2026 CVEs (page 49)
Page 49 of 662 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94117 | High | 7.6 | 2026-09-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blin… |
CVE-2026-90882 | | 2026-09-22 | The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the a… | |
CVE-2026-25265 | High | 8.8 | 2026-09-22 | Privilege escalation due to weak configuration while temporary file handling. |
CVE-2026-25264 | High | 8.8 | 2026-09-22 | Privilege escalation due to weak configuration during package extraction process. |
CVE-2026-25262 | Medium | 6.9 | 2026-09-22 | Memory corruption while processing a crafted ELF file in the Primary Bootloader. |
CVE-2026-25255 | High | 8.8 | 2026-09-22 | Exposed dangerous function lead to privilege escalation via gRPC server. |
CVE-2026-25254 | Critical | 9.8 | 2026-09-22 | Improper authorization leads to Remote Code Execution via SocketIO interface. |
CVE-2026-9231 | High | 7.5 | 2026-09-22 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu… |
CVE-2026-95508 | High | 7.4 | 2026-09-22 | A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-su… |
CVE-2026-93928 | High | 7.3 | 2026-09-22 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. T… |
CVE-2026-93556 | | 2026-09-22 | The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed. The JWT token for t… | |
CVE-2026-89422 | | 2026-09-22 | Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended s… | |
CVE-2026-68956 | | 2026-09-22 | Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeated… | |
CVE-2026-65634 | | 2026-09-22 | Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by send… | |
CVE-2026-15095 | Medium | 4.9 | 2026-09-22 | The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all… |
CVE-2026-9004 | Medium | 4.3 | 2026-09-22 | The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4… |
CVE-2026-95503 | Medium | 6.8 | 2026-09-22 | A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication… |
CVE-2026-93952 | Critical | 10.0 | 2026-09-22 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact t… |
CVE-2026-93836 | High | 7.2 | 2026-09-22 | The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qty' parameter in all versions up to, and in… |
CVE-2026-93778 | High | 7.2 | 2026-09-22 | The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all v… |
CVE-2026-92969 | High | 8.1 | 2026-09-22 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4… |
CVE-2026-92235 | High | 8.1 | 2026-09-22 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the… |
CVE-2026-91092 | Medium | 4.3 | 2026-09-22 | The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5. This is due to the plugin not properly… |
CVE-2026-87082 | High | 7.5 | 2026-09-22 | Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend chec… |
CVE-2026-87081 | High | 7.5 | 2026-09-22 | Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii. … |
CVE-2026-87080 | Critical | 9.1 | 2026-09-22 | Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-… |
CVE-2026-87079 | High | 7.5 | 2026-09-22 | Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode. The XS back… |
CVE-2026-87078 | Critical | 9.1 | 2026-09-22 | Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode. The XS backend allocates the s… |
CVE-2026-7622 | Medium | 4.3 | 2026-09-22 | The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and no… |
CVE-2026-74766 | High | 8.4 | 2026-09-22 | Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_… |
CVE-2026-74765 | Medium | 6.5 | 2026-09-22 | Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. The XS backend… |
CVE-2026-6922 | High | 7.1 | 2026-09-22 | The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.2.1. Thi… |
CVE-2026-4123 | Medium | 4.3 | 2026-09-22 | The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missi… |
CVE-2026-1645 | Medium | 4.4 | 2026-09-22 | The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_currency' parameter and the 'locale_url' setting in all versions u… |
CVE-2026-18439 | Medium | 4.3 | 2026-09-22 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4… |
CVE-2026-18345 | Medium | 4.3 | 2026-09-22 | The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() functi… |
CVE-2026-16778 | Medium | 6.4 | 2026-09-22 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortco… |
CVE-2026-12995 | Medium | 4.3 | 2026-09-22 | The Custom Field Template plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.7.8 via the edit_meta_… |
CVE-2026-94504 | High | 7.2 | 2026-09-22 | Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break… |
CVE-2026-92438 | High | 8.8 | 2026-09-22 | The Ninja Forms WordPress plugin 3.15.3 does not escape submitted form field values before outputting them on the submission edit screen in the admin area, whi… |
CVE-2026-91827 | High | 7.5 | 2026-09-22 | The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when an administrator later exports form subm… |
CVE-2026-89412 | High | 7.2 | 2026-09-22 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Translation Memory… |
CVE-2026-93655 | Medium | 6.1 | 2026-09-22 | The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpbc_auto_fill' parameter in all versions up to, and includi… |
CVE-2026-88788 | Medium | 6.8 | 2026-09-22 | The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block… |
CVE-2026-85653 | Medium | 6.4 | 2026-09-22 | The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Block Parameter in all versions up to, an… |
CVE-2026-12470 | High | 7.2 | 2026-09-22 | The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege es… |
CVE-2026-19658 | Critical | 9.8 | 2026-09-22 | The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input… |
CVE-2026-13355 | Critical | 9.8 | 2026-09-22 | The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained… |
CVE-2026-94493 | Critical | 10.0 | 2026-09-22 | A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown processing of the file /index.html of the component WebS… |
CVE-2026-94492 | Medium | 6.3 | 2026-09-22 | A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit o… |
CVE-2026-94491 | High | 7.3 | 2026-09-22 | A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/search_list.jsp. Executing a manipulation of the argument… |
