2026 CVEs (page 386)
Page 386 of 446 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25960 | High | 7.1 | 2026-03-09 | vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_… |
CVE-2026-25737 | High | 8.9 | 2026-03-09 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists… |
CVE-2026-25045 | High | 8.8 | 2026-03-09 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. This issue is a combination of Vertical Privilege Escalation and IDOR… |
CVE-2026-25041 | High | 7.2 | 2026-03-09 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell c… |
CVE-2026-0846 | High | 7.5 | 2026-03-09 | A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input p… |
CVE-2026-3638 | Medium | 5.9 | 2026-03-09 | Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to rest… |
CVE-2026-30140 | High | 7.5 | 2026-03-09 | An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg e… |
CVE-2026-29023 | High | 7.3 | 2026-03-09 | Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to… |
CVE-2026-3588 | High | 7.5 | 2026-03-09 | A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request. |
CVE-2026-25866 | High | 7.8 | 2026-03-09 | MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully… |
CVE-2026-3089 | Medium | 6.5 | 2026-03-09 | Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to 26.3.0, improper validation of the user… |
CVE-2026-2919 | Medium | 4.3 | 2026-03-09 | Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and tr… |
CVE-2026-3819 | Low | 3.5 | 2026-03-09 | A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservati… |
CVE-2026-3038 | High | 7.5 | 2026-03-09 | The rtsock_msg_buffer() function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddr_storage struct… |
CVE-2026-2261 | High | 7.5 | 2026-03-09 | Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached… |
CVE-2026-21736 | Medium | 4.4 | 2026-03-09 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This… |
CVE-2026-3818 | High | 7.3 | 2026-03-09 | A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebService/GetDBData.jsp. This manipulation o… |
CVE-2026-3817 | Medium | 5.3 | 2026-03-09 | A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. This issue affects some unknown processing of the file /patie… |
CVE-2026-3816 | Medium | 4.3 | 2026-03-09 | A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input_zip.read of the file parser.py of th… |
CVE-2026-3815 | High | 8.8 | 2026-03-09 | A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/formApMail. Executing a manipulation ca… |
CVE-2026-25604 | Medium | 5.4 | 2026-03-09 | In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allo… |
CVE-2026-3814 | High | 8.8 | 2026-03-09 | A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of the file /goform/getOneApConfTempEntry… |
CVE-2026-3813 | Medium | 6.3 | 2026-03-09 | A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the… |
CVE-2026-3812 | Medium | 4.3 | 2026-03-09 | A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This… |
CVE-2026-3811 | High | 8.8 | 2026-03-09 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the… |
CVE-2026-24713 | Critical | 9.8 | 2026-03-09 | Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recomme… |
CVE-2026-24015 | Critical | 9.8 | 2026-03-09 | A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to versi… |
CVE-2026-3810 | High | 8.8 | 2026-03-09 | A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation… |
CVE-2026-3809 | High | 8.8 | 2026-03-09 | A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a… |
CVE-2026-3808 | High | 8.8 | 2026-03-09 | A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Perform… |
CVE-2026-3823 | Critical | 9.8 | 2026-03-09 | EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the… |
CVE-2026-3807 | High | 8.8 | 2026-03-09 | A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such ma… |
CVE-2026-3806 | Medium | 6.3 | 2026-03-09 | A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php… |
CVE-2026-3804 | High | 8.8 | 2026-03-09 | A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilterSet of the file /goform/WifiMacFilterSe… |
CVE-2026-3803 | High | 8.8 | 2026-03-09 | A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation… |
CVE-2026-30896 | High | 7.8 | 2026-03-09 | The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is directed to place some malicious DLL to th… |
CVE-2026-3802 | High | 8.8 | 2026-03-09 | A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a man… |
CVE-2026-3822 | Medium | 6.5 | 2026-03-09 | Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the… |
CVE-2026-3801 | High | 8.8 | 2026-03-09 | A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing… |
CVE-2026-3800 | Medium | 6.3 | 2026-03-09 | A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add… |
CVE-2026-3799 | High | 8.8 | 2026-03-09 | A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 c… |
CVE-2026-3798 | Medium | 4.7 | 2026-03-09 | A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET§ion=ping_config… |
CVE-2026-3797 | Medium | 6.3 | 2026-03-09 | A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/… |
CVE-2026-3796 | Medium | 5.3 | 2026-03-09 | A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureI… |
CVE-2026-3631 | High | 7.5 | 2026-03-09 | Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability. |
CVE-2026-3630 | Critical | 9.8 | 2026-03-09 | Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability. |
CVE-2026-3795 | Medium | 6.3 | 2026-03-09 | A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /DoraCMS/server/app/router/api/v1.js. Perf… |
CVE-2026-3794 | High | 7.3 | 2026-03-09 | A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API… |
CVE-2026-3793 | Medium | 6.3 | 2026-03-09 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file sales_invoice1.php of the… |
CVE-2026-3792 | Medium | 6.3 | 2026-03-09 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchase_invoice.php of the component GET… |
