2026 CVEs (page 6)
Page 6 of 658 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-102109 | High | 7.1 | 2026-09-30 | A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated… |
CVE-2026-102108 | High | 7.2 | 2026-09-30 | An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deseri… |
CVE-2026-102107 | Medium | 4.6 | 2026-09-30 | Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate fr… |
CVE-2026-102106 | Critical | 9.1 | 2026-09-30 | Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not… |
CVE-2026-102105 | Critical | 9.1 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in K… |
CVE-2026-102104 | Critical | 9.1 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in K… |
CVE-2026-102103 | Critical | 9.1 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in K… |
CVE-2026-102102 | Critical | 9.1 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in K… |
CVE-2026-102101 | High | 8.1 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain condi… |
CVE-2026-102100 | High | 8.7 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-Site Scripting. A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an… |
CVE-2026-102099 | High | 7.2 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied file path in a Kiteworks administrative e… |
CVE-2026-102098 | High | 7.2 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could… |
CVE-2026-102097 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated adm… |
CVE-2026-102096 | High | 7.2 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose co… |
CVE-2026-102095 | Critical | 9.1 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side… |
CVE-2026-102094 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing… |
CVE-2026-102093 | High | 7.2 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could… |
CVE-2026-102092 | High | 8.7 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store crafted content that exe… |
CVE-2026-102091 | High | 7.5 | 2026-09-30 | Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the… |
CVE-2026-102090 | Medium | 4.3 | 2026-09-30 | Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-co… |
CVE-2026-102089 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticate… |
CVE-2026-101276 | | 2026-09-30 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without canc… | |
CVE-2026-103548 | | 2026-09-30 | Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-9… | |
CVE-2026-103547 | | 2026-09-30 | In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client… | |
CVE-2026-103387 | Medium | 4.3 | 2026-09-30 | A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto H… |
CVE-2026-102994 | | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that… | |
CVE-2026-102993 | | 2026-09-30 | pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/_p… | |
CVE-2026-102992 | | 2026-09-30 | piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.options in src/index.ts as a plain object tha… | |
CVE-2026-102991 | Medium | 6.5 | 2026-09-30 | Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath… |
CVE-2026-102990 | | 2026-09-30 | basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsin… | |
CVE-2026-101885 | High | 7.8 | 2026-09-30 | ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_pa… |
CVE-2026-101884 | High | 7.5 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOK… |
CVE-2026-101883 | Medium | 5.4 | 2026-09-30 | OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation… |
CVE-2026-101882 | High | 8.8 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and ab… |
CVE-2026-101881 | Medium | 6.5 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected… |
CVE-2026-101880 | High | 8.8 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fai… |
CVE-2026-101879 | Medium | 6.5 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents… |
CVE-2026-97291 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions. |
CVE-2026-97290 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions. |
CVE-2026-97265 | Medium | 6.5 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. T… |
CVE-2026-97256 | High | 7.2 | 2026-09-30 | Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions. |
CVE-2026-94171 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in CURCY <= 2.2.16 versions. |
CVE-2026-87004 | High | 8.1 | 2026-09-30 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/p… |
CVE-2026-55224 | | 2026-09-30 | MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal managem… | |
CVE-2026-55107 | Critical | 10.0 | 2026-09-30 | Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user… |
CVE-2026-55094 | | 2026-09-30 | Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vuln… | |
CVE-2026-53605 | High | 7.8 | 2026-09-30 | Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to ve… |
CVE-2026-103500 | | 2026-09-30 | An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in… | |
CVE-2026-103476 | Medium | 5.3 | 2026-09-30 | yii2-starter-kit through 4.2.0 fails to validate article publication status in the attachment-download endpoint, allowing unauthenticated attackers to download… |
CVE-2026-103475 | Critical | 9.1 | 2026-09-30 | yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to ['*'] in its default development configuratio… |
CVE-2026-103474 | High | 8.8 | 2026-09-30 | yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attacke… |
CVE-2026-103473 | High | 8.1 | 2026-09-30 | Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell arguments are escaped for the wrong sh… |
CVE-2026-103472 | High | 7.5 | 2026-09-30 | restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded strea… |
CVE-2026-103471 | High | 7.5 | 2026-09-30 | restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory… |
CVE-2026-103446 | | 2026-09-30 | Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This i… | |
CVE-2026-103445 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows S… | |
CVE-2026-103440 | | 2026-09-30 | Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation… | |
CVE-2026-103439 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cros… | |
CVE-2026-103438 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows… | |
CVE-2026-103437 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows… | |
CVE-2026-103399 | Medium | 5.3 | 2026-09-30 | A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early… |
CVE-2026-102397 | Medium | 6.5 | 2026-09-30 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 versions. |
CVE-2026-102392 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions. |
CVE-2026-102391 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions. |
CVE-2026-102377 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions. |
CVE-2026-102376 | High | 7.1 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions. |
CVE-2026-102375 | Medium | 6.5 | 2026-09-30 | Subscriber Broken Access Control in Optimole <= 4.2.14 versions. |
CVE-2026-100512 | Critical | 9.8 | 2026-09-30 | Contributor PHP Object Injection in Nested Pages <= 3.3.2 versions. |
CVE-2026-100510 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions. |
CVE-2026-75969 | | 2026-09-30 | Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authent… | |
CVE-2026-62308 | Critical | 9.1 | 2026-09-30 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend… |
CVE-2026-55494 | Critical | 9.8 | 2026-09-30 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent allows unauthenticated access to Docker ma… |
CVE-2026-55181 | Critical | 9.4 | 2026-09-30 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated eve… |
CVE-2026-55177 | | 2026-09-30 | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI help… | |
CVE-2026-55176 | Critical | 9.0 | 2026-09-30 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js… |
CVE-2026-46711 | High | 8.3 | 2026-09-30 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0… |
CVE-2026-19553 | | 2026-09-30 | ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check… | |
CVE-2026-19445 | | 2026-09-30 | A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.conte… | |
CVE-2026-103444 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows St… | |
CVE-2026-103443 | | 2026-09-30 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension a… | |
CVE-2026-103241 | Medium | 5.3 | 2026-09-30 | A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the compo… |
CVE-2026-103233 | Medium | 6.3 | 2026-09-30 | A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unkno… |
CVE-2026-103232 | High | 7.3 | 2026-09-30 | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_… |
CVE-2026-102490 | | 2026-09-30 | All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root. | |
CVE-2026-102489 | | 2026-09-30 | Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also… | |
CVE-2026-80490 | | 2026-09-30 | Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, first_match and match… | |
CVE-2026-55174 | Medium | 5.9 | 2026-09-30 | UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes… |
CVE-2026-47604 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel… |
CVE-2026-47603 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel… |
CVE-2026-47602 | High | 7.1 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an un… |
CVE-2026-47601 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user… |
CVE-2026-47600 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly i… |
CVE-2026-47599 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservatio… |
CVE-2026-47598 | High | 7.0 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause… |
CVE-2026-47597 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user coul… |
CVE-2026-47596 | High | 7.0 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memo… |
CVE-2026-47595 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memo… |
CVE-2026-47594 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence… |
CVE-2026-47593 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successf… |
CVE-2026-47592 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read… |