2026 CVEs (page 302)
Page 302 of 691 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-69096 | High | 8.8 | 2026-08-03 | OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an O… |
CVE-2026-69095 | High | 7.5 | 2026-08-03 | OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows un… |
CVE-2026-69094 | Medium | 4.3 | 2026-08-03 | Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the save_temporary mode of mylist_function.php that allows authenticated us… |
CVE-2026-69093 | Medium | 4.6 | 2026-08-03 | Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration… |
CVE-2026-69092 | Medium | 6.5 | 2026-08-03 | Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the… |
CVE-2026-69091 | High | 7.5 | 2026-08-03 | Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modul… |
CVE-2026-69090 | Medium | 4.9 | 2026-08-03 | Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deacti… |
CVE-2026-69089 | High | 7.5 | 2026-08-03 | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to RocketTheme\Toolbox\Resour… |
CVE-2026-69088 | High | 8.1 | 2026-08-03 | Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint dynamic-field directives because Bluep… |
CVE-2026-69087 | Medium | 6.5 | 2026-08-03 | The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates use… |
CVE-2026-69086 | High | 7.7 | 2026-08-03 | SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traver… |
CVE-2026-69085 | Critical | 10.0 | 2026-08-03 | SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenat… |
CVE-2026-69084 | Critical | 10.0 | 2026-08-03 | SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan… |
CVE-2026-69083 | Critical | 10.0 | 2026-08-03 | SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish R… |
CVE-2026-68587 | High | 8.6 | 2026-08-03 | SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingIns… |
CVE-2026-68586 | High | 8.6 | 2026-08-03 | SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/… |
CVE-2026-68585 | Medium | 5.8 | 2026-08-03 | SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including… |
CVE-2026-68584 | High | 8.6 | 2026-08-03 | SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeadin… |
CVE-2026-67608 | High | 7.2 | 2026-08-03 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php th… |
CVE-2026-64827 | Critical | 9.8 | 2026-08-03 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where… |
CVE-2026-18642 | High | 7.8 | 2026-08-03 | Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue af… |
CVE-2026-18601 | Critical | 9.8 | 2026-08-03 | A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-c… |
CVE-2026-18600 | High | 8.8 | 2026-08-03 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of the file /usr/lib/oui-h… |
CVE-2026-18108 | Critical | 9.8 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content… |
CVE-2026-18092 | High | 8.1 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with documen… |
CVE-2026-18089 | High | 7.5 | 2026-08-03 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when n… |
CVE-2026-56609 | Medium | 4.8 | 2026-08-03 | HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and… |
CVE-2026-56608 | Low | 3.7 | 2026-08-03 | HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access o… |
CVE-2026-2346 | Critical | 9.8 | 2026-08-03 | Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile… |
CVE-2026-18599 | High | 8.0 | 2026-08-03 | A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of t… |
CVE-2026-18598 | High | 8.8 | 2026-08-03 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/l… |
CVE-2026-18574 | | 2026-08-03 | An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticat… | |
CVE-2026-69082 | | 2026-08-03 | CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<id> endpoint accepte… | |
CVE-2026-69079 | | 2026-08-03 | CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-contr… | |
CVE-2026-69078 | | 2026-08-03 | CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality. User-controlled CTI content, i… | |
CVE-2026-68742 | Medium | 5.5 | 2026-08-03 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body… |
CVE-2026-33591 | | 2026-08-03 | A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted pa… | |
CVE-2026-0392 | | 2026-08-03 | eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protecte… | |
CVE-2026-69075 | | 2026-08-03 | FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-controlled fields. Persisted values—inc… | |
CVE-2026-63563 | Medium | 6.5 | 2026-08-03 | Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configu… |
CVE-2026-63545 | Low | 2.4 | 2026-08-03 | Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users. |
CVE-2026-62416 | Medium | 5.3 | 2026-08-03 | Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files un… |
CVE-2026-60011 | Medium | 5.3 | 2026-08-03 | Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product. |
CVE-2026-8794 | | 2026-08-03 | PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to… | |
CVE-2026-8793 | | 2026-08-03 | PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vul… | |
CVE-2026-28147 | Medium | 5.4 | 2026-08-03 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Conf… |
CVE-2026-21555 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21554 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21553 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21552 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21551 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21550 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21549 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21548 | High | 7.5 | 2026-08-03 | In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed. |
