2026 CVEs (page 452)
Page 452 of 452 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21677 | High | 8.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its CIccCLUT… |
CVE-2026-21676 | High | 8.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its… |
CVE-2026-21487 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-… |
CVE-2026-21486 | High | 7.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buff… |
CVE-2026-21485 | High | 8.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior (U… |
CVE-2026-0604 | Medium | 6.5 | 2026-01-06 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the '… |
CVE-2026-21675 | Critical | 9.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in… |
CVE-2026-21674 | Low | 3.3 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in it… |
CVE-2026-21673 | High | 7.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXml… |
CVE-2026-21507 | High | 7.5 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.c… |
CVE-2026-21439 | Medium | 5.3 | 2026-01-06 | badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content wi… |
CVE-2026-0607 | High | 7.3 | 2026-01-06 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php. Executing a manip… |
CVE-2026-0606 | High | 7.3 | 2026-01-05 | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Per… |
CVE-2026-0625 | | 2026-01-05 | Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauth… | |
CVE-2026-0621 | High | 7.5 | 2026-01-05 | Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate clas… |
CVE-2026-0605 | High | 7.3 | 2026-01-05 | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /logi… |
CVE-2026-21635 | Medium | 5.3 | 2026-01-05 | An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device th… |
CVE-2026-21634 | Medium | 6.5 | 2026-01-05 | A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it t… |
CVE-2026-21633 | High | 8.8 | 2026-01-05 | A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerabili… |
CVE-2026-0597 | Medium | 6.3 | 2026-01-05 | A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/edit_profile.php… |
CVE-2026-0592 | High | 7.3 | 2026-01-05 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-administra… |
CVE-2026-0591 | Medium | 6.3 | 2026-01-05 | A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/up… |
CVE-2026-0590 | Medium | 6.3 | 2026-01-05 | A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/de… |
CVE-2026-0589 | High | 7.3 | 2026-01-05 | A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the component Administration Backend. The… |
CVE-2026-0588 | Low | 3.5 | 2026-01-05 | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file rockfun.php of the… |
CVE-2026-0587 | Low | 3.5 | 2026-01-05 | A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of the component Cover… |
CVE-2026-0586 | Medium | 4.3 | 2026-01-05 | A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-adminis… |
CVE-2026-0585 | High | 7.3 | 2026-01-05 | A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /order_view.php… |
CVE-2026-0584 | Medium | 6.3 | 2026-01-05 | A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left… |
CVE-2026-0583 | High | 7.3 | 2026-01-05 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login… |
CVE-2026-0582 | Medium | 6.3 | 2026-01-05 | A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The mani… |
CVE-2026-0581 | Medium | 6.3 | 2026-01-05 | A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of t… |
CVE-2026-0580 | Low | 3.5 | 2026-01-05 | A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Han… |
CVE-2026-0579 | High | 7.3 | 2026-01-04 | A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php o… |
CVE-2026-0578 | High | 7.3 | 2026-01-04 | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgu… |
CVE-2026-0577 | Medium | 6.3 | 2026-01-04 | A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunne… |
CVE-2026-0576 | High | 7.3 | 2026-01-04 | A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod… |
CVE-2026-0575 | High | 7.3 | 2026-01-04 | A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-adm… |
CVE-2026-0574 | Medium | 6.3 | 2026-01-04 | A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse… |
CVE-2026-21484 | Medium | 5.3 | 2026-01-03 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea… |
CVE-2026-21483 | Medium | 5.4 | 2026-01-02 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged user with campaign management permissions… |
CVE-2026-21452 | High | 7.5 | 2026-01-02 | MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack… |
CVE-2026-21451 | High | 8.4 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagisto prior to version 2.3.10 within the CM… |
CVE-2026-21450 | Critical | 9.8 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can l… |
CVE-2026-21449 | High | 8.8 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via first name and last name fr… |
CVE-2026-21448 | Critical | 9.8 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders… |
CVE-2026-21447 | High | 7.1 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulnerability in the customer order reorder… |
CVE-2026-21446 | Critical | 9.8 | 2026-01-02 | Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation i… |
CVE-2026-21445 | Critical | 9.1 | 2026-01-02 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are mi… |
CVE-2026-0571 | Medium | 4.3 | 2026-01-02 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEn… |
CVE-2026-21444 | Medium | 5.5 | 2026-01-02 | libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of li… |
CVE-2026-21440 | | 2026-01-02 | AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary… | |
CVE-2026-21433 | High | 7.7 | 2026-01-02 | Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-of-Band (OOB) requests / SSRF via upload… |
CVE-2026-21432 | Medium | 5.4 | 2026-01-02 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including ta… |
CVE-2026-21431 | Medium | 5.4 | 2026-01-02 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while… |
CVE-2026-21430 | Critical | 9.3 | 2026-01-02 | Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery (CSRF). This can… |
CVE-2026-0570 | High | 7.3 | 2026-01-02 | A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulatio… |
CVE-2026-0569 | High | 7.3 | 2026-01-02 | A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipul… |
CVE-2026-21429 | Medium | 4.3 | 2026-01-02 | Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after… |
CVE-2026-0568 | High | 7.3 | 2026-01-02 | A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulatio… |
CVE-2026-0567 | High | 7.3 | 2026-01-02 | A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulati… |
CVE-2026-0566 | Medium | 4.7 | 2026-01-02 | A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. T… |
CVE-2026-0565 | High | 7.3 | 2026-01-02 | A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Execut… |
CVE-2026-0547 | Medium | 6.3 | 2026-01-02 | A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profil… |
CVE-2026-0546 | High | 7.3 | 2026-01-02 | A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of th… |
CVE-2026-21437 | Medium | 5.5 | 2026-01-01 | eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. T… |
CVE-2026-21436 | Medium | 5.5 | 2026-01-01 | eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by `--destdir`. This re… |
CVE-2026-21428 | High | 7.5 | 2026-01-01 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_headers`` function does not check for CR… |
CVE-2026-0544 | High | 7.3 | 2026-01-01 | A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation… |