2026 CVEs (page 44)
Page 44 of 662 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-91813 | High | 8.8 | 2026-09-23 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to ins… |
CVE-2026-91812 | High | 7.9 | 2026-09-23 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks… |
CVE-2026-91811 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fa… |
CVE-2026-91810 | Medium | 6.1 | 2026-09-23 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause… |
CVE-2026-91809 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may c… |
CVE-2026-91808 | Medium | 6.1 | 2026-09-23 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insuffi… |
CVE-2026-91807 | Medium | 6.1 | 2026-09-23 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the so… |
CVE-2026-91806 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the… |
CVE-2026-91805 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during re… |
CVE-2026-91804 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in… |
CVE-2026-91803 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writabl… |
CVE-2026-91802 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buf… |
CVE-2026-91801 | High | 7.8 | 2026-09-23 | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow… |
CVE-2026-91800 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configurat… |
CVE-2026-91799 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to a… |
CVE-2026-91798 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the c… |
CVE-2026-91797 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be writte… |
CVE-2026-91796 | Medium | 6.1 | 2026-09-23 | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB… |
CVE-2026-91795 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal… |
CVE-2026-91794 | High | 7.8 | 2026-09-23 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation whe… |
CVE-2026-91793 | High | 7.8 | 2026-09-23 | When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. Duri… |
CVE-2026-91792 | High | 7.8 | 2026-09-23 | When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScri… |
CVE-2026-91791 | High | 7.8 | 2026-09-23 | When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visi… |
CVE-2026-91790 | High | 7.8 | 2026-09-23 | When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a resul… |
CVE-2026-91789 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain condi… |
CVE-2026-91788 | Medium | 4.7 | 2026-09-23 | When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a resu… |
CVE-2026-50228 | | 2026-09-23 | An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on lo… | |
CVE-2026-50227 | | 2026-09-23 | An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and includin… | |
CVE-2026-82331 | Critical | 9.8 | 2026-09-23 | Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows m… |
CVE-2026-6831 | Medium | 6.5 | 2026-09-23 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plug… |
CVE-2026-5924 | Medium | 6.4 | 2026-09-23 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all vers… |
CVE-2026-93528 | Low | 3.7 | 2026-09-23 | The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticat… |
CVE-2026-93511 | Medium | 5.3 | 2026-09-23 | The Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature before processing payment and subscription notifications, allowi… |
CVE-2026-93510 | Medium | 4.3 | 2026-09-23 | The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim… |
CVE-2026-93508 | High | 8.1 | 2026-09-23 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with S… |
CVE-2026-93507 | Low | 3.3 | 2026-09-23 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-l… |
CVE-2026-91077 | Low | 2.7 | 2026-09-23 | The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted t… |
CVE-2026-91073 | Medium | 6.8 | 2026-09-23 | The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated… |
CVE-2026-91025 | Medium | 4.3 | 2026-09-23 | The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific… |
CVE-2026-91024 | Medium | 6.8 | 2026-09-23 | The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them in a SQL… |
CVE-2026-90985 | Medium | 5.3 | 2026-09-23 | The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through… |
CVE-2026-90951 | Low | 3.7 | 2026-09-23 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing some… |
CVE-2026-89331 | Medium | 5.3 | 2026-09-23 | The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthe… |
CVE-2026-88997 | Medium | 6.8 | 2026-09-23 | The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute i… |
CVE-2026-88929 | Medium | 5.3 | 2026-09-23 | The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its det… |
CVE-2026-87981 | Medium | 4.7 | 2026-09-23 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway con… |
CVE-2026-87979 | Medium | 5.3 | 2026-09-23 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing unaut… |
CVE-2026-87074 | Low | 3.7 | 2026-09-23 | The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the reci… |
CVE-2026-87069 | Low | 3.1 | 2026-09-23 | The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field migratio… |
CVE-2026-86842 | Medium | 6.8 | 2026-09-23 | The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users… |
CVE-2026-86785 | Medium | 5.3 | 2026-09-23 | The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticat… |
CVE-2026-86783 | Medium | 5.3 | 2026-09-23 | The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility check on a REST API route that returns the… |
