2026 CVEs (page 340)

Page 340 of 452 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 340 of 452)
CVESeverityScorePublishedSummary
CVE-2026-22680Medium5.32026-04-07OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate…
CVE-2026-4631Critical9.82026-04-07Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An att…
CVE-2026-39384High7.62026-04-07FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_visibility…
CVE-2026-39316Medium4.02026-04-07OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vulnerabili…
CVE-2026-39314Medium4.02026-04-07OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer underflow vulnera…
CVE-2026-39312High7.52026-04-07SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exist…
CVE-2026-39308High7.12026-04-07PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry publish endpoint writes uploaded recipe bundles to a filesystem path der…
CVE-2026-39307High8.12026-04-07PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write atta…
CVE-2026-39306High7.32026-04-07PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pull flow extracts attacker-controlled .praison tar archives with tar.ex…
CVE-2026-39305Critical9.02026-04-07PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrator feature contains a Path Traversal vulnerability that allows an attacker (or…
CVE-2026-35615High7.52026-04-07PraisonAI is a multi-agent teams system. Prior to 1.5.113, _validate_path() calls os.path.normpath() first, which collapses .. sequences, then checks for '..'…
CVE-2026-35614Critical9.82026-04-07Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe has a SQL injection in bulk_update. This vulnerability is fixed in 16.1…
CVE-2026-35613Medium5.12026-04-07coursevault-preview is a utility for previewing course material files from a configured directory. coursevault-preview versions prior to 0.1.1 contain a path t…
CVE-2026-35611High7.52026-04-07Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI temp…
CVE-2026-35610High8.82026-04-07PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, setCustomPassword(userId, password) and deleteUser(userId) in the accou…
CVE-2026-35608Medium6.12026-04-07QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnerability exists in the file preview endpoint. The application allows SV…
CVE-2026-35607High8.12026-04-07File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the f…
CVE-2026-35606High7.52026-04-07File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the r…
CVE-2026-35605High7.52026-04-07File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the M…
CVE-2026-35604High8.12026-04-07File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, when…
CVE-2026-35592Medium5.32026-04-07pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extractall() function in src/pyload/plugins/extractors/U…
CVE-2026-35586Medium6.82026-04-07pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the ADMIN_ONLY_CORE_OPTIONS authorization set in set_config_value(…
CVE-2026-35585High7.22026-04-07File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33…
CVE-2026-35584Medium6.52026-04-07FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, the endpoint GET /thread/read/{conversation_id}/{thread_id…
CVE-2026-35583Medium5.32026-04-07Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) validated configuration names…
CVE-2026-35581High7.22026-04-07Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the Executrix utility class constructed shell commands by concatenating configuration-der…
CVE-2026-35580Critical9.12026-04-07Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled work…
CVE-2026-35574High7.32026-04-07ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting (XSS) vulnerability in ChurchCRM's Note Editor allows authe…
CVE-2026-35523High7.52026-04-07Strawberry GraphQL is a library for creating GraphQL APIs. Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscript…
CVE-2026-32588Medium6.52026-04-07Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recomm…
CVE-2026-27315Medium5.52026-04-07Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via…
CVE-2026-27314High8.82026-04-07Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their o…
CVE-2026-23696Critical9.92026-04-07Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authent…
CVE-2026-22683High8.82026-04-07Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity cr…
CVE-2026-5745Medium5.52026-04-07A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() fu…
CVE-2026-4931High8.62026-04-07Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.
CVE-2026-35571Medium4.82026-04-07Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled link values directly…
CVE-2026-35534High7.62026-04-07ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists in PersonView.php due to incorrect use…
CVE-2026-35526High7.52026-04-07Strawberry GraphQL is a library for creating GraphQL APIs. Prior to 0.312.3, Strawberry GraphQL's WebSocket subscription handlers for both the graphql-transpor…
CVE-2026-35521High8.82026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine conta…
CVE-2026-35520High8.82026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine conta…
CVE-2026-35519High8.82026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine conta…
CVE-2026-35518High8.82026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine conta…
CVE-2026-35517High8.82026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine conta…
CVE-2026-35516Medium5.02026-04-07LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs…
CVE-2026-35515Medium6.12026-04-07Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and message.id d…
CVE-2026-35492Medium6.52026-04-07Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition ID…
CVE-2026-35491Medium6.12026-04-07FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL supports a CLI p…
CVE-2026-35490Critical9.82026-04-07changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed before (outer to)…
CVE-2026-35489High7.32026-04-07Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the POST /api/food/{id}/shopping/ endpoint…
CVE-2026-35488High8.12026-04-07Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, RecipeBookViewSet and RecipeBookEntryViewS…
CVE-2026-35487Medium5.32026-04-07text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_…
CVE-2026-35486High7.52026-04-07text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user…
CVE-2026-33816Critical9.82026-04-07Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVE-2026-33815Critical9.82026-04-07Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVE-2026-30460High8.82026-04-07Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.
