2026 CVEs (page 3)
Page 3 of 658 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-103343 | Medium | 6.5 | 2026-10-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP ManageNinja LLC FluentForm fluentform allows Stored XS… |
CVE-2026-103341 | Medium | 5.3 | 2026-10-01 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor a… |
CVE-2026-103340 | Medium | 5.3 | 2026-10-01 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2026-103339 | Medium | 6.5 | 2026-10-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Metform metform allows Stored XSS.This issue affect… |
CVE-2026-103338 | High | 8.5 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free… |
CVE-2026-103067 | High | 8.0 | 2026-10-01 | Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Me… |
CVE-2026-103064 | Medium | 6.5 | 2026-10-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite… |
CVE-2026-103063 | Medium | 6.5 | 2026-10-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite… |
CVE-2026-102394 | Medium | 6.5 | 2026-10-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addo… |
CVE-2026-102390 | Medium | 5.3 | 2026-10-01 | Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Con… |
CVE-2026-102382 | Medium | 4.3 | 2026-10-01 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-102381 | Medium | 5.3 | 2026-10-01 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-102379 | High | 8.5 | 2026-10-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – C… |
CVE-2026-94276 | | 2026-10-01 | Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that… | |
CVE-2026-94269 | | 2026-10-01 | Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a permissive route overlaps a protec… | |
CVE-2026-94250 | | 2026-10-01 | Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthenticated caller can drive a gateway… | |
CVE-2026-94220 | | 2026-10-01 | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted… | |
CVE-2026-94212 | | 2026-10-01 | Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route prot… | |
CVE-2026-103858 | | 2026-10-01 | MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post… | |
CVE-2026-103754 | Medium | 5.9 | 2026-10-01 | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner tr… |
CVE-2026-103680 | Low | 3.1 | 2026-10-01 | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate file… |
CVE-2026-103679 | Medium | 6.5 | 2026-10-01 | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) fil… |
CVE-2026-103678 | Medium | 5.4 | 2026-10-01 | A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data… |
CVE-2026-103336 | Medium | 5.3 | 2026-10-01 | Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded… |
CVE-2026-88789 | High | 8.6 | 2026-10-01 | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.3… |
CVE-2026-82806 | | 2026-10-01 | Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported au… | |
CVE-2026-78242 | | 2026-10-01 | Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the… | |
CVE-2026-103758 | High | 8.1 | 2026-10-01 | Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list om… |
CVE-2026-103757 | High | 7.7 | 2026-10-01 | Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utili… |
CVE-2026-103353 | Medium | 5.3 | 2026-10-01 | Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm… |
CVE-2026-103292 | High | 8.0 | 2026-10-01 | Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An au… |
CVE-2026-103291 | Medium | 6.4 | 2026-10-01 | Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff user… |
CVE-2026-103290 | Low | 3.8 | 2026-10-01 | Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-s… |
CVE-2026-103289 | Medium | 6.5 | 2026-10-01 | Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not aut… |
CVE-2026-103288 | Medium | 6.5 | 2026-10-01 | Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated… |
CVE-2026-103287 | Low | 2.7 | 2026-10-01 | Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts… |
CVE-2026-103286 | High | 7.3 | 2026-10-01 | Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to esca… |
CVE-2026-103285 | Medium | 4.3 | 2026-10-01 | Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit… |
CVE-2026-103284 | Medium | 4.3 | 2026-10-01 | Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users t… |
CVE-2026-103283 | High | 8.1 | 2026-10-01 | Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only… |
CVE-2026-103282 | Medium | 4.3 | 2026-10-01 | Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a… |
CVE-2026-103281 | Medium | 5.4 | 2026-10-01 | Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated… |
CVE-2026-103280 | Medium | 5.3 | 2026-10-01 | Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated request… |
CVE-2026-103279 | Medium | 6.8 | 2026-10-01 | Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain acc… |
CVE-2026-103278 | High | 7.3 | 2026-10-01 | Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attack… |
CVE-2026-103277 | High | 8.1 | 2026-10-01 | Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally host… |
CVE-2026-103276 | Medium | 5.3 | 2026-10-01 | Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata… |
CVE-2026-103275 | Medium | 4.3 | 2026-10-01 | Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters… |
CVE-2026-103274 | Medium | 5.3 | 2026-10-01 | Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should… |
