2026 CVEs (page 219)

Page 219 of 681 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 219 of 681)
CVESeverityScorePublishedSummary
CVE-2026-762402026-08-19stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is…
CVE-2026-76239Medium6.32026-08-19Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal…
CVE-2026-762382026-08-19stigmem versions before 0.9.0a12 contain a broken object level authorization vulnerability in the decay sweep endpoint that allows authenticated attackers with…
CVE-2026-762372026-08-19stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine review endpoints. On multi-tenant…
CVE-2026-762362026-08-19stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-forgotten) tombstone mechanism. iss…
CVE-2026-76234High7.52026-08-19libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check len…
CVE-2026-76233Medium6.72026-08-19Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam d…
CVE-2026-76232Medium6.72026-08-19Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to hel…
CVE-2026-76231Medium6.72026-08-19Renovate versions from 32.135.0 before 40.33.0 contain a command injection vulnerability in the hermit manager where user-provided dependency names are appende…
CVE-2026-76230Medium6.72026-08-19Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended…
CVE-2026-76229Medium6.72026-08-19Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names ar…
CVE-2026-76228Medium6.72026-08-19Renovate versions >=32.124.0 and before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) contain a command injection vulnerability in Gradle Wrapper ar…
CVE-2026-76227Medium5.52026-08-19Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images (ren…
CVE-2026-76226Medium6.32026-08-19Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk managers when using lockFileMaintena…
CVE-2026-76225High7.72026-08-19ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. A…
CVE-2026-76224High8.82026-08-19ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in its Gremlin query engine. Although the engine d…
CVE-2026-76223High7.12026-08-19ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce the UPDATE_SCHEMA permission check when a DEFINE FUNCTION statement targets an already-exis…
CVE-2026-76222High8.22026-08-19GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths o…
CVE-2026-76221High8.82026-08-19GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directi…
CVE-2026-76220High8.82026-08-19GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg…
CVE-2026-76219High8.12026-08-19GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods th…
CVE-2026-76218High7.52026-08-19GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a…
CVE-2026-76217Medium6.52026-08-19GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can s…
CVE-2026-76216High7.52026-08-19Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are treated as user principals with users.id ==…
CVE-2026-76215Medium5.32026-08-19phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attacker…
CVE-2026-76214High7.42026-08-19phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves the mutated key obj…
CVE-2026-76213High7.42026-08-19phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each…
CVE-2026-76212Medium5.32026-08-19phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=') in the Search/Da…
CVE-2026-76211Medium4.32026-08-19phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard co…
CVE-2026-76210Medium6.52026-08-19phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ cont…
CVE-2026-76209Medium4.32026-08-19phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when regi…
CVE-2026-76208High8.22026-08-19phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a succes…
CVE-2026-76207High8.12026-08-19phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attacker…
CVE-2026-76206Medium5.32026-08-19phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. At…
CVE-2026-76205High8.12026-08-19phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embeddin…
CVE-2026-75920Medium5.32026-08-19phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database crede…
CVE-2026-75919Medium5.32026-08-19phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and c…
CVE-2026-75918High8.82026-08-19phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the…
CVE-2026-75917High8.62026-08-19SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/move…
CVE-2026-75916High8.62026-08-19SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '((' block-reference autocomplete hint popup. In genHintItemHTML() (app/src/protyle/h…
CVE-2026-75148Medium6.12026-08-19cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to c…
CVE-2026-751142026-08-19Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 - The referer request parameter is passed straight…
CVE-2026-748042026-08-19Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filter_type request value is interpolated in…
CVE-2026-748032026-08-19Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Co…
CVE-2026-71694High8.82026-08-19An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arb…
CVE-2026-70424Medium6.52026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability…
CVE-2026-70423Medium6.52026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker…
CVE-2026-70422High8.12026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabi…
CVE-2026-70421High7.22026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access cou…
CVE-2026-656122026-08-19nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted a…
CVE-2026-656112026-08-19nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name…
CVE-2026-656102026-08-19nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment ca…
CVE-2026-656092026-08-19nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a craft…
CVE-2026-56088High7.12026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabi…
CVE-2026-54796High7.22026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul…
CVE-2026-54795High8.82026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul…
CVE-2026-54794High7.22026-08-19Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote acces…
CVE-2026-51367High7.52026-08-19An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_ch…
CVE-2026-51366Critical9.92026-08-19SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and…
CVE-2026-50720Medium6.42026-08-19The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SH…
CVE-2026-50719Medium6.82026-08-19The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the s…
CVE-2026-43961High7.82026-08-19A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark…
CVE-2026-16019Critical9.82026-08-19Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injec…
CVE-2026-76235High7.52026-08-19A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie…
CVE-2026-73394High7.52026-08-19Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
CVE-2026-73391Critical9.32026-08-19Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
CVE-2026-73390Critical9.82026-08-19Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
CVE-2026-73389Critical9.82026-08-19Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
CVE-2026-73388Critical9.32026-08-19Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
CVE-2026-73387High8.12026-08-19Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
CVE-2026-73386High7.52026-08-19Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.
CVE-2026-73385High7.52026-08-19Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
CVE-2026-73384High7.52026-08-19Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
CVE-2026-73364Critical9.82026-08-19Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.
CVE-2026-73363Medium6.52026-08-19Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.
CVE-2026-73354High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
CVE-2026-73347Critical9.82026-08-19Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
CVE-2026-73185Critical9.32026-08-19Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.
CVE-2026-73184High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
CVE-2026-73183Critical9.32026-08-19Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.
CVE-2026-73182High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
CVE-2026-673642026-08-19Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed vi…
CVE-2026-673632026-08-19Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge…
CVE-2026-66668High8.52026-08-19Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
CVE-2026-66613Critical9.82026-08-19Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.
CVE-2026-66596High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2026-61986High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
CVE-2026-32552High8.52026-08-19Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
CVE-2026-19490Critical9.82026-08-19Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through…
CVE-2026-194892026-08-19Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through…
CVE-2026-183722026-08-19CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user inte…
CVE-2026-183712026-08-19HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.
CVE-2026-164402026-08-19In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
CVE-2026-76166Medium4.32026-08-19A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status li…
CVE-2026-761642026-08-19AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with acc…
CVE-2026-75900Medium6.12026-08-19An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where…
CVE-2026-75589High7.52026-08-19Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the thre…
CVE-2026-72889Critical9.82026-08-19Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the sig…
CVE-2026-58088High7.42026-08-19The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a se…
CVE-2026-58087High7.82026-08-19The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized…