2026 CVEs (page 220)
Page 220 of 682 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66613 | Critical | 9.8 | 2026-08-19 | Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions. |
CVE-2026-66596 | High | 7.1 | 2026-08-19 | Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions. |
CVE-2026-61986 | High | 7.1 | 2026-08-19 | Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions. |
CVE-2026-32552 | High | 8.5 | 2026-08-19 | Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions. |
CVE-2026-19490 | Critical | 9.8 | 2026-08-19 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through… |
CVE-2026-19489 | | 2026-08-19 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through… | |
CVE-2026-18372 | | 2026-08-19 | CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user inte… | |
CVE-2026-18371 | | 2026-08-19 | HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users. | |
CVE-2026-16440 | | 2026-08-19 | In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. | |
CVE-2026-76166 | Medium | 4.3 | 2026-08-19 | A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status li… |
CVE-2026-76164 | | 2026-08-19 | AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with acc… | |
CVE-2026-75900 | Medium | 6.1 | 2026-08-19 | An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where… |
CVE-2026-75589 | High | 7.5 | 2026-08-19 | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the thre… |
CVE-2026-72889 | Critical | 9.8 | 2026-08-19 | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the sig… |
CVE-2026-58088 | High | 7.4 | 2026-08-19 | The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a se… |
CVE-2026-58087 | High | 7.8 | 2026-08-19 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized… |
CVE-2026-58086 | High | 8.1 | 2026-08-19 | As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was t… |
CVE-2026-58085 | High | 7.5 | 2026-08-19 | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded. The drive… |
CVE-2026-58084 | Medium | 5.5 | 2026-08-19 | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a timer using CLOCK_TAI… |
CVE-2026-58083 | High | 8.4 | 2026-08-19 | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was c… |
CVE-2026-58082 | Critical | 9.8 | 2026-08-19 | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some ISO-2022 variants can require up to 10… |
CVE-2026-58081 | Critical | 9.8 | 2026-08-19 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted char… |
CVE-2026-49425 | Medium | 5.5 | 2026-08-19 | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged… |
CVE-2026-49424 | Medium | 5.5 | 2026-08-19 | The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unp… |
CVE-2026-75981 | High | 7.2 | 2026-08-19 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting in vers… |
CVE-2026-49423 | Low | 3.3 | 2026-08-19 | When building the iovec array for a received TLS 1.2 CBC record, ktls_ocf_tls_cbc_decrypt() incremented the iovec index for every mbuf in the chain, including… |
CVE-2026-15780 | High | 7.2 | 2026-08-19 | The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campai… |
CVE-2026-15446 | Medium | 6.4 | 2026-08-19 | The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all version… |
CVE-2026-8810 | Medium | 6.9 | 2026-08-19 | On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. |
CVE-2026-49431 | Low | 3.3 | 2026-08-19 | The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indi… |
CVE-2026-49430 | High | 7.8 | 2026-08-19 | The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-b… |
CVE-2026-49429 | High | 7.8 | 2026-08-19 | The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the o… |
CVE-2026-49428 | High | 8.4 | 2026-08-19 | Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not p… |
CVE-2026-49427 | High | 8.8 | 2026-08-19 | Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed t… |
CVE-2026-49426 | Low | 3.3 | 2026-08-19 | When auditing a system call executed via ptrace(PT_SC_REMOTE), the kernel passed the return value of an internal setup function to AUDIT_SYSCALL_EXIT() rather… |
CVE-2026-49422 | High | 8.4 | 2026-08-19 | The RACK setsockopt(2) handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies… |
CVE-2026-49421 | High | 7.1 | 2026-08-19 | The kernel function that implements unlinkat(2) and funlinkat(2) validated the AT_RESOLVE_BENEATH flag but failed to pass it through to the underlying path loo… |
CVE-2026-49420 | High | 8.8 | 2026-08-19 | The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whethe… |
CVE-2026-19842 | High | 8.8 | 2026-08-19 | The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers a… |
CVE-2026-19782 | Medium | 5.4 | 2026-08-19 | The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscr… |
CVE-2026-19709 | Medium | 5.3 | 2026-08-19 | The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against… |
CVE-2026-19417 | Medium | 6.5 | 2026-08-19 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient… |
CVE-2026-19416 | Medium | 4.3 | 2026-08-19 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level… |
CVE-2026-19406 | Low | 2.7 | 2026-08-19 | The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting… |
CVE-2026-19056 | High | 7.1 | 2026-08-19 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its adm… |
CVE-2026-19055 | High | 7.1 | 2026-08-19 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its pub… |
CVE-2026-18937 | Critical | 9.0 | 2026-08-19 | The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowin… |
CVE-2026-18779 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to delete ar… |
CVE-2026-18778 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to retrieve… |