CVE-2026-10792026-04-07A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser…
CVE-2026-10782026-04-07An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations tha…
CVE-2026-5384Medium5.82026-04-07An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved. This is an instan…
CVE-2026-5383Medium4.42026-04-07An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorr…
CVE-2026-5382Low3.02026-04-07An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an instance of CWE-863: In…
CVE-2026-5381Low2.22026-04-07An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authoriza…
CVE-2026-5380Medium5.32026-04-07An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance…
CVE-2026-5379Low3.02026-04-07An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved. This is an instance o…
CVE-2026-5378Medium5.82026-04-07An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved. This is an instance of CWE-86…
CVE-2026-5376Medium5.92026-04-07An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insu…
CVE-2026-5375Low2.72026-04-07An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved. This is an instance of CWE-200…
CVE-2026-5374Medium5.82026-04-07An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an in…
CVE-2026-5373High8.12026-04-07An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This is an instance of CWE-269: Improper Privi…
CVE-2026-5372Medium6.42026-04-07An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0). This is an instance of CWE-89: Improper Neut…
CVE-2026-4740High8.22026-04-07A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes clien…
CVE-2026-4292Low2.72026-04-07An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editable` incorrectly allo…
CVE-2026-4277Critical9.82026-04-07An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submissi…
CVE-2026-3902High7.52026-04-07An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `ASGIRequest` allows a remote attacker to spoof headers by exploiting an…
CVE-2026-35485High7.52026-04-07text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_…
CVE-2026-35484Medium5.32026-04-07text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_…
CVE-2026-35483Medium5.32026-04-07text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_…
CVE-2026-35480Medium6.22026-04-07go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JS…
CVE-2026-35464High7.52026-04-07pyLoad is a free and open-source download manager written in Python. The fix for CVE-2026-33509 added an ADMIN_ONLY_OPTIONS set to block non-admin users from m…
CVE-2026-35463High8.82026-04-07pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_ONLY_OPTIONS protection mechanism restricts securi…
CVE-2026-35462Medium4.32026-04-07Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, API keys with an expiresAt date are never validated against the current ti…
CVE-2026-35461Medium5.02026-04-07Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, the Papra webhook system allows authenticated users to register arbitrary…
CVE-2026-35460Medium4.32026-04-07Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, transactional email templates in Papra interpolate user.name directly into…
CVE-2026-35458Critical9.82026-04-07Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without sett…
CVE-2026-35457High8.22026-04-07libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, the rendezvous server stores pagination cookies witho…
CVE-2026-35405High7.52026-04-07libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to 0.17.1, libp2p-rendezvous server has no limit on how many nam…
CVE-2026-33034High7.52026-04-07An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. ASGI requests with a missing or understated `Content-Length` header coul…
CVE-2026-33033Medium6.52026-04-07An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `MultiPartParser` allows remote attackers to degrade performance by subm…
CVE-2026-30079Critical9.82026-04-07In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be b…
CVE-2026-24660High8.12026-04-07A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead t…
CVE-2026-24450High8.12026-04-07An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lea…
CVE-2026-21413Critical9.82026-04-07A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted…
CVE-2026-20911Critical9.82026-04-07A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted mali…
CVE-2026-20889Critical9.82026-04-07A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead t…
CVE-2026-20884High8.12026-04-07An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious file can lead to a h…
CVE-2026-5627High7.22026-04-07A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability ar…
CVE-2026-35554High8.72026-04-07A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a pro…
CVE-2026-5735Critical9.82026-04-07Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough…
CVE-2026-5734Critical9.82026-04-07Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memo…
CVE-2026-5733High8.82026-04-07Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.