2026 CVEs (page 444)
Page 444 of 444 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21445 | Critical | 9.1 | 2026-01-02 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are mi… |
CVE-2026-0571 | Medium | 4.3 | 2026-01-02 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEn… |
CVE-2026-21444 | Medium | 5.5 | 2026-01-02 | libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of li… |
CVE-2026-21440 | | 2026-01-02 | AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary… | |
CVE-2026-21433 | High | 7.7 | 2026-01-02 | Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-of-Band (OOB) requests / SSRF via upload… |
CVE-2026-21432 | Medium | 5.4 | 2026-01-02 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including ta… |
CVE-2026-21431 | Medium | 5.4 | 2026-01-02 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while… |
CVE-2026-21430 | Critical | 9.3 | 2026-01-02 | Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery (CSRF). This can… |
CVE-2026-0570 | High | 7.3 | 2026-01-02 | A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulatio… |
CVE-2026-0569 | High | 7.3 | 2026-01-02 | A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipul… |
CVE-2026-21429 | Medium | 4.3 | 2026-01-02 | Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after… |
CVE-2026-0568 | High | 7.3 | 2026-01-02 | A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulatio… |
CVE-2026-0567 | High | 7.3 | 2026-01-02 | A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulati… |
CVE-2026-0566 | Medium | 4.7 | 2026-01-02 | A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. T… |
CVE-2026-0565 | High | 7.3 | 2026-01-02 | A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Execut… |
CVE-2026-0547 | Medium | 6.3 | 2026-01-02 | A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profil… |
CVE-2026-0546 | High | 7.3 | 2026-01-02 | A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of th… |
CVE-2026-21437 | Medium | 5.5 | 2026-01-01 | eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. T… |
CVE-2026-21436 | Medium | 5.5 | 2026-01-01 | eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This re… |
CVE-2026-21428 | High | 7.5 | 2026-01-01 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_headers`` function does not check for CR… |
CVE-2026-0544 | High | 7.3 | 2026-01-01 | A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation… |