2026 CVEs (page 4)
Page 4 of 658 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-103492 | Medium | 6.5 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments |
CVE-2026-103491 | Medium | 6.5 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues |
CVE-2026-103490 | High | 7.2 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links |
CVE-2026-103489 | Low | 2.0 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible |
CVE-2026-103488 | High | 7.1 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues |
CVE-2026-97661 | High | 7.2 | 2026-10-01 | The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, an… |
CVE-2026-96813 | High | 7.2 | 2026-10-01 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on Map Lo… |
CVE-2026-96573 | High | 7.2 | 2026-10-01 | The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field… |
CVE-2026-96268 | Medium | 6.4 | 2026-10-01 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr-data' parameter in al… |
CVE-2026-95687 | High | 8.8 | 2026-10-01 | The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including… |
CVE-2026-92244 | High | 7.2 | 2026-10-01 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company… |
CVE-2026-90992 | Medium | 6.4 | 2026-10-01 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to… |
CVE-2026-89427 | Medium | 6.1 | 2026-10-01 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to… |
CVE-2026-89424 | Medium | 6.4 | 2026-10-01 | The Duplicate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noti_token' parameter in all versions up to, and including, 1.5.6… |
CVE-2026-85235 | High | 7.2 | 2026-10-01 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textare… |
CVE-2026-15983 | High | 8.1 | 2026-10-01 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.31… |
CVE-2026-14995 | High | 7.2 | 2026-10-01 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to in… |
CVE-2026-103664 | | 2026-10-01 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via the URL… | |
CVE-2026-103662 | | 2026-10-01 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the legacy taxonomy tag management confirmation forms (add tag and disable tag). The aff… | |
CVE-2026-103659 | | 2026-10-01 | MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes t… | |
CVE-2026-103655 | | 2026-10-01 | MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once wit… | |
CVE-2026-103431 | High | 7.7 | 2026-10-01 | colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it… |
CVE-2026-101925 | Medium | 6.4 | 2026-10-01 | The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (via /wp-admin/profile.php) + bbp_reply_content (via… |
CVE-2026-100184 | Medium | 4.7 | 2026-10-01 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cro… |
CVE-2026-100179 | Medium | 6.1 | 2026-10-01 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cro… |
CVE-2026-93882 | High | 7.5 | 2026-10-01 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up… |
CVE-2026-89047 | Medium | 6.1 | 2026-10-01 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and i… |
CVE-2026-78249 | | 2026-10-01 | A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier… | |
CVE-2026-75957 | Critical | 9.8 | 2026-10-01 | The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and includ… |
CVE-2026-19902 | Medium | 6.1 | 2026-10-01 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Referer header in all versions up to, a… |
CVE-2026-19807 | High | 8.8 | 2026-10-01 | The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is d… |
CVE-2026-15989 | Critical | 9.8 | 2026-10-01 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is du… |
CVE-2026-103651 | | 2026-10-01 | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token… | |
CVE-2026-103544 | Medium | 6.3 | 2026-10-01 | A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modul… |
CVE-2026-96255 | High | 7.5 | 2026-10-01 | The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's… |
CVE-2026-96200 | Medium | 5.3 | 2026-10-01 | The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provide… |
CVE-2026-96173 | Medium | 5.3 | 2026-10-01 | The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public payment-cal… |
CVE-2026-92412 | High | 7.1 | 2026-10-01 | The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing… |
CVE-2026-90974 | Medium | 6.5 | 2026-10-01 | The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauth… |
CVE-2026-90972 | Medium | 5.4 | 2026-10-01 | The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber… |
CVE-2026-89296 | High | 8.6 | 2026-10-01 | The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated user… |
CVE-2026-88999 | Medium | 4.3 | 2026-10-01 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not prope… |
CVE-2026-87973 | Low | 3.1 | 2026-10-01 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor escape it when rendering the analytics pag… |
CVE-2026-87970 | Medium | 4.7 | 2026-10-01 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it in an unauthenticated AJAX response tha… |
CVE-2026-86610 | Medium | 6.4 | 2026-10-01 | The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which coul… |
CVE-2026-85679 | High | 7.2 | 2026-10-01 | The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6… |
CVE-2026-81809 | High | 7.5 | 2026-10-01 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the… |
CVE-2026-81739 | High | 7.5 | 2026-10-01 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin pag… |
CVE-2026-80276 | High | 7.5 | 2026-10-01 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not requi… |