CVE-2026-103273 | Medium | 4.3 | 2026-10-01 | Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing… |
CVE-2026-103272 | High | 7.5 | 2026-10-01 | Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers to leak user data… |
CVE-2026-103271 | High | 7.5 | 2026-10-01 | Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can by… |
CVE-2026-103269 | Medium | 5.3 | 2026-10-01 | Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do… |
CVE-2026-103268 | High | 8.8 | 2026-10-01 | Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service… |
CVE-2026-103267 | Medium | 4.3 | 2026-10-01 | Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any email address when crea… |
CVE-2026-103266 | High | 7.1 | 2026-10-01 | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subsc… |
CVE-2026-103265 | Medium | 4.3 | 2026-10-01 | Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM… |
CVE-2026-103264 | Critical | 9.1 | 2026-10-01 | Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tok… |
CVE-2026-103263 | Medium | 5.9 | 2026-10-01 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the res… |
CVE-2026-103262 | High | 7.5 | 2026-10-01 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of ser… |
CVE-2026-103261 | Medium | 5.3 | 2026-10-01 | Tornado before 6.5.9 fails to limit the number of query string fields in HTTPServerRequest.__init__, allowing remote attackers to cause event-loop stalling by… |
CVE-2026-103260 | Medium | 4.0 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers ca… |
CVE-2026-103259 | High | 7.6 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. At… |
CVE-2026-103258 | Medium | 6.8 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes… |
CVE-2026-103257 | High | 7.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to vali… |
CVE-2026-103256 | High | 7.1 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that se… |
CVE-2026-103255 | Critical | 9.0 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the Supabase node where the tab… |
CVE-2026-103254 | Medium | 6.3 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation fo… |
CVE-2026-103253 | High | 8.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Dele… |
CVE-2026-103252 | High | 7.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endp… |
CVE-2026-103251 | High | 7.1 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package instal… |
CVE-2026-103250 | High | 8.1 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node t… |
CVE-2026-103249 | High | 7.6 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locat… |
CVE-2026-103248 | Critical | 9.0 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filter injection vulnerability in the Supabase node's Filters (… |
CVE-2026-103247 | High | 8.5 | 2026-10-01 | n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with… |
CVE-2026-103246 | High | 7.7 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference… |
CVE-2026-103245 | Medium | 5.3 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node w… |
CVE-2026-103244 | Critical | 9.8 | 2026-10-01 | ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execu… |
CVE-2026-103082 | High | 7.2 | 2026-10-01 | Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This… |
CVE-2026-96577 | High | 7.1 | 2026-10-01 | A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encrypt… |
CVE-2026-96256 | Medium | 6.4 | 2026-10-01 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google… |
CVE-2026-92144 | High | 7.2 | 2026-10-01 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postdata-1[post-… |
CVE-2026-83589 | Medium | 6.1 | 2026-10-01 | A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote a… |
CVE-2026-7176 | | 2026-10-01 | CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifyin… | |
CVE-2026-7175 | | 2026-10-01 | CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of Jav… | |
CVE-2026-7174 | | 2026-10-01 | CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/… | |
CVE-2026-7173 | | 2026-10-01 | CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a sp… | |
CVE-2026-75786 | | 2026-10-01 | Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onw… | |
CVE-2026-64950 | | 2026-10-01 | Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user inter… | |
CVE-2026-64949 | | 2026-10-01 | Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwa… | |
CVE-2026-64948 | | 2026-10-01 | Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards. | |
CVE-2026-64947 | | 2026-10-01 | A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, result… | |
CVE-2026-64946 | | 2026-10-01 | A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltrati… | |
CVE-2026-34190 | | 2026-10-01 | Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated a… | |
CVE-2026-34189 | | 2026-10-01 | Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator vi… | |
CVE-2026-103497 | Medium | 5.5 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration |
CVE-2026-103496 | Medium | 5.4 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications |
CVE-2026-103495 | Medium | 4.3 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs |
CVE-2026-103494 | Medium | 6.6 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes |
CVE-2026-103493 | High | 8.1 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible |