2026 CVEs (page 42)
Page 42 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-17598 | | 2026-08-07 | Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task t… | |
CVE-2026-17597 | | 2026-08-07 | Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settin… | |
CVE-2026-17596 | | 2026-08-07 | Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:update permissi… | |
CVE-2026-17595 | | 2026-08-07 | Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct a… | |
CVE-2026-17594 | | 2026-08-07 | Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. A… | |
CVE-2026-17593 | | 2026-08-07 | An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) co… | |
CVE-2026-14644 | | 2026-08-07 | Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could… | |
CVE-2026-66059 | | 2026-08-07 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue… | |
CVE-2026-62996 | | 2026-08-07 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty's stream: re… | |
CVE-2026-62992 | | 2026-08-07 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line)… | |
CVE-2026-48093 | Medium | 6.5 | 2026-08-07 | The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting (XSS) through the external URL embed feature in post conten… |
CVE-2026-19210 | Medium | 6.3 | 2026-08-07 | A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_… |
CVE-2026-19209 | Low | 3.5 | 2026-08-07 | A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This mani… |
CVE-2026-19208 | Low | 3.7 | 2026-08-07 | A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulatio… |
CVE-2026-19264 | Critical | 9.8 | 2026-08-07 | Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory an… |
CVE-2026-19207 | Low | 2.4 | 2026-08-07 | A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-… |
CVE-2026-18497 | High | 7.1 | 2026-08-07 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnera… |
CVE-2026-66914 | | 2026-08-07 | Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from bot… | |
CVE-2026-61477 | Low | 2.3 | 2026-08-07 | An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value at… |
CVE-2026-37171 | Medium | 5.9 | 2026-08-07 | A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and en… |
CVE-2026-19206 | Medium | 5.3 | 2026-08-07 | A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_value… |
CVE-2026-16637 | Medium | 6.5 | 2026-08-07 | OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id… |
CVE-2026-15570 | | 2026-08-07 | An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Veste… | |
CVE-2026-66838 | | 2026-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :commen… | |
CVE-2026-66494 | | 2026-08-07 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store malicious… | |
CVE-2026-56794 | Medium | 6.5 | 2026-08-07 | Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote acces… |
CVE-2026-56793 | High | 7.7 | 2026-08-07 | Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote ac… |
CVE-2026-48094 | | 2026-08-07 | The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping… | |
CVE-2026-15816 | High | 7.5 | 2026-08-07 | A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without prope… |
CVE-2026-71560 | Critical | 9.1 | 2026-08-07 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing s… |
CVE-2026-71559 | High | 7.5 | 2026-08-07 | Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted da… |
CVE-2026-71558 | Critical | 9.8 | 2026-08-07 | Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input pa… |
CVE-2026-54218 | | 2026-08-07 | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in vari… | |
CVE-2026-54217 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScrip… | |
CVE-2026-54216 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By sending a specially crafted link includ… | |
CVE-2026-54215 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to… | |
CVE-2026-54214 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modifica… | |
CVE-2026-54213 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart… | |
CVE-2026-54212 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition. By submitting a specially c… | |
CVE-2026-54211 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer overflow vulnerability in multiple form… | |
CVE-2026-54210 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition. By spe… | |
CVE-2026-54209 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path… | |
CVE-2026-54208 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into exist… | |
CVE-2026-54207 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations usin… | |
CVE-2026-54206 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations usi… | |
CVE-2026-54205 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network… | |
CVE-2026-54204 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e… | |
CVE-2026-54203 | | 2026-08-07 | Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL… | |
CVE-2026-54202 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is … | |
CVE-2026-54201 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files. As a result, attackers can obt… | |
CVE-2026-54200 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying… | |
CVE-2026-54199 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//… | |
CVE-2026-12071 | | 2026-08-07 | The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP re… | |
CVE-2026-12070 | | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By speci… | |
CVE-2026-9169 | High | 8.8 | 2026-08-07 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the app… |
CVE-2026-66493 | | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead… | |
CVE-2026-66492 | | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path… | |
CVE-2026-66491 | | 2026-08-07 | Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary… | |
CVE-2026-49008 | Medium | 6.5 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application… |
CVE-2026-18938 | Medium | 6.2 | 2026-08-07 | A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By se… |
CVE-2026-49007 | High | 7.5 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface. |
CVE-2026-49006 | Medium | 5.3 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission. |
CVE-2026-19079 | Medium | 4.4 | 2026-08-07 | A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfile… |
CVE-2026-16027 | Medium | 5.4 | 2026-08-07 | Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiy… |
CVE-2026-15239 | Medium | 5.3 | 2026-08-07 | The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in i… |
CVE-2026-15211 | Medium | 5.9 | 2026-08-07 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not validate the payment amount or bind the PayPal order token to the order being complete… |
CVE-2026-15148 | Medium | 5.3 | 2026-08-07 | The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site's configured merchant accoun… |
CVE-2026-12261 | Medium | 5.3 | 2026-08-07 | A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package arch… |
CVE-2026-19196 | High | 7.3 | 2026-08-07 | A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The… |
CVE-2026-16265 | Medium | 6.5 | 2026-08-07 | The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, al… |
CVE-2026-16263 | High | 8.8 | 2026-08-07 | The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path… |
CVE-2026-16262 | High | 7.5 | 2026-08-07 | The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthentica… |
CVE-2026-16258 | Critical | 9.8 | 2026-08-07 | The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP… |
CVE-2026-16041 | High | 7.5 | 2026-08-07 | The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing… |
CVE-2026-16039 | Medium | 6.5 | 2026-08-07 | The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller's own orders, allowing any authenticated user, includ… |
CVE-2026-16038 | Critical | 9.1 | 2026-08-07 | The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-c… |
CVE-2026-16030 | High | 8.1 | 2026-08-07 | The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, a… |
CVE-2026-15386 | Medium | 5.4 | 2026-08-07 | The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked… |
CVE-2026-15361 | High | 8.1 | 2026-08-07 | The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied… |
CVE-2026-15359 | Medium | 6.5 | 2026-08-07 | The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwr… |
CVE-2026-15245 | Medium | 5.4 | 2026-08-07 | The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline s… |
CVE-2026-15215 | High | 8.8 | 2026-08-07 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooC… |
CVE-2026-15214 | Medium | 4.3 | 2026-08-07 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its deta… |
CVE-2026-15032 | Medium | 6.1 | 2026-08-07 | The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticat… |
CVE-2026-14943 | High | 7.5 | 2026-08-07 | The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to aut… |
CVE-2026-14331 | Medium | 6.1 | 2026-08-07 | The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to R… |
CVE-2026-14205 | Critical | 9.8 | 2026-08-07 | The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the… |
CVE-2026-49005 | Low | 2.4 | 2026-08-07 | The root password hash of the device can be obtained through unencrypted information in the firmware. |
CVE-2026-19195 | High | 7.8 | 2026-08-07 | A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Ke… |
CVE-2026-19193 | High | 7.8 | 2026-08-07 | A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Exec… |
CVE-2026-19192 | High | 7.8 | 2026-08-07 | A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCo… |
CVE-2026-19191 | High | 7.8 | 2026-08-07 | A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\D… |
CVE-2026-14365 | Critical | 9.8 | 2026-08-07 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2… |
CVE-2026-14364 | Critical | 9.8 | 2026-08-07 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all… |
CVE-2026-12801 | Medium | 6.4 | 2026-08-07 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' at… |
CVE-2026-11907 | Medium | 6.5 | 2026-08-07 | The Stream plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.0. This is due to the plugin not properly verif… |
CVE-2026-19190 | High | 7.8 | 2026-08-07 | A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scan… |
CVE-2026-49746 | High | 7.1 | 2026-08-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU… |
CVE-2026-45204 | Medium | 5.5 | 2026-08-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error… |
CVE-2026-45198 | High | 7.8 | 2026-08-07 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from… |