2026 CVEs (page 229)
Page 229 of 469 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-36811 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic functio… |
CVE-2026-36810 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoUrl parameter of the formPortalAuth function… |
CVE-2026-36809 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the formModifyWebAuthW… |
CVE-2026-36808 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUse… |
CVE-2026-36807 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formAddWebAuthUser… |
CVE-2026-36806 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthU… |
CVE-2026-36805 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr… |
CVE-2026-36803 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting function. This vulne… |
CVE-2026-36802 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the SafeMacFilter function. This vu… |
CVE-2026-36801 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindRule parameter of the formIPMacBindAdd funct… |
CVE-2026-36800 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindIndex parameter of the formIPMacBindDel func… |
CVE-2026-36799 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the portalAuth parameter of the formPortalAuth function… |
CVE-2026-36798 | Medium | 6.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, leve… |
CVE-2026-36797 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify f… |
CVE-2026-36796 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic f… |
CVE-2026-36794 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler func… |
CVE-2026-36793 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the formwrlSSIDset function vi… |
CVE-2026-36792 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formWifi… |
CVE-2026-36791 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save_list_data parameter of the formSetCfm function. T… |
CVE-2026-36784 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet… |
CVE-2026-36783 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToo… |
CVE-2026-36779 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVirtualSer function vi… |
CVE-2026-36778 | Medium | 4.9 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the username parameter of the R7WebsSe… |
CVE-2026-36777 | Medium | 6.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCf… |
CVE-2026-36773 | Medium | 6.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot… |
CVE-2026-36772 | Medium | 6.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlS… |
CVE-2026-36771 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlS… |
CVE-2026-36770 | High | 7.5 | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda US_W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. Thi… |
CVE-2026-36728 | Medium | 5.4 | 2026-06-09 | A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web sc… |
CVE-2026-36727 | Critical | 9.1 | 2026-06-09 | An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. |
CVE-2026-36726 | Medium | 5.3 | 2026-06-09 | An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary… |
CVE-2026-36725 | Medium | 6.1 | 2026-06-09 | A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary we… |
CVE-2026-36724 | Medium | 6.5 | 2026-06-09 | An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permis… |
CVE-2026-36723 | High | 8.8 | 2026-06-09 | An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attackers to leverage directory traversal seq… |
CVE-2026-36722 | Medium | 5.4 | 2026-06-09 | An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via upl… |
CVE-2026-36721 | Critical | 9.8 | 2026-06-09 | A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT… |
CVE-2026-36720 | High | 8.1 | 2026-06-09 | Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type. |
CVE-2026-36719 | High | 7.5 | 2026-06-09 | An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information… |
CVE-2026-30141 | Critical | 9.8 | 2026-06-09 | An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash… |
CVE-2026-10045 | Critical | 9.8 | 2026-06-09 | Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enable… |
CVE-2026-50636 | High | 8.8 | 2026-06-09 | The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited(), which conca… |
CVE-2026-50635 | High | 8.8 | 2026-06-09 | LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that wo… |
CVE-2026-50512 | High | 7.8 | 2026-06-09 | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50511 | High | 7.8 | 2026-06-09 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-48293 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2026-44275 | Medium | 6.3 | 2026-06-09 | Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privi… |
CVE-2026-41116 | Medium | 6.3 | 2026-06-09 | Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privi… |
CVE-2026-34708 | High | 7.8 | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the conte… |
CVE-2026-34707 | High | 7.8 | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the contex… |
CVE-2026-34706 | High | 7.8 | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2026-34705 | Medium | 5.5 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… |
CVE-2026-34704 | Medium | 5.5 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servi… |
CVE-2026-34703 | Medium | 5.5 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servi… |
CVE-2026-34702 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34701 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34700 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2026-34699 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34698 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34697 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34696 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context… |
CVE-2026-34695 | High | 7.8 | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in… |
CVE-2026-34694 | Medium | 4.8 | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abuse… |
CVE-2026-34693 | High | 8.0 | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker cou… |
CVE-2026-34691 | Critical | 9.3 | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abuse… |
CVE-2026-28237 | Medium | 5.5 | 2026-06-09 | Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. |
CVE-2026-0466 | Medium | 5.5 | 2026-06-09 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in cra… |
CVE-2026-9213 | High | 8.1 | 2026-06-09 | A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Intern… |
CVE-2026-9212 | High | 8.0 | 2026-06-09 | Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the prod… |
CVE-2026-9211 | High | 8.8 | 2026-06-09 | An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. |
CVE-2026-9210 | Medium | 4.5 | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorize… |
CVE-2026-9076 | High | 7.5 | 2026-06-09 | Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher… |
CVE-2026-7383 | High | 8.1 | 2026-06-09 | Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Im… |
CVE-2026-50508 | Medium | 6.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-50507 | Medium | 6.8 | 2026-06-09 | Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-49959 | High | 8.8 | 2026-06-09 | Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placin… |
CVE-2026-49958 | Medium | 5.0 | 2026-06-09 | Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspac… |
CVE-2026-49957 | High | 7.7 | 2026-06-09 | Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path che… |
CVE-2026-49956 | Medium | 6.5 | 2026-06-09 | Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profil… |
CVE-2026-49955 | Medium | 5.3 | 2026-06-09 | Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability… |
CVE-2026-49848 | Medium | 4.3 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49847 | High | 7.5 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49843 | Medium | 5.3 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49842 | High | 7.5 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49841 | Critical | 9.8 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49840 | Critical | 9.1 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49475 | High | 7.5 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49472 | Medium | 5.3 | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2026-49161 | High | 7.8 | 2026-06-09 | Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. |
CVE-2026-49160 | High | 7.5 | 2026-06-09 | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. |
CVE-2026-48583 | High | 7.8 | 2026-06-09 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-48578 | High | 7.9 | 2026-06-09 | Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally. |
CVE-2026-48576 | High | 7.9 | 2026-06-09 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48575 | High | 7.9 | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48574 | High | 7.8 | 2026-06-09 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-48573 | High | 7.9 | 2026-06-09 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48570 | High | 7.9 | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48569 | High | 7.1 | 2026-06-09 | Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-48568 | High | 7.9 | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48566 | Medium | 5.5 | 2026-06-09 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-48565 | High | 7.8 | 2026-06-09 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |