2026 CVEs (page 705)
Page 705 of 708 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23835 | | 2026-01-30 | LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the… | |
CVE-2026-1702 | Medium | 6.3 | 2026-01-30 | A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of t… |
CVE-2026-1701 | High | 7.3 | 2026-01-30 | A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/ind… |
CVE-2026-1700 | Low | 3.5 | 2026-01-30 | A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This m… |
CVE-2026-1691 | Medium | 6.3 | 2026-01-30 | A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/Backu… |
CVE-2026-1690 | Medium | 4.7 | 2026-01-30 | A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of… |
CVE-2026-1689 | High | 7.3 | 2026-01-30 | A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform… |
CVE-2026-25128 | High | 7.5 | 2026-01-30 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5… |
CVE-2026-25050 | Medium | 5.3 | 2026-01-30 | Vendure is an open-source headless commerce platform. Prior to version 3.5.3, the `NativeAuthenticationStrategy.authenticate()` method is vulnerable to a timin… |
CVE-2026-24855 | Medium | 5.4 | 2026-01-30 | ChurchCRM is an open-source church management system. Versions prior to 6.7.2 have a Stored Cross-Site Scripting (XSS) vulnerability occurs in Create Events in… |
CVE-2026-24854 | High | 8.8 | 2026-01-30 | ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in endpoint `/PaddleNumEditor.php` in ChurchCRM prior to version 6.7… |
CVE-2026-1688 | High | 7.3 | 2026-01-30 | A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/inde… |
CVE-2026-1687 | High | 7.3 | 2026-01-30 | A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the compone… |
CVE-2026-1686 | High | 8.8 | 2026-01-30 | A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.s… |
CVE-2026-1685 | Low | 3.7 | 2026-01-30 | A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to… |
CVE-2026-1684 | Medium | 5.3 | 2026-01-30 | A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function HandleReports of the file /internal/context/pfcp_reports.go of the… |
CVE-2026-1683 | Medium | 5.3 | 2026-01-30 | A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/p… |
CVE-2026-1682 | Medium | 5.3 | 2026-01-30 | A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of… |
CVE-2026-1498 | | 2026-01-30 | An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP a… | |
CVE-2026-22626 | Medium | 4.9 | 2026-01-30 | Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by craf… |
CVE-2026-22625 | Medium | 4.6 | 2026-01-30 | Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files. |
CVE-2026-22624 | Medium | 4.3 | 2026-01-30 | Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization. |
CVE-2026-22623 | High | 7.2 | 2026-01-30 | Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the devi… |
CVE-2026-0709 | High | 7.2 | 2026-01-30 | Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials… |
CVE-2026-1699 | Critical | 10.0 | 2026-01-30 | In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and exec… |
CVE-2026-22277 | High | 7.8 | 2026-01-30 | Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability… |
CVE-2026-21418 | High | 7.8 | 2026-01-30 | Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability… |
CVE-2026-25211 | Low | 3.2 | 2026-01-30 | Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log. |
CVE-2026-25210 | Medium | 6.9 | 2026-01-30 | In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer… |
CVE-2026-1680 | High | 7.8 | 2026-01-30 | Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate th… |
CVE-2026-0963 | Critical | 9.9 | 2026-01-30 | An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform fil… |
CVE-2026-0805 | High | 8.2 | 2026-01-30 | An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tamper… |
CVE-2026-24729 | | 2026-01-30 | An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote a… | |
CVE-2026-24728 | | 2026-01-30 | A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remot… | |
CVE-2026-24714 | High | 7.5 | 2026-01-30 | Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box. |
CVE-2026-1638 | Medium | 6.3 | 2026-01-30 | A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg… |
CVE-2026-1665 | | 2026-01-29 | A command injection vulnerability exists in nvm (Node Version Manager) versions 0.40.3 and below. The nvm_download() function uses eval to execute wget command… | |
CVE-2026-1637 | High | 8.8 | 2026-01-29 | A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The man… |
CVE-2026-25126 | High | 7.1 | 2026-01-29 | PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/v1/forum/vote`) trusts the JSON body’s… |
CVE-2026-25117 | | 2026-01-29 | pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit e33da14449a5abcff507e554f66e2141d6683b0a, missing sandboxing on `/workspa… | |
CVE-2026-25116 | High | 7.6 | 2026-01-29 | Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the `Us… |
CVE-2026-25063 | High | 7.8 | 2026-01-29 | gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3… |
CVE-2026-25061 | High | 7.5 | 2026-01-29 | tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on… |
CVE-2026-25047 | High | 8.8 | 2026-01-29 | deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 o… |
CVE-2026-25046 | Low | 2.9 | 2026-01-29 | Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass f… |
CVE-2026-25040 | High | 8.8 | 2026-01-29 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions up to and including 3.26.3, a Creator-level user, who nor… |
CVE-2026-24905 | High | 7.8 | 2026-01-29 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. The `ig` binary p… |
CVE-2026-24904 | Medium | 5.3 | 2026-01-29 | TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 byte… |
CVE-2026-24902 | High | 7.1 | 2026-01-29 | TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In `tcp_… |
