2026 CVEs (page 22)
Page 22 of 660 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94287 | Medium | 5.5 | 2026-09-28 | A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and mem… |
CVE-2026-94286 | High | 7.1 | 2026-09-28 | An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. |
CVE-2026-94285 | Medium | 5.1 | 2026-09-28 | An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. |
CVE-2026-94284 | Medium | 5.5 | 2026-09-28 | An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attac… |
CVE-2026-94283 | Medium | 6.5 | 2026-09-28 | An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash att… |
CVE-2026-94282 | Medium | 5.6 | 2026-09-28 | An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X clien… |
CVE-2026-86530 | High | 7.2 | 2026-09-28 | BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP reques… |
CVE-2026-86507 | Medium | 6.1 | 2026-09-28 | Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in th… |
CVE-2026-85134 | High | 8.8 | 2026-09-28 | Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Up… |
CVE-2026-82969 | Medium | 5.4 | 2026-09-28 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and… |
CVE-2026-82915 | Medium | 6.5 | 2026-09-28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workf… |
CVE-2026-101017 | Medium | 6.5 | 2026-09-28 | A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opend… |
CVE-2026-101016 | Medium | 6.5 | 2026-09-28 | A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library libopendm… |
CVE-2026-101015 | High | 7.3 | 2026-09-28 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the compone… |
CVE-2026-101014 | High | 7.3 | 2026-09-28 | A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the libr… |
CVE-2026-91206 | Medium | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross… |
CVE-2026-91204 | Medium | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comm… |
CVE-2026-82546 | Medium | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store… |
CVE-2026-82387 | Medium | 5.4 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with media-upload rights to store act… |
CVE-2026-82386 | High | 7.7 | 2026-09-28 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and rea… |
CVE-2026-82385 | Medium | 6.5 | 2026-09-28 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, inc… |
CVE-2026-82384 | Critical | 9.8 | 2026-09-28 | Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, becau… |
CVE-2026-82383 | High | 8.2 | 2026-09-28 | Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuratio… |
CVE-2026-82382 | Medium | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross… |
CVE-2026-82381 | Medium | 5.4 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to… |
CVE-2026-82380 | High | 8.1 | 2026-09-28 | Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under the victim'… |
CVE-2026-82379 | High | 7.7 | 2026-09-28 | Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authentication header to replay it and gain… |
CVE-2026-82378 | Critical | 9.0 | 2026-09-28 | Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding req… |
CVE-2026-82377 | Critical | 9.9 | 2026-09-28 | Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belonging to other weblogs through the lega… |
CVE-2026-82376 | High | 7.7 | 2026-09-28 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse a… |
CVE-2026-82375 | High | 7.4 | 2026-09-28 | Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to… |
CVE-2026-82348 | High | 7.7 | 2026-09-28 | Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or de… |
CVE-2026-101013 | High | 7.3 | 2026-09-28 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown fu… |
CVE-2026-101012 | High | 7.3 | 2026-09-28 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of t… |
CVE-2026-101011 | Medium | 4.7 | 2026-09-28 | A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file /www/server/panel/mod/project/domain… |
CVE-2026-101010 | Medium | 4.7 | 2026-09-28 | A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /www/server/panel/class/data.py. The man… |
CVE-2026-93000 | Medium | 6.8 | 2026-09-28 | The SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before using it in a SQL query when its static-page search feature is enabled… |
CVE-2026-92996 | Medium | 5.3 | 2026-09-28 | The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order own… |
CVE-2026-89411 | Medium | 5.3 | 2026-09-28 | The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauth… |
CVE-2026-89303 | Medium | 6.4 | 2026-09-28 | The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticate… |
CVE-2026-89300 | Medium | 5.3 | 2026-09-28 | The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbi… |
CVE-2026-88828 | Medium | 5.4 | 2026-09-28 | The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder… |
CVE-2026-86838 | Medium | 5.3 | 2026-09-28 | The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowin… |
CVE-2026-84744 | Medium | 6.5 | 2026-09-28 | The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rend… |
CVE-2026-101009 | High | 8.4 | 2026-09-28 | A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file /www/server/panel/class… |
CVE-2026-101008 | Critical | 9.1 | 2026-09-28 | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the componen… |
CVE-2026-101007 | High | 8.4 | 2026-09-28 | A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database… |
CVE-2026-101006 | Medium | 4.3 | 2026-09-28 | A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the… |
CVE-2026-101005 | High | 7.3 | 2026-09-28 | A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the… |