CVE-2026-93712 | High | 7.5 | 2026-09-22 | Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler. The handler joins… |
CVE-2026-93711 | Medium | 6.5 | 2026-09-22 | Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array. The routine removes CR and LF from each header v… |
CVE-2026-93710 | High | 7.5 | 2026-09-22 | Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks. A… |
CVE-2026-93709 | Medium | 5.3 | 2026-09-22 | Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler… |
CVE-2026-76974 | Medium | 5.3 | 2026-09-22 | SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked b… |
CVE-2026-94490 | Medium | 4.7 | 2026-09-22 | A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system… |
CVE-2026-94489 | Medium | 4.3 | 2026-09-22 | A vulnerability was identified in OctoPrint 1.0.0. Affected by this vulnerability is the function _validate of the file src/octoprint/server/api/files.py of th… |
CVE-2026-94426 | Low | 3.5 | 2026-09-21 | A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of t… |
CVE-2026-94425 | High | 8.8 | 2026-09-21 | A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of… |
CVE-2026-94627 | High | 7.5 | 2026-09-21 | vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefi… |
CVE-2026-94626 | High | 7.5 | 2026-09-21 | vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unb… |
CVE-2026-94625 | Medium | 5.3 | 2026-09-21 | vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders th… |
CVE-2026-94624 | High | 7.5 | 2026-09-21 | vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a pee… |
CVE-2026-94623 | High | 7.5 | 2026-09-21 | vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block coun… |
CVE-2026-94622 | High | 7.5 | 2026-09-21 | vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata handling for prefill/decode disaggregated deployments… |
CVE-2026-94540 | High | 7.7 | 2026-09-21 | DesktopSMS 1.11.0 by MrPear contains an unauthorized access vulnerability that allows local attackers to transmit SMS, retrieve SMS-derived content, and persis… |
CVE-2026-94536 | Medium | 4.3 | 2026-09-21 | lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employe… |
CVE-2026-94535 | High | 7.1 | 2026-09-21 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the deleteMyNotice endpoint that allows authenticated users to delete other users'… |
CVE-2026-94534 | High | 7.1 | 2026-09-21 | lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints, allowing authenticated attackers to modify… |
CVE-2026-94533 | Medium | 6.5 | 2026-09-21 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in FileAnyoneController that allows authenticated users to download arbitrary attachme… |
CVE-2026-94532 | Medium | 6.5 | 2026-09-21 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user… |
CVE-2026-93340 | Medium | 6.8 | 2026-09-21 | Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password rese… |
CVE-2026-88756 | Medium | 5.3 | 2026-09-21 | Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint (POST /u… |
CVE-2026-88738 | High | 8.8 | 2026-09-21 | Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administr… |
CVE-2026-79079 | High | 7.8 | 2026-09-21 | An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menu_popup.c components |
CVE-2026-78847 | Critical | 9.8 | 2026-09-21 | An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when language is js/… |
CVE-2026-78806 | Medium | 5.5 | 2026-09-21 | An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the… |
CVE-2026-65980 | | 2026-09-21 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chartbrew's Clic… | |
CVE-2026-61852 | | 2026-09-21 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQ… | |
CVE-2026-61851 | | 2026-09-21 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQ… | |
CVE-2026-61743 | Medium | 6.3 | 2026-09-21 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's serv… |
CVE-2026-61652 | | 2026-09-21 | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all callers who streamed comp… | |
CVE-2026-61541 | | 2026-09-21 | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service when an application requests content from an untrusted server, or foll… | |
CVE-2026-59830 | Medium | 5.4 | 2026-09-21 | Discourse is an open-source discussion platform. Prior to 2026.7.0, the post action component failed to escape user-controlled display names before interpolati… |
CVE-2026-59815 | Medium | 4.3 | 2026-09-21 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's ItemModel.checkIfAllo… |
CVE-2026-59814 | High | 7.6 | 2026-09-21 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resou… |
CVE-2026-55210 | High | 7.4 | 2026-09-21 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin()… |
CVE-2026-46650 | Medium | 4.4 | 2026-09-21 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, isAcceptedUrl() in packages/renderer/… |
CVE-2026-17054 | Medium | 5.3 | 2026-09-21 | The Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) parses frames received over SPI from the ESP co-processor in esp_hosted_event_task(). For cont… |
CVE-2026-15890 | Medium | 5.3 | 2026-09-21 | The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/s… |
CVE-2026-94588 | Medium | 4.4 | 2026-09-21 | In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-su… |
CVE-2026-94572 | | 2026-09-21 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is w… | |
CVE-2026-94571 | | 2026-09-21 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The… | |
CVE-2026-94424 | High | 8.8 | 2026-09-21 | A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of t… |
CVE-2026-93433 | Medium | 5.5 | 2026-09-21 | A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI (Small Computer System… |
CVE-2026-88746 | High | 7.1 | 2026-09-21 | idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php. |
CVE-2026-88745 | Medium | 6.1 | 2026-09-21 | EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell. |
CVE-2026-88467 | Medium | 6.2 | 2026-09-21 | CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensiti… |
CVE-2026-88412 | Medium | 5.3 | 2026-09-21 | An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service… |