CVE-2026-24846 | Medium | 5.5 | 2026-01-29 | malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.3, malcont… |
CVE-2026-24845 | Medium | 6.5 | 2026-01-29 | malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcon… |
CVE-2026-1625 | Medium | 6.3 | 2026-01-29 | A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS… |
CVE-2026-1624 | Medium | 6.3 | 2026-01-29 | A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom… |
CVE-2026-1340 | Critical | 9.8 | 2026-01-29 | A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. |
CVE-2026-1281 | Critical | 9.8 | 2026-01-29 | A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. |
CVE-2026-1623 | Medium | 6.3 | 2026-01-29 | A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the… |
CVE-2026-25068 | | 2026-01-29 | alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The… | |
CVE-2026-24687 | Medium | 6.5 | 2026-01-29 | Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enumerate and… |
CVE-2026-22806 | Critical | 9.1 | 2026-01-29 | vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to versions 4.6.0, 4.5.4, 4.4.2, and… |
CVE-2026-1610 | High | 8.1 | 2026-01-29 | A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing… |
CVE-2026-1601 | Medium | 6.3 | 2026-01-29 | A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executin… |
CVE-2026-1457 | High | 8.8 | 2026-01-29 | An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution… |
CVE-2026-1453 | Critical | 9.8 | 2026-01-29 | A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrat… |
CVE-2026-24780 | High | 8.8 | 2026-01-29 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autog… |
CVE-2026-24414 | Medium | 5.5 | 2026-01-29 | The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior… |
CVE-2026-24413 | Medium | 5.5 | 2026-01-29 | Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropr… |
CVE-2026-24054 | Critical | 10.0 | 2026-01-29 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions… |
CVE-2026-23896 | High | 7.2 | 2026-01-29 | immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escalate their own permissions by calling th… |
CVE-2026-1600 | Medium | 4.3 | 2026-01-29 | A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file… |
CVE-2026-1599 | Medium | 4.3 | 2026-01-29 | A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file… |
CVE-2026-1598 | Low | 3.5 | 2026-01-29 | A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/… |
CVE-2026-1597 | Medium | 6.3 | 2026-01-29 | A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the component Administrative Endpoint. Such man… |
CVE-2026-1596 | Medium | 6.3 | 2026-01-29 | A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipul… |
CVE-2026-1595 | High | 7.3 | 2026-01-29 | A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. The manipul… |
CVE-2026-0936 | Medium | 5.0 | 2026-01-29 | An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to g… |
CVE-2026-1594 | High | 7.3 | 2026-01-29 | A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /adm… |
CVE-2026-1593 | High | 7.3 | 2026-01-29 | A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edi… |
CVE-2026-1590 | High | 7.3 | 2026-01-29 | A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such man… |
CVE-2026-1589 | High | 7.3 | 2026-01-29 | A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This man… |
CVE-2026-1616 | High | 7.5 | 2026-01-29 | The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via quer… |
CVE-2026-1588 | Low | 2.7 | 2026-01-29 | A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the com… |
CVE-2026-1587 | Medium | 5.3 | 2026-01-29 | A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s11_handle_modify_bearer_request of the file /sgwc/s11-handler… |
CVE-2026-1586 | Medium | 5.3 | 2026-01-29 | A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handler.c of the component SGWC. Executing a… |
CVE-2026-1469 | Medium | 5.4 | 2026-01-29 | Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by inject… |
CVE-2026-22764 | Medium | 4.3 | 2026-01-29 | Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. A low privileged attacker with remote access cou… |
CVE-2026-23571 | Medium | 6.8 | 2026-01-29 | A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper… |
CVE-2026-23570 | Medium | 6.5 | 2026-01-29 | A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version… |
CVE-2026-23569 | Medium | 6.5 | 2026-01-29 | An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Win… |
CVE-2026-23568 | Medium | 5.4 | 2026-01-29 | An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Win… |
CVE-2026-23567 | Medium | 6.5 | 2026-01-29 | An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version… |
CVE-2026-23566 | Medium | 6.5 | 2026-01-29 | A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker… |
CVE-2026-23565 | Medium | 6.5 | 2026-01-29 | A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker… |
CVE-2026-23564 | Medium | 6.5 | 2026-01-29 | A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker… |
CVE-2026-23563 | Medium | 5.7 | 2026-01-29 | Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1… |
CVE-2026-1188 | Critical | 9.8 | 2026-01-29 | In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounti… |
CVE-2026-25067 | Medium | 5.3 | 2026-01-29 | SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview endpoint. Th… |
CVE-2026-1552 | Medium | 6.3 | 2026-01-29 | A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argumen… |
CVE-2026-1551 | Medium | 6.3 | 2026-01-29 | A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executin… |
CVE-2026-24897 | Critical | 10.0 | 2026-01-28 | Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged user can upload arbitrary files to any sp… |
CVE-2026-1550 | Medium | 6.3 | 2026-01-28 | A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospita… |