CVE-2026-80275 | High | 8.8 | 2026-10-01 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative passw… |
CVE-2026-67075 | Medium | 6.5 | 2026-10-01 | HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted… |
CVE-2026-19253 | High | 8.7 | 2026-10-01 | The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not co… |
CVE-2026-103543 | Medium | 6.3 | 2026-10-01 | A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controlle… |
CVE-2026-103542 | Medium | 4.3 | 2026-10-01 | A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/code/actions.php of the component AJAX E… |
CVE-2026-103541 | Medium | 6.3 | 2026-10-01 | A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of… |
CVE-2026-103540 | Medium | 6.3 | 2026-10-01 | A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of… |
CVE-2026-101148 | Critical | 10.0 | 2026-10-01 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, w… |
CVE-2026-101147 | High | 8.8 | 2026-10-01 | The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce… |
CVE-2026-92966 | Critical | 9.1 | 2026-10-01 | The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all… |
CVE-2026-92548 | Medium | 5.3 | 2026-10-01 | The WP Popular Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2 via the 'context' paramet… |
CVE-2026-82829 | Critical | 9.8 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by ex… |
CVE-2026-82828 | High | 8.8 | 2026-10-01 | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. T… |
CVE-2026-82827 | Critical | 9.8 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attac… |
CVE-2026-82826 | High | 7.5 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on… |
CVE-2026-82825 | Critical | 9.8 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invo… |
CVE-2026-82824 | Critical | 9.8 | 2026-10-01 | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete fil… |
CVE-2026-78210 | | 2026-10-01 | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the requ… | |
CVE-2026-76147 | | 2026-10-01 | A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allow… | |
CVE-2026-76146 | | 2026-10-01 | An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary comm… | |
CVE-2026-76145 | | 2026-10-01 | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an… | |
CVE-2026-76144 | | 2026-10-01 | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dan… | |
CVE-2026-76143 | | 2026-10-01 | A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter. | |
CVE-2026-76142 | | 2026-10-01 | Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker t… | |
CVE-2026-12241 | Medium | 5.4 | 2026-10-01 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly… |
CVE-2026-103539 | Medium | 5.4 | 2026-10-01 | A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantb… |
CVE-2026-103538 | Medium | 6.5 | 2026-10-01 | A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderController.deleteOrder of the file order/src/mai… |
CVE-2026-103536 | High | 7.3 | 2026-10-01 | A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/mai… |
CVE-2026-96561 | High | 7.2 | 2026-10-01 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includin… |
CVE-2026-92245 | High | 7.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the '… |
CVE-2026-91109 | Medium | 6.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the… |
CVE-2026-103641 | Medium | 5.5 | 2026-10-01 | A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared… |
CVE-2026-103534 | Medium | 6.3 | 2026-10-01 | A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/… |
CVE-2026-92537 | Medium | 5.3 | 2026-10-01 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and inclu… |
CVE-2026-103533 | Medium | 4.1 | 2026-10-01 | A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/… |
CVE-2026-101887 | Low | 3.5 | 2026-10-01 | BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerability in the LC3plus sink decoder (a2dp-lc3plus.c, a2dp_lc3plus_dec_thread) that allows a B… |
CVE-2026-93495 | | 2026-10-01 | Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted d… | |
CVE-2026-14157 | | 2026-10-01 | Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file upl… | |
CVE-2026-13313 | | 2026-10-01 | An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms… | |
CVE-2026-103532 | Medium | 5.3 | 2026-10-01 | A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the… |
CVE-2026-103531 | Medium | 5.5 | 2026-10-01 | A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a… |
CVE-2026-103530 | High | 7.3 | 2026-10-01 | A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the compo… |
CVE-2026-103592 | Medium | 6.5 | 2026-09-30 | simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attacke… |
CVE-2026-103591 | High | 7.5 | 2026-09-30 | DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter… |
CVE-2026-103590 | Medium | 5.4 | 2026-09-30 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce… |
CVE-2026-103589 | Medium | 5.4 | 2026-09-30 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape room_num, floor, and com… |
CVE-2026-103588 | Medium | 5.4 | 2026-09-30 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the exceptions field of the back-office Transplant a module form. Attackers ca… |
CVE-2026-103587 | Medium | 5.4 | 2026-09-30 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where date_to and id… |
CVE-2026-103585 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows… | |
CVE-2026-103584 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension all… | |
CVE-2026-47096 | Medium | 6.1 | 2026-09-30 | AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject ma… |