2026 CVEs (page 47)
Page 47 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-64599 | High | 7.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in meson_crypto_probe() When meson_allocate_chanli… |
CVE-2026-64598 | High | 8.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "… |
CVE-2026-64597 | Critical | 9.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return… |
CVE-2026-64596 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Since commit 1e7ab6f678… | |
CVE-2026-64595 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() hid_go_cfg_probe() initi… | |
CVE-2026-64594 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allocation time ffs_fs_kill_sb() unconditiona… | |
CVE-2026-64593 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable [BUG] There is a bug report that btrfs… | |
CVE-2026-64592 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious fault Svvptc does not guarantee that i… | |
CVE-2026-64591 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices… | |
CVE-2026-64590 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIG_DMA_… | |
CVE-2026-64589 | | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fa… | |
CVE-2026-64588 | High | 7.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On weakly-ordered architectures, the store to f… |
CVE-2026-64587 | High | 7.0 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupt… |
CVE-2026-64586 | High | 8.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and the debugfs… |
CVE-2026-64585 | High | 7.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: kill anchored URBs before freeing netdevs esd_usb_disconnect() frees each C… |
CVE-2026-64584 | High | 7.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before freeing the midi object The f_midi dri… |
CVE-2026-64583 | High | 7.8 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown The Broadcom B… |
CVE-2026-5430 | Critical | 10.0 | 2026-08-06 | The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a… |
CVE-2026-1728 | Critical | 9.8 | 2026-08-06 | Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this… |
CVE-2026-19021 | High | 7.3 | 2026-08-06 | A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality o… |
CVE-2026-19020 | Medium | 6.3 | 2026-08-06 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicet… |
CVE-2026-19019 | Medium | 4.8 | 2026-08-06 | A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executo… |
CVE-2026-19011 | Medium | 5.3 | 2026-08-06 | A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Perfor… |
CVE-2026-19010 | High | 7.3 | 2026-08-06 | A security vulnerability has been detected in TinyAGI 0.0.20. Impacted is the function processMessage of the file packages/main/src/index.ts of the component M… |
CVE-2026-19009 | High | 7.3 | 2026-08-06 | A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Messa… |
CVE-2026-19008 | Medium | 6.3 | 2026-08-06 | A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.t… |
CVE-2026-18915 | Medium | 5.0 | 2026-08-06 | Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System F… |
CVE-2026-18649 | High | 7.5 | 2026-08-06 | A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on t… |
CVE-2026-18597 | High | 8.5 | 2026-08-06 | The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an… |
CVE-2026-0637 | Medium | 4.4 | 2026-08-06 | When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without suffic… |
CVE-2026-19007 | Medium | 6.3 | 2026-08-06 | A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/… |
CVE-2026-19006 | Medium | 6.3 | 2026-08-06 | A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exe… |
CVE-2026-19005 | Medium | 6.3 | 2026-08-06 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent… |
CVE-2026-18967 | Medium | 6.4 | 2026-08-06 | A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated… |
CVE-2026-18510 | High | 7.2 | 2026-08-06 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content (UR… |
CVE-2026-18400 | Medium | 6.4 | 2026-08-06 | The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post… |
CVE-2026-18395 | Medium | 5.4 | 2026-08-06 | The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing… |
CVE-2026-18050 | High | 7.5 | 2026-08-06 | The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing… |
CVE-2026-16954 | Medium | 6.5 | 2026-08-06 | The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing u… |
CVE-2026-16734 | High | 7.5 | 2026-08-06 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 does not verify that the caller owns the Stripe payment intent referenced by two unauthe… |
CVE-2026-16537 | Medium | 5.4 | 2026-08-06 | The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute value before outputting it in an HTML attribute, allowing use… |
CVE-2026-16290 | Medium | 5.3 | 2026-08-06 | The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for un… |
CVE-2026-16268 | High | 8.2 | 2026-08-06 | The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server si… |
CVE-2026-16065 | Medium | 6.5 | 2026-08-06 | The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, a… |
CVE-2026-16054 | Critical | 9.1 | 2026-08-06 | The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that i… |
CVE-2026-14829 | High | 8.2 | 2026-08-06 | The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-m… |
CVE-2026-14547 | Medium | 5.3 | 2026-08-06 | The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property re… |
CVE-2026-14314 | Medium | 5.3 | 2026-08-06 | The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a requested attachment belongs to the order referenced by its acc… |
CVE-2026-14313 | Medium | 5.3 | 2026-08-06 | PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), a… |
