2026 CVEs (page 220)
Page 220 of 469 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-36933 | Medium | 6.8 | 2026-06-15 | An issue in Boyleep K11, y108 firmware v.2.3.0.11291 allows a physically proximate attacker to execute arbitrary code via the factory test feature. |
CVE-2026-36670 | High | 8.8 | 2026-06-15 | A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticat… |
CVE-2026-36537 | Critical | 9.8 | 2026-06-15 | ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied id… |
CVE-2026-36521 | Medium | 6.1 | 2026-06-15 | PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module. |
CVE-2026-36213 | High | 7.8 | 2026-06-15 | An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component. |
CVE-2026-30121 | Critical | 9.1 | 2026-06-15 | remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability. |
CVE-2026-30120 | Critical | 9.8 | 2026-06-15 | remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability. |
CVE-2026-11931 | Medium | 5.5 | 2026-06-15 | Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or p… |
CVE-2026-8358 | | 2026-06-15 | LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for t… | |
CVE-2026-8357 | High | 7.8 | 2026-06-15 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening t… |
CVE-2026-8356 | | 2026-06-15 | LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-siz… | |
CVE-2026-6047 | | 2026-06-15 | LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A han… | |
CVE-2026-6045 | | 2026-06-15 | LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of g… | |
CVE-2026-6040 | High | 7.3 | 2026-06-15 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked agains… |
CVE-2026-6039 | | 2026-06-15 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken fro… | |
CVE-2026-49294 | Medium | 6.1 | 2026-06-15 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and prior are vulnerable to reflected cros… |
CVE-2026-47777 | High | 7.5 | 2026-06-15 | Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented… |
CVE-2026-20262 | Medium | 6.5 | 2026-06-15 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or over… |
CVE-2026-9863 | High | 7.5 | 2026-06-15 | Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicio… |
CVE-2026-9862 | Critical | 9.8 | 2026-06-15 | Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with networ… |
CVE-2026-9595 | Medium | 5.3 | 2026-06-15 | Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and… |
CVE-2026-8683 | Medium | 6.5 | 2026-06-15 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a maliciou… |
CVE-2026-5038 | Medium | 5.3 | 2026-06-15 | Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multip… |
CVE-2026-10634 | Medium | 4.8 | 2026-06-15 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, whi… |
CVE-2026-6517 | Medium | 6.3 | 2026-06-15 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop… |
CVE-2026-5242 | High | 8.8 | 2026-06-15 | Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This issue affects Pizzy L… |
CVE-2026-5233 | High | 7.1 | 2026-06-15 | Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issue affects Pizzy Library: from 1.0.0.262… |
CVE-2026-5230 | High | 7.1 | 2026-06-15 | Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2026-5079 | High | 7.5 | 2026-06-15 | Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The a… |
CVE-2026-52704 | Critical | 10.0 | 2026-06-15 | Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issu… |
CVE-2026-49111 | High | 8.8 | 2026-06-15 | Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2… |
CVE-2026-49064 | High | 7.5 | 2026-06-15 | Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n… |
CVE-2026-49062 | High | 8.8 | 2026-06-15 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.J… |
CVE-2026-48969 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions. |
CVE-2026-5482 | | 2026-06-15 | Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to… | |
CVE-2026-49757 | | 2026-06-15 | Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthentication allows account takeover of local users via OAuth2/OIDC sign-in. AshAuthentic… | |
CVE-2026-34030 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch… | |
CVE-2026-34029 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptographic key in the SafeSystem.Infrastructure.Security.dll co… | |
CVE-2026-34028 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An… | |
CVE-2026-34027 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcusto… | |
CVE-2026-34026 | | 2026-06-15 | Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservi… | |
CVE-2026-34025 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application re… | |
CVE-2026-34024 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenti… | |
CVE-2026-34023 | | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vulnerability in the WebSocket communication used by… | |
CVE-2026-34022 | | 2026-06-15 | The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptog… | |
CVE-2026-34021 | | 2026-06-15 | The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller witho… | |
CVE-2026-12057 | High | 8.6 | 2026-06-15 | When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remot… |
CVE-2026-50100 | High | 7.8 | 2026-06-15 | Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is… |
CVE-2026-44188 | Medium | 5.3 | 2026-06-15 | A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access… |
CVE-2026-11860 | | 2026-06-15 | Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with seria… | |
CVE-2026-9278 | Medium | 5.4 | 2026-06-15 | The Form Builder CP WordPress plugin before 1.2.47 does not properly sanitize a form configuration value before storing it and using it as part of a client-sid… |
CVE-2026-8935 | Critical | 9.8 | 2026-06-15 | The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page… |