CVE-2026-18777 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change th… |
CVE-2026-18776 | Critical | 9.8 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change t… |
CVE-2026-18466 | Medium | 5.4 | 2026-08-19 | The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscri… |
CVE-2026-18231 | Medium | 5.3 | 2026-08-19 | The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database r… |
CVE-2026-18202 | Medium | 6.8 | 2026-08-19 | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with t… |
CVE-2026-18051 | Critical | 10.0 | 2026-08-19 | The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attac… |
CVE-2026-18031 | Critical | 9.8 | 2026-08-19 | The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the ref… |
CVE-2026-17565 | High | 7.2 | 2026-08-19 | The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HT… |
CVE-2026-16979 | Medium | 4.3 | 2026-08-19 | The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users w… |
CVE-2026-16950 | High | 8.6 | 2026-08-19 | The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthentic… |
CVE-2026-16617 | High | 8.8 | 2026-08-19 | The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, a… |
CVE-2026-16616 | High | 8.6 | 2026-08-19 | The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing th… |
CVE-2026-16570 | High | 7.1 | 2026-08-19 | The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its a… |
CVE-2026-16058 | Medium | 5.3 | 2026-08-19 | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are… |
CVE-2026-15253 | Medium | 6.8 | 2026-08-19 | The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media l… |
CVE-2026-14861 | High | 7.5 | 2026-08-19 | The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the… |
CVE-2026-14826 | Low | 2.7 | 2026-08-19 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-no… |
CVE-2026-14825 | Low | 2.7 | 2026-08-19 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings… |
CVE-2026-14334 | High | 8.8 | 2026-08-19 | The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attack… |
CVE-2026-14287 | Medium | 4.7 | 2026-08-19 | The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacke… |
CVE-2026-14196 | Medium | 4.3 | 2026-08-19 | The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, all… |
CVE-2026-13175 | Medium | 6.5 | 2026-08-19 | The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contribut… |
CVE-2026-13174 | High | 7.2 | 2026-08-19 | The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access… |
CVE-2026-13173 | Low | 2.7 | 2026-08-19 | The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata… |
CVE-2026-13169 | High | 8.1 | 2026-08-19 | The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a diffe… |
CVE-2026-12983 | High | 8.6 | 2026-08-19 | The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL… |
CVE-2026-11565 | High | 8.5 | 2026-08-19 | The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users wit… |
CVE-2026-70408 | High | 8.8 | 2026-08-19 | An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges. |
CVE-2026-66358 | Medium | 6.1 | 2026-08-19 | A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script. |
CVE-2026-49419 | High | 8.8 | 2026-08-19 | When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference to the caller's current prison before looking up the jail d… |
CVE-2026-49418 | High | 8.8 | 2026-08-19 | When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pa… |
CVE-2026-49415 | High | 8.8 | 2026-08-19 | During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process runnin… |
CVE-2026-19942 | High | 8.1 | 2026-08-19 | The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion… |
CVE-2026-76050 | High | 7.3 | 2026-08-19 | A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete_… |
CVE-2026-76049 | High | 7.3 | 2026-08-19 | A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=sa… |
CVE-2026-76048 | High | 7.3 | 2026-08-19 | A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=… |
CVE-2026-76014 | Low | 3.3 | 2026-08-19 | A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIM… |
CVE-2026-76008 | Critical | 10.0 | 2026-08-19 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter P… |
CVE-2026-76004 | Critical | 9.9 | 2026-08-19 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /go… |
CVE-2026-76003 | Critical | 9.9 | 2026-08-19 | A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipul… |
CVE-2026-75987 | High | 7.3 | 2026-08-19 | A vulnerability was found in SPLWare esProc up to 20260507. This affects the function ObjectInputStream.readUnshared of the file src/main/java/com/scudata/para… |
CVE-2026-75986 | High | 7.3 | 2026-08-19 | A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the compo… |
CVE-2026-75985 | High | 7.4 | 2026-08-19 | A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argumen… |
CVE-2026-15421 | Medium | 6.4 | 2026-08-19 | The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in… |
CVE-2026-11751 | | 2026-08-19 | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in… | |
CVE-2026-75984 | High | 7.4 | 2026-08-19 | A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument… |
CVE-2026-75979 | Medium | 6.3 | 2026-08-19 | A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.j… |
CVE-2026-75978 | Medium | 6.3 | 2026-08-19 | A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of th… |
CVE-2026-75976 | Critical | 9.9 | 2026-08-19 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This mani… |
CVE-2026-66591 | Medium | 6.5 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. … |
CVE-2026-66589 | Medium | 5.4 | 2026-08-18 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKi… |