CVE-2026-14240 | Medium | 5.3 | 2026-08-06 | The tourmaster WordPress plugin before 5.4.9 writes its order/booking export to a fixed, predictable file inside its publicly accessible directory with no acce… |
CVE-2026-14204 | Medium | 6.5 | 2026-08-06 | The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup, allowing attackers to trick a logged-in us… |
CVE-2026-13703 | Medium | 5.4 | 2026-08-06 | The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions, allowing any logged-in u… |
CVE-2026-13154 | High | 7.5 | 2026-08-06 | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in on… |
CVE-2026-13153 | High | 7.5 | 2026-08-06 | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not restrict access to one of its public REST routes and over-fetches a non-public WooCommer… |
CVE-2026-12713 | Critical | 9.1 | 2026-08-06 | The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthen… |
CVE-2026-11588 | Medium | 6.1 | 2026-08-06 | The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before… |
CVE-2026-19000 | High | 7.3 | 2026-08-06 | A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Ch… |
CVE-2026-18998 | Medium | 6.3 | 2026-08-06 | A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the c… |
CVE-2026-18997 | Medium | 6.3 | 2026-08-06 | A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts o… |
CVE-2026-15459 | High | 8.1 | 2026-08-06 | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to t… |
CVE-2026-18996 | Medium | 6.3 | 2026-08-06 | A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of t… |
CVE-2026-18995 | Medium | 4.3 | 2026-08-06 | A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParse… |
CVE-2026-18993 | Medium | 6.3 | 2026-08-06 | A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_too… |
CVE-2026-18992 | Medium | 6.3 | 2026-08-06 | A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of… |
CVE-2026-18909 | Medium | 4.7 | 2026-08-06 | A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus reco… |
CVE-2026-18325 | High | 7.2 | 2026-08-06 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Rec… |
CVE-2026-16636 | High | 7.2 | 2026-08-06 | The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-S… |
CVE-2026-15991 | High | 8.8 | 2026-08-06 | The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versio… |
CVE-2026-18991 | High | 7.3 | 2026-08-06 | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/cor… |
CVE-2026-18990 | High | 7.3 | 2026-08-06 | A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The m… |
CVE-2026-18980 | Medium | 6.3 | 2026-08-06 | A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such man… |
CVE-2026-18976 | Medium | 6.3 | 2026-08-06 | A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the… |
CVE-2026-18974 | Medium | 5.3 | 2026-08-06 | A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component execut… |
CVE-2026-18973 | High | 7.3 | 2026-08-06 | A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of th… |
CVE-2026-67873 | Critical | 9.8 | 2026-08-06 | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() valida… |
CVE-2026-67872 | High | 7.5 | 2026-08-06 | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling |
CVE-2026-67871 | High | 7.5 | 2026-08-06 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt… |
CVE-2026-67870 | Critical | 9.8 | 2026-08-06 | In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacke… |
CVE-2026-67869 | High | 7.5 | 2026-08-06 | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against… |
CVE-2026-67531 | | 2026-08-06 | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema… | |
CVE-2026-52466 | Critical | 9.8 | 2026-08-06 | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuF… |
CVE-2026-19028 | | 2026-08-06 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the… | |
CVE-2026-19027 | | 2026-08-06 | The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2.3.0 advance… | |
CVE-2026-18970 | High | 7.3 | 2026-08-06 | A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /d… |
CVE-2026-18969 | High | 7.3 | 2026-08-06 | A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dis… |
CVE-2026-18968 | Medium | 4.3 | 2026-08-06 | A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the… |
CVE-2026-67867 | High | 7.5 | 2026-08-05 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing Pu… |
CVE-2026-67866 | High | 7.5 | 2026-08-05 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItem… |
CVE-2026-67863 | High | 7.5 | 2026-08-05 | In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues… |
CVE-2026-19026 | | 2026-08-05 | H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nel… | |
CVE-2026-19025 | | 2026-08-05 | H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace ran… | |
CVE-2026-19024 | | 2026-08-05 | NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value… | |
CVE-2026-19023 | | 2026-08-05 | Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a var… | |
CVE-2026-71321 | High | 7.5 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` dec… |
CVE-2026-71320 | High | 8.1 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /__nuxt_island/… |
CVE-2026-71319 | Critical | 9.6 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the… |
CVE-2026-71318 | Medium | 4.8 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an attacker can supply a top-level `as` prop to the /__nuxt_is… |
CVE-2026-71316 | High | 7.5 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payload.json can be return… |
CVE-2026-67865 | High | 7.5 | 2026-08-05 | S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service |
CVE-2026-67864 | High | 7.5 | 2026-08-05 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component |