Unauthenticated SQL Injection in Boost <= 2.0.4 versions. |
CVE-2026-32554 | Critical | 9.3 | 2026-08-24 | Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions. |
CVE-2026-27364 | Medium | 6.5 | 2026-08-24 | Subscriber Broken Access Control in Style Kits <= 2.6.5 versions. |
CVE-2026-17113 | Medium | 6.0 | 2026-08-24 | A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed by `setupContainerEnvironmentAndWorkdi… |
CVE-2026-7455 | High | 7.8 | 2026-08-24 | A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulne… |
CVE-2026-77635 | | 2026-08-24 | CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue()… | |
CVE-2026-77634 | | 2026-08-24 | CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail head… | |
CVE-2026-77567 | High | 8.1 | 2026-08-24 | Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-fi… |
CVE-2026-75554 | | 2026-08-24 | Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its pr… | |
CVE-2026-75542 | | 2026-08-24 | Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organiza… | |
CVE-2026-75464 | High | 8.1 | 2026-08-24 | OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link(). |
CVE-2026-5006 | Medium | 6.8 | 2026-08-24 | A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value reference… |
CVE-2026-56136 | Medium | 4.7 | 2026-08-24 | In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential inform… |
CVE-2026-56135 | High | 7.4 | 2026-08-24 | In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corr… |
CVE-2026-55468 | Medium | 4.3 | 2026-08-24 | Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the i… |
CVE-2026-52492 | High | 7.8 | 2026-08-24 | An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and s… |
CVE-2026-52490 | Critical | 9.8 | 2026-08-24 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiff… |
CVE-2026-19568 | High | 7.8 | 2026-08-24 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerab… |
CVE-2026-16783 | High | 7.8 | 2026-08-24 | A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulne… |
CVE-2026-16782 | Medium | 5.3 | 2026-08-24 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulner… |
CVE-2026-16781 | Medium | 5.5 | 2026-08-24 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this… |
CVE-2026-78555 | | 2026-08-24 | RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shorte… | |
CVE-2026-78553 | | 2026-08-24 | RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using the process's defau… | |
CVE-2026-78551 | | 2026-08-24 | RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unre… | |
CVE-2026-78430 | Medium | 5.3 | 2026-08-24 | A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the… |
CVE-2026-77923 | Medium | 4.3 | 2026-08-24 | Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check wi… |
CVE-2026-77310 | Medium | 5.3 | 2026-08-24 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3… |