CVE-2026-8386 | Medium | 5.3 | 2026-06-15 | The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticat… |
CVE-2026-8385 | Medium | 5.3 | 2026-06-15 | The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allow… |
CVE-2026-12223 | Medium | 5.5 | 2026-06-15 | A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner… |
CVE-2026-12222 | High | 8.0 | 2026-06-15 | A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component… |
CVE-2026-12221 | High | 8.0 | 2026-06-15 | A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk… |
CVE-2026-12220 | High | 8.0 | 2026-06-15 | A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebych… |
CVE-2026-12219 | Medium | 6.3 | 2026-06-15 | A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start o… |
CVE-2026-12218 | High | 8.0 | 2026-06-15 | A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest… |
CVE-2026-12217 | High | 7.8 | 2026-06-15 | A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed… |
CVE-2026-12216 | Medium | 5.3 | 2026-06-15 | A weakness has been identified in svaarala duktape up to 2.99.99. This issue affects some unknown processing of the file duk_api_bytecode.c. Executing a manipu… |
CVE-2026-12214 | High | 7.8 | 2026-06-15 | A security flaw has been discovered in Qihoo 360 Total Security 6.0. This vulnerability affects the function RpcStringBindingComposeW of the component Nucleus… |
CVE-2026-12213 | Medium | 4.3 | 2026-06-15 | A vulnerability was found in hcengineering Huly Platform up to 0.7.0. Affected by this vulnerability is the function getAccountInfo of the file server/account/… |
CVE-2026-12212 | Medium | 4.3 | 2026-06-15 | A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src/operations… |
CVE-2026-12211 | Low | 2.7 | 2026-06-15 | A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the… |
CVE-2026-12210 | Medium | 6.3 | 2026-06-15 | A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. P… |
CVE-2026-12209 | Medium | 5.3 | 2026-06-15 | A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of t… |
CVE-2026-12208 | Medium | 5.3 | 2026-06-15 | A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the file src/jsonata.js of the component… |
CVE-2026-12207 | Medium | 4.3 | 2026-06-15 | A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the function actionGetPatientById of the f… |
CVE-2026-12206 | Medium | 6.3 | 2026-06-15 | A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntity of the file modules/assays/backend/ap… |
CVE-2026-12204 | High | 7.3 | 2026-06-15 | A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function OrderClose/OrderSuccess/PayLogOrderClose/GoodsGiveIntegral of the… |
CVE-2026-12203 | Medium | 5.3 | 2026-06-15 | A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv… |
CVE-2026-12202 | Low | 2.4 | 2026-06-15 | A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component Blocks Endpoint. S… |
CVE-2026-12201 | Medium | 5.3 | 2026-06-15 | A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This mani… |
CVE-2026-12200 | High | 7.3 | 2026-06-15 | A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of… |
CVE-2026-12198 | High | 7.3 | 2026-06-15 | A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the component A… |
CVE-2026-12197 | High | 7.2 | 2026-06-15 | A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the compo… |
CVE-2026-12193 | High | 7.8 | 2026-06-15 | A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of th… |
CVE-2026-12192 | High | 8.8 | 2026-06-15 | A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The… |
CVE-2026-12191 | High | 7.8 | 2026-06-14 | A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the co… |
CVE-2026-12190 | Medium | 5.3 | 2026-06-14 | A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. Th… |
CVE-2026-12189 | Medium | 5.3 | 2026-06-14 | A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation… |
CVE-2026-12188 | Medium | 6.3 | 2026-06-14 | A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers… |
CVE-2026-12187 | High | 8.8 | 2026-06-14 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/on… |
CVE-2026-12186 | High | 8.8 | 2026-06-14 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library /usr/lib/oui-httpd/rpc/tor of the comp… |
CVE-2026-54413 | High | 8.2 | 2026-06-14 | driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c tha… |
CVE-2026-54412 | High | 8.2 | 2026-06-14 | LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response function in src/mqtt… |
CVE-2026-54411 | Medium | 5.9 | 2026-06-14 | Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb… |
CVE-2026-54410 | High | 8.6 | 2026-06-14 | nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated a… |
CVE-2026-11527 | High | 8.6 | 2026-06-14 | Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. … |
CVE-2026-11526 | Critical | 9.8 | 2026-06-14 | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Image::_make_… |
CVE-2026-54421 | Medium | 6.8 | 2026-06-14 | In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensiti… |
CVE-2026-54420 | High | 8.5 | 2026-06-14 | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell acces… |
CVE-2026-12176 | Medium | 4.3 | 2026-06-14 | A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of… |
CVE-2026-12175 | Medium | 4.7 | 2026-06-13 | A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStu… |
CVE-2026-12174 | High | 8.8 | 2026-06-13 | A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the com… |
CVE-2026-12183 | Critical | 9.8 | 2026-06-13 | Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the sy… |
CVE-2026-6428 | High | 7.6 | 2026-06-13 | SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05… |
CVE-2026-5513 | High | 7.2 | 2026-06-13 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-n… |