CVE-2026-18593 | Medium | 5.6 | 2026-08-03 | A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the c… |
CVE-2026-18592 | Medium | 4.7 | 2026-08-03 | A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/Em… |
CVE-2026-18591 | Low | 2.1 | 2026-08-03 | A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the compo… |
CVE-2026-18590 | Medium | 6.3 | 2026-08-03 | A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file adm.cgi of the component Admin Password H… |
CVE-2026-12259 | Medium | 5.3 | 2026-08-03 | In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforc… |
CVE-2026-9593 | Medium | 6.7 | 2026-08-03 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted fi… |
CVE-2026-4793 | High | 7.3 | 2026-08-03 | An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-… |
CVE-2026-18589 | Critical | 9.8 | 2026-08-03 | A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument… |
CVE-2026-18588 | Critical | 9.8 | 2026-08-03 | A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONT… |
CVE-2026-18587 | High | 7.5 | 2026-08-03 | A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulatio… |
CVE-2026-16572 | High | 8.6 | 2026-08-03 | The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated us… |
CVE-2026-16565 | Medium | 4.3 | 2026-08-03 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify product ownership on its product-attribute RE… |
CVE-2026-16564 | Medium | 4.3 | 2026-08-03 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that perfo… |
CVE-2026-16563 | Medium | 6.5 | 2026-08-03 | The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST AP… |
CVE-2026-16539 | High | 8.1 | 2026-08-03 | The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, a… |
CVE-2026-16534 | Critical | 9.1 | 2026-08-03 | The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV i… |
CVE-2026-16532 | Critical | 9.1 | 2026-08-03 | The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthentic… |
CVE-2026-16300 | Critical | 9.8 | 2026-08-03 | The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of ar… |
CVE-2026-16297 | Medium | 4.1 | 2026-08-03 | The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-import data, allowing users with administrat… |
CVE-2026-16289 | Medium | 4.3 | 2026-08-03 | The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authent… |
CVE-2026-16276 | Low | 2.7 | 2026-08-03 | The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allow… |
CVE-2026-16274 | Low | 2.7 | 2026-08-03 | The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowin… |
CVE-2026-16250 | Critical | 9.8 | 2026-08-03 | The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an unauthenticated handler, allowing unauthe… |
CVE-2026-16060 | Critical | 9.8 | 2026-08-03 | The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, relying on a… |
CVE-2026-16057 | Medium | 6.5 | 2026-08-03 | The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only… |
CVE-2026-15931 | Medium | 6.1 | 2026-08-03 | The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval request, nor es… |
CVE-2026-15930 | Critical | 9.4 | 2026-08-03 | The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user… |
CVE-2026-15383 | Medium | 6.1 | 2026-08-03 | The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated… |
CVE-2026-15260 | Medium | 4.3 | 2026-08-03 | The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subs… |
CVE-2026-15254 | Medium | 6.5 | 2026-08-03 | The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and… |
CVE-2026-15231 | Low | 2.7 | 2026-08-03 | The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing… |
CVE-2026-14557 | Critical | 9.1 | 2026-08-03 | The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification… |
CVE-2026-13340 | Medium | 6.1 | 2026-08-03 | The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz extension, even though it registers and se… |
CVE-2026-12965 | Critical | 9.1 | 2026-08-03 | The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing un… |
CVE-2026-12872 | Critical | 9.8 | 2026-08-03 | The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authentication, capabil… |
CVE-2026-6695 | Medium | 5.5 | 2026-08-03 | A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This… |
CVE-2026-6694 | Medium | 5.5 | 2026-08-03 | A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containi… |
CVE-2026-18585 | Medium | 4.3 | 2026-08-03 | A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected… |
CVE-2026-18584 | Medium | 5.4 | 2026-08-03 | A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /… |
CVE-2026-18583 | Medium | 5.3 | 2026-08-03 | A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms… |
CVE-2026-14682 | High | 7.5 | 2026-08-03 | In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Jav… |
CVE-2026-13586 | High | 7.5 | 2026-08-03 | In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS befor… |
CVE-2026-13506 | High | 7.5 | 2026-08-03 | In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.1… |
CVE-2026-12860 | Medium | 5.3 | 2026-08-03 | In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java L… |
CVE-2026-12852 | High | 7.5 | 2026-08-03 | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check. |
CVE-2026-12817 | High | 8.6 | 2026-08-03 | In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before… |