2026 CVEs (page 268)

Page 268 of 469 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 268 of 469)
CVESeverityScorePublishedSummary
CVE-2026-47716Low3.12026-05-26Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but a…
CVE-2026-47715Low3.12026-05-26Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions…
CVE-2026-46431Medium4.32026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server's Access-Control-Allow-Origin response header was hardcoded to the…
CVE-2026-46430Medium4.32026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Linux/macOS by default because the platfo…
CVE-2026-45836Medium5.52026-05-26In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL gu…
CVE-2026-45835Medium5.52026-05-26In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL…
CVE-2026-45834Medium5.52026-05-26In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL gu…
CVE-2026-45728High7.52026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode…
CVE-2026-45721Critical9.02026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index f…
CVE-2026-44729High8.72026-05-26Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve uploaded files using…
CVE-2026-44723Medium5.02026-05-26Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside doub…
CVE-2026-44680High7.62026-05-26MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.1…
CVE-2026-44502Medium4.32026-05-26Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsi…
CVE-2026-44314Medium4.32026-05-26Traccar is an open source GPS tracking system. Prior to 6.13.0, DeviceResource.uploadImage authorizes the target device only through Condition.Permission(User…
CVE-2026-439822026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-suppl…
CVE-2026-439812026-05-26Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released be…
CVE-2026-40384High7.52026-05-26An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.
CVE-2026-40383Critical9.82026-05-26An improper validation of user-supplied input leads to a local file inclusion vulnerability.
CVE-2026-35223Critical9.82026-05-26An improper access check allows unauthorized access to com_config webservice endpoints.
CVE-2026-35222Critical9.82026-05-26Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.
CVE-2026-35221Critical9.82026-05-26Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
CVE-2026-35220Medium4.32026-05-26Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.
CVE-2026-30895Medium6.12026-05-26Lack of output escaping leads to a XSS vector in the readmore links for com_content.
CVE-2026-30894Medium6.12026-05-26Lack of output escaping leads to a XSS vector in the content history component.
CVE-2026-22642026-05-26A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate s…
CVE-2026-25901Medium6.12026-05-26Lack of output escaping leads to a XSS vector in the multilingual associations component.
CVE-2026-25900Medium6.12026-05-26Lack of output escaping leads to a XSS vector in the feed modules.
CVE-2026-24212High7.52026-05-26NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability…
CVE-2026-24162High7.82026-05-26NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of th…
CVE-2026-48692High8.12026-05-26FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::Insec…
CVE-2026-48688High7.52026-05-26FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH_NLRI IPv6 attribute decoder. The function decode_mp_reach_…
CVE-2026-48687Critical9.82026-05-26FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/…
CVE-2026-48686Critical9.82026-05-26FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The functio…
CVE-2026-48685Medium6.52026-05-26FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set…
CVE-2026-48684Medium6.52026-05-26FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. In process_netflow_v9_options_template() (…
CVE-2026-48683Medium6.52026-05-26FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow…
CVE-2026-46620Medium6.52026-05-26e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem…
CVE-2026-43936Medium4.32026-05-26e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File…
CVE-2026-43935High8.12026-05-26e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the…
CVE-2026-43934Medium6.52026-05-26e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the application, allowing an unauthorized authentica…
CVE-2026-40564Medium6.52026-05-26Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob…
CVE-2026-38587Medium4.32026-05-26An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. Th…
CVE-2026-25112High7.82026-05-26A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
CVE-2026-9552High7.32026-05-26A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoin…
CVE-2026-9551High7.32026-05-26A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRec…
CVE-2026-9550High7.32026-05-26A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown…
CVE-2026-4480Critical9.02026-05-26A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command"…
CVE-2026-46368High8.82026-05-26luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packa…
CVE-2026-45247Critical9.82026-05-26Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to ach…
CVE-2026-45082High7.62026-05-26Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0…
CVE-2026-42785High7.22026-05-26OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /adm…
CVE-2026-42425High7.22026-05-26OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against t…
CVE-2026-41917Medium4.92026-05-26OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrat…
CVE-2026-41401Medium6.52026-05-26libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freei…
CVE-2026-40034High7.82026-05-26gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the…
CVE-2026-40033High8.82026-05-26FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory. The…
CVE-2026-9544High7.32026-05-26A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functiona…
CVE-2026-9543Critical9.82026-05-26A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the componen…
CVE-2026-9542Medium6.32026-05-26A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executin…
CVE-2026-9541Medium5.32026-05-26A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Han…
CVE-2026-9540Medium5.32026-05-26A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such ma…
CVE-2026-84792026-05-26IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a…
CVE-2026-8174Medium5.72026-05-26Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wordpress plugin versions before 1.6.2.
CVE-2026-7374Critical9.92026-05-26A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to…
CVE-2026-73102026-05-26A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local access can exploit this…
CVE-2026-48136Medium4.12026-05-26When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can mod…
CVE-2026-48135Medium5.32026-05-26A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation.
CVE-2026-48134Medium5.62026-05-26When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access…
CVE-2026-48133High7.52026-05-26When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Secur…
CVE-2026-48132High8.12026-05-26The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malfo…
CVE-2026-48131High8.12026-05-26The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause…
CVE-2026-44410Low3.82026-05-26This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the…
CVE-2026-39661High7.52026-05-26Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local Fil…
CVE-2026-39642Medium5.32026-05-26Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: f…
CVE-2026-27427Medium6.52026-05-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affe…
CVE-2026-25713High7.82026-05-26MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability
CVE-2026-25104High7.82026-05-26MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability
CVE-2026-24638Medium4.32026-05-26Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affect…
CVE-2026-24590Medium5.32026-05-26Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. T…
CVE-2026-8047High7.52026-05-26The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated…
CVE-2026-8046High8.12026-05-26The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerabil…
CVE-2026-44469High7.82026-05-26The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileg…
CVE-2026-44468High7.82026-05-26The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to m…
CVE-2026-39655Medium5.32026-05-26Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects M…
CVE-2026-9534Medium6.32026-05-26A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Hand…
CVE-2026-9533Medium6.32026-05-26A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the comp…
CVE-2026-9532Medium6.32026-05-26A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploadUserData of the file /cgi-bin/cstecgi…
CVE-2026-9496High7.52026-05-26Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this…
CVE-2026-9495High7.32026-05-26Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the…
CVE-2026-3314Medium4.62026-05-26Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe modules…
CVE-2026-9531Medium6.32026-05-26A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setti…
CVE-2026-9530Low3.32026-05-26A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the co…
CVE-2026-9529Low3.32026-05-26A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component…
CVE-2026-9528High7.32026-05-26A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete_judge.php. Such manipul…
CVE-2026-9527Medium4.32026-05-26A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing of the file /admin/judges.php. This ma…
CVE-2026-9526High7.32026-05-26A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit_team.php. The manipula…
CVE-2026-9525High7.32026-05-26A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /admin/edit_judge.php. The manipulation…
CVE-2026-9524Medium6.32026-05-26A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing…
CVE-2026-9523High7.32026-05-26A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2. Affected by this vulnerability is an…
CVE-2026-9538High7.52026-05-26Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payl…