CVE-2026-86608 | High | 8.2 | 2026-09-23 | The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores, a… |
CVE-2026-86603 | Medium | 4.3 | 2026-09-23 | The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user, such as a… |
CVE-2026-86602 | Medium | 4.3 | 2026-09-23 | The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as a… |
CVE-2026-85006 | Medium | 6.8 | 2026-09-23 | The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets before outputting it inside an HTML at… |
CVE-2026-84743 | Low | 3.8 | 2026-09-23 | The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a… |
CVE-2026-84742 | Low | 2.7 | 2026-09-23 | The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST AP… |
CVE-2026-84741 | Medium | 5.3 | 2026-09-23 | The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding their stored details into a public REST AP… |
CVE-2026-84168 | Medium | 5.3 | 2026-09-23 | The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard… |
CVE-2026-84150 | Medium | 5.4 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route ma… |
CVE-2026-84098 | Medium | 6.5 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before d… |
CVE-2026-84046 | Medium | 5.0 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching i… |
CVE-2026-84027 | Medium | 4.3 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when creating orders t… |
CVE-2026-84026 | Medium | 5.3 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that return… |
CVE-2026-83555 | Medium | 5.3 | 2026-09-23 | The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscrip… |
CVE-2026-82843 | Critical | 9.0 | 2026-09-23 | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization g… |
CVE-2026-81339 | Medium | 4.3 | 2026-09-23 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowi… |
CVE-2026-81338 | Medium | 4.6 | 2026-09-23 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it a… |
CVE-2026-80342 | Medium | 6.5 | 2026-09-23 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.27 does not verify that a PayPal order supplied in a payment request belongs to the WooC… |
CVE-2026-77766 | Medium | 4.3 | 2026-09-23 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope one of its REST collection endpoints to… |
CVE-2026-77765 | Medium | 5.3 | 2026-09-23 | The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price befo… |
CVE-2026-75799 | Critical | 9.0 | 2026-09-23 | The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthe… |
CVE-2026-19438 | High | 7.5 | 2026-09-23 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: thr… |
CVE-2026-18365 | Medium | 4.3 | 2026-09-23 | The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level ac… |
CVE-2026-18364 | Medium | 4.3 | 2026-09-23 | The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-leve… |
CVE-2026-16264 | Medium | 6.5 | 2026-09-23 | The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and issues a management sessio… |
CVE-2026-14321 | High | 8.2 | 2026-09-23 | The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limiting and banning, allowing unauthenticat… |
CVE-2026-96258 | Medium | 4.3 | 2026-09-23 | A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html… |
CVE-2026-96257 | Critical | 10.0 | 2026-09-23 | A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service… |
CVE-2026-95958 | Low | 3.3 | 2026-09-23 | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component P… |
CVE-2026-95957 | Medium | 4.3 | 2026-09-23 | A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signu… |
CVE-2026-95930 | Medium | 6.3 | 2026-09-23 | A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the com… |
CVE-2026-95929 | Medium | 6.3 | 2026-09-23 | A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapp… |
CVE-2026-91777 | High | 7.5 | 2026-09-23 | Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for eve… |
CVE-2026-91776 | High | 7.5 | 2026-09-23 | TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-bas… |
CVE-2026-89425 | High | 7.5 | 2026-09-23 | UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier char… |
CVE-2026-95928 | Medium | 5.5 | 2026-09-23 | A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsre… |
CVE-2026-95927 | High | 7.3 | 2026-09-23 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessm… |
CVE-2026-95926 | High | 7.3 | 2026-09-23 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/adm… |
CVE-2026-96273 | Medium | 5.5 | 2026-09-23 | Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain… |
CVE-2026-96272 | High | 7.5 | 2026-09-23 | ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into… |
CVE-2026-96271 | High | 7.1 | 2026-09-23 | Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links… |
CVE-2026-95925 | High | 7.3 | 2026-09-23 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/a… |
CVE-2026-95924 | High | 7.3 | 2026-09-23 | A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessme… |
CVE-2026-95897 | Medium | 5.5 | 2026-09-23 | A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loa… |
CVE-2026-95868 | Medium | 6.3 | 2026-09-23 | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the fun… |
CVE-2026-95833 | Medium | 6.3 | 2026-09-23 | A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manip… |
CVE-2026-95830 | Medium | 6.3 | 2026-09-23 | A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the f… |
CVE-2026-95829 | Medium | 6.3 | 2026-09-23 | A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the… |