CVE-2026-100751 | | 2026-09-28 | Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions Pro accept… | |
CVE-2026-100750 | | 2026-09-28 | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag… | |
CVE-2026-101004 | Medium | 5.3 | 2026-09-28 | A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file pages/api/… |
CVE-2026-101003 | Medium | 5.3 | 2026-09-28 | A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c… |
CVE-2026-101002 | Critical | 9.9 | 2026-09-28 | A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component… |
CVE-2026-87723 | | 2026-09-28 | In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writabl… | |
CVE-2026-101001 | Critical | 10.0 | 2026-09-28 | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component We… |
CVE-2026-101000 | Critical | 10.0 | 2026-09-28 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.jso… |
CVE-2026-100909 | High | 7.3 | 2026-09-28 | A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/class… |
CVE-2026-100908 | High | 7.5 | 2026-09-28 | A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-b… |
CVE-2026-100907 | Medium | 5.3 | 2026-09-28 | A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulat… |
CVE-2026-100906 | Medium | 5.3 | 2026-09-28 | A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipu… |
CVE-2026-100904 | Low | 3.5 | 2026-09-28 | A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is… |
CVE-2026-100903 | Medium | 5.3 | 2026-09-28 | A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST… |
CVE-2026-100902 | Medium | 6.5 | 2026-09-28 | A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper… |
CVE-2026-100901 | High | 7.3 | 2026-09-28 | A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. Th… |
CVE-2026-100900 | Medium | 5.5 | 2026-09-28 | A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file… |
CVE-2026-100899 | Medium | 6.3 | 2026-09-28 | A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widge… |
CVE-2026-100898 | Medium | 6.3 | 2026-09-28 | A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament… |
CVE-2026-100897 | Medium | 5.5 | 2026-09-28 | A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of… |
CVE-2026-100896 | Critical | 9.9 | 2026-09-28 | A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the comp… |
CVE-2026-100895 | Medium | 5.3 | 2026-09-28 | A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/a… |
CVE-2026-100894 | Medium | 6.3 | 2026-09-28 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown proce… |
CVE-2026-100893 | High | 7.3 | 2026-09-28 | A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the file src/api/resource… |
CVE-2026-100892 | Medium | 5.3 | 2026-09-28 | A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the componen… |
CVE-2026-100891 | High | 7.3 | 2026-09-28 | A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc in the libr… |
CVE-2026-100890 | Medium | 5.3 | 2026-09-28 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library… |
CVE-2026-100889 | High | 7.3 | 2026-09-28 | A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of the component Decod… |
CVE-2026-100888 | High | 7.3 | 2026-09-28 | A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-ca… |
CVE-2026-100887 | Medium | 6.3 | 2026-09-28 | A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted elemen… |
CVE-2026-96284 | Low | 2.5 | 2026-09-27 | A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the… |
CVE-2026-100886 | Critical | 10.0 | 2026-09-27 | A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the componen… |
CVE-2026-100885 | High | 7.3 | 2026-09-27 | A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInst… |
CVE-2026-100884 | Medium | 4.3 | 2026-09-27 | A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/… |
CVE-2026-100883 | Medium | 6.3 | 2026-09-27 | A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Exec… |
CVE-2026-96283 | Low | 3.3 | 2026-09-27 | By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, makin… |
CVE-2026-96282 | Low | 3.1 | 2026-09-27 | A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can b… |
CVE-2026-100882 | Low | 2.4 | 2026-09-27 | A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/component… |
CVE-2026-100881 | Low | 2.6 | 2026-09-27 | A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such… |
CVE-2026-96281 | Medium | 6.2 | 2026-09-27 | On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote re… |
CVE-2026-96280 | High | 7.5 | 2026-09-27 | The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing und… |
CVE-2026-101090 | Critical | 9.8 | 2026-09-27 | Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host setting is empty, /api/v1/oauth2/… |
CVE-2026-101089 | Low | 3.1 | 2026-09-27 | Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authen… |
CVE-2026-101088 | Medium | 5.3 | 2026-09-27 | Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/singleton/servicesentinel.go) contains a… |
CVE-2026-101087 | Medium | 4.3 | 2026-09-27 | Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cov… |
CVE-2026-101086 | Medium | 6.5 | 2026-09-27 | Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:wri… |
CVE-2026-101085 | Medium | 6.5 | 2026-09-27 | Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger… |
CVE-2026-101084 | Critical | 9.6 | 2026-09-27 | obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP se… |
CVE-2026-101065 | Critical | 9.8 | 2026-09-27 | Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts… |
CVE-2026-101064 | High | 7.6 | 2026-09-27 | Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary UR… |
CVE-2026-101063 | Medium | 5.3 | 2026-09-27 | Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. Unauthenticated at… |