2026 CVEs (page 201)
Page 201 of 681 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76816 | Low | 3.5 | 2026-08-24 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client id… |
CVE-2026-76098 | High | 7.5 | 2026-08-24 | Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering… |
CVE-2026-75509 | Medium | 6.5 | 2026-08-24 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to version 1.7.3, JWTClaimsRe… |
CVE-2026-75369 | High | 7.1 | 2026-08-24 | An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit eaf90ec allows atta… |
CVE-2026-75368 | High | 7.5 | 2026-08-24 | A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying… |
CVE-2026-72714 | Medium | 6.3 | 2026-08-24 | Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Unive… |
CVE-2026-72711 | Medium | 6.3 | 2026-08-24 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the def… |
CVE-2026-72705 | Medium | 6.3 | 2026-08-24 | The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument… |
CVE-2026-72704 | Medium | 6.3 | 2026-08-24 | The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by tra… |
CVE-2026-72703 | Medium | 6.3 | 2026-08-24 | The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoin… |
CVE-2026-71511 | Medium | 6.5 | 2026-08-24 | Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to… |
CVE-2026-71510 | Medium | 6.5 | 2026-08-24 | Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensit… |
CVE-2026-63693 | Medium | 6.6 | 2026-08-24 | Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could po… |
CVE-2026-61419 | High | 7.8 | 2026-08-24 | Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially… |
CVE-2026-78541 | | 2026-08-24 | A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administra… | |
CVE-2026-78417 | Medium | 4.3 | 2026-08-24 | Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, al… |
CVE-2026-75371 | High | 7.5 | 2026-08-24 | An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to… |
CVE-2026-75370 | Medium | 6.5 | 2026-08-24 | An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers t… |
CVE-2026-71832 | Medium | 6.2 | 2026-08-24 | Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to cause a Denial of Ser… |
CVE-2026-71509 | Medium | 6.5 | 2026-08-24 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with… |
CVE-2026-71508 | Medium | 6.5 | 2026-08-24 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows attackers with user-write rights to mo… |
CVE-2026-71507 | Medium | 6.5 | 2026-08-24 | Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated a… |
CVE-2026-71506 | High | 8.1 | 2026-08-24 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoi… |
CVE-2026-71505 | High | 7.1 | 2026-08-24 | Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API third-party site account write routes that allows authenticat… |
CVE-2026-71504 | High | 8.1 | 2026-08-24 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset… |
CVE-2026-71503 | Medium | 6.1 | 2026-08-24 | Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is… |
CVE-2026-40877 | High | 8.7 | 2026-08-24 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which… |
CVE-2026-39975 | | 2026-08-24 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to cod… | |
CVE-2026-30864 | High | 8.9 | 2026-08-24 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert func… |
CVE-2026-9254 | | 2026-08-24 | An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper f… | |
CVE-2026-78475 | Medium | 6.1 | 2026-08-24 | A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) o… |
CVE-2026-76838 | High | 8.5 | 2026-08-24 | Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRul… |
CVE-2026-76837 | Medium | 6.4 | 2026-08-24 | Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the first_name value verbat… |
CVE-2026-76836 | High | 8.8 | 2026-08-24 | AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backend_config propert… |
CVE-2026-76835 | Critical | 9.1 | 2026-08-24 | OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-405… |
CVE-2026-76073 | High | 8.8 | 2026-08-24 | Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset… |
CVE-2026-76072 | High | 7.4 | 2026-08-24 | The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the d… |
CVE-2026-71943 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71942 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multip… |
CVE-2026-71941 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple… |
CVE-2026-71940 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying… |
CVE-2026-71939 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying t… |
CVE-2026-71938 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of t… |
CVE-2026-71937 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated conca… |
CVE-2026-71936 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of s… |
CVE-2026-71935 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string con… |
CVE-2026-71934 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks whe… |
CVE-2026-71933 | Critical | 9.1 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authori… |
CVE-2026-71932 | Medium | 4.9 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient vali… |
CVE-2026-71931 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filteri… |
CVE-2026-71930 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71929 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filterin… |
CVE-2026-71928 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71927 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71926 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitizati… |
CVE-2026-71925 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71924 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71923 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerability is caused by insufficient filtering o… |
CVE-2026-71922 | High | 7.5 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is cause… |
CVE-2026-71921 | Critical | 9.8 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by in… |
CVE-2026-71920 | Medium | 4.9 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks… |
CVE-2026-71919 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71918 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filt… |
CVE-2026-71917 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation… |
CVE-2026-71916 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering… |
CVE-2026-71915 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71914 | Critical | 9.8 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of… |
CVE-2026-71913 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient fil… |
CVE-2026-71912 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during… |
CVE-2026-71911 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during mem… |
CVE-2026-71910 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of… |
CVE-2026-71909 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71908 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vulnerability is caused by insufficient sa… |
CVE-2026-71907 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of t… |
CVE-2026-71906 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the… |
CVE-2026-71905 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71904 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filterin… |
CVE-2026-34491 | | 2026-08-24 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys… | |
CVE-2026-16348 | | 2026-08-24 | An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands… | |
CVE-2026-13213 | Medium | 5.3 | 2026-08-24 | The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT_CONN_CB_DEFINE, so secur… |
CVE-2026-78465 | High | 7.0 | 2026-08-24 | A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes… |
CVE-2026-78329 | Critical | 9.8 | 2026-08-24 | Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4… |
CVE-2026-77915 | Critical | 9.8 | 2026-08-24 | rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Admi… |
CVE-2026-77914 | Medium | 6.5 | 2026-08-24 | rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames… |
CVE-2026-75099 | Medium | 5.3 | 2026-08-24 | Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are recommended to upg… |
CVE-2026-71300 | Critical | 9.8 | 2026-08-24 | Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15… |
CVE-2026-66908 | High | 7.5 | 2026-08-24 | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-… |
CVE-2026-66907 | High | 7.5 | 2026-08-24 | Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 befor… |
CVE-2026-66906 | Critical | 9.1 | 2026-08-24 | Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 b… |
CVE-2026-63621 | Medium | 5.3 | 2026-08-24 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Kna… |
CVE-2026-60093 | Medium | 5.5 | 2026-08-24 | Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15… |
CVE-2026-59230 | Medium | 6.5 | 2026-08-24 | Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0… |
CVE-2026-19685 | High | 7.1 | 2026-08-24 | NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix… |
CVE-2026-18349 | | 2026-08-24 | Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4. | |
CVE-2026-15469 | | 2026-08-24 | The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6. A shared RS… | |
CVE-2026-78416 | | 2026-08-24 | Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel… | |
CVE-2026-76071 | Critical | 9.8 | 2026-08-24 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved st… |
CVE-2026-76070 | Critical | 9.8 | 2026-08-24 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved st… |
CVE-2026-71366 | High | 7.7 | 2026-08-24 | A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notificat… |
CVE-2026-71364 | High | 7.2 | 2026-08-24 | A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by joining… |