CVE-2026-3791 | Medium | 6.3 | 2026-03-09 | A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php… |
CVE-2026-3790 | Medium | 6.3 | 2026-03-09 | A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file check_supplier_d… |
CVE-2026-3789 | Medium | 6.3 | 2026-03-09 | A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/provide… |
CVE-2026-3788 | Medium | 6.3 | 2026-03-09 | A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/s… |
CVE-2026-3787 | High | 7.0 | 2026-03-08 | A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service… |
CVE-2026-3786 | Medium | 6.3 | 2026-03-08 | A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Re… |
CVE-2026-3785 | Medium | 6.3 | 2026-03-08 | A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request… |
CVE-2026-3771 | Medium | 6.3 | 2026-03-08 | A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. S… |
CVE-2026-3770 | Medium | 4.3 | 2026-03-08 | A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request fo… |
CVE-2026-3769 | High | 8.8 | 2026-03-08 | A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /goform/WrlclientSet. The manipulation of t… |
CVE-2026-3768 | High | 8.8 | 2026-03-08 | A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSe… |
CVE-2026-3767 | Medium | 6.3 | 2026-03-08 | A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php… |
CVE-2026-3766 | Low | 3.5 | 2026-03-08 | A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profi… |
CVE-2026-3765 | High | 7.3 | 2026-03-08 | A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipu… |
CVE-2026-3764 | High | 7.3 | 2026-03-08 | A vulnerability was determined in SourceCodester Client Database Management System 1.0. The impacted element is an unknown function of the file /superadmin_use… |
CVE-2026-3763 | Medium | 4.3 | 2026-03-08 | A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. Th… |
CVE-2026-3762 | High | 7.3 | 2026-03-08 | A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1. Impacted is an unknown function of the file /superadmin_delete_mana… |
CVE-2026-3761 | Medium | 5.4 | 2026-03-08 | A flaw has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /superadmin_user_delete.p… |
CVE-2026-3760 | High | 7.3 | 2026-03-08 | A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing… |
CVE-2026-3759 | High | 7.3 | 2026-03-08 | A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such ma… |
CVE-2026-3758 | High | 7.3 | 2026-03-08 | A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown functionality of the file /admin/adminHome… |
CVE-2026-3757 | High | 7.3 | 2026-03-08 | A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass… |
CVE-2026-3756 | Medium | 6.3 | 2026-03-08 | A vulnerability was identified in SourceCodester Sales and Inventory System up to 1.0. Affected is an unknown function of the file /check_item_details.php. The… |
CVE-2026-3755 | Medium | 6.3 | 2026-03-08 | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /check_customer_details.php of th… |
CVE-2026-3754 | Medium | 6.3 | 2026-03-08 | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /add_stock.php. Performing a manipulat… |
CVE-2026-3753 | Medium | 6.3 | 2026-03-08 | A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /add_sales_print… |
CVE-2026-3752 | Medium | 4.7 | 2026-03-08 | A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.p… |
CVE-2026-3751 | Medium | 4.7 | 2026-03-08 | A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of… |
CVE-2026-3750 | Medium | 4.7 | 2026-03-08 | A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/… |
CVE-2026-3749 | Medium | 6.3 | 2026-03-08 | A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/byte… |
CVE-2026-3748 | Medium | 6.3 | 2026-03-08 | A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/uploa… |
CVE-2026-3747 | High | 7.3 | 2026-03-08 | A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.p… |
CVE-2026-3746 | High | 7.3 | 2026-03-08 | A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-3745 | Medium | 6.3 | 2026-03-08 | A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument Us… |
CVE-2026-3744 | High | 7.3 | 2026-03-08 | A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation o… |
CVE-2026-3743 | Low | 3.5 | 2026-03-08 | A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a manipulation of the arg… |
CVE-2026-3742 | Low | 3.5 | 2026-03-08 | A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. Performing a manipulat… |
CVE-2026-3741 | Low | 3.5 | 2026-03-08 | A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_friendLink.php. Such man… |
CVE-2026-3740 | High | 7.3 | 2026-03-08 | A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This ma… |
CVE-2026-3739 | Medium | 6.3 | 2026-03-08 | A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/s… |
CVE-2026-3738 | Medium | 6.3 | 2026-03-08 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Repor… |
CVE-2026-3737 | Medium | 6.3 | 2026-03-08 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file add_user.php of the component U… |
CVE-2026-3736 | High | 7.3 | 2026-03-08 | A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of the file SearchResu… |
CVE-2026-3735 | High | 7.3 | 2026-03-08 | A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-3734 | High | 7.3 | 2026-03-08 | A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the co… |
CVE-2026-3733 | Medium | 6.3 | 2026-03-08 | A vulnerability was detected in xuxueli xxl-job up to 3.3.2. This impacts an unknown function of the file source-code/src/main/java/com/xxl/job/admin/controlle… |
CVE-2026-3732 | High | 8.8 | 2026-03-08 | A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argu… |
CVE-2026-3731 | Medium | 5.3 | 2026-03-08 | A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/s… |
CVE-2026-3730 | High | 7.3 | 2026-03-08 | A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod… |
CVE-2026-3729 | High | 8.8 | 2026-03-08 | A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the a… |