2026 CVEs (page 78)
Page 78 of 663 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-86462 | Critical | 9.1 | 2026-09-16 | Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed ses… |
CVE-2026-86338 | | 2026-09-16 | Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is r… | |
CVE-2026-85501 | Medium | 5.3 | 2026-09-16 | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service w… |
CVE-2026-82720 | Medium | 5.9 | 2026-09-16 | NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. Duri… |
CVE-2026-82717 | Critical | 9.8 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compila… |
CVE-2026-82311 | Critical | 9.8 | 2026-09-16 | Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it do… |
CVE-2026-81642 | Critical | 9.8 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code exe… |
CVE-2026-81634 | High | 7.5 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonic… |
CVE-2026-80225 | Medium | 5.3 | 2026-09-16 | In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on… |
CVE-2026-78227 | Medium | 6.5 | 2026-09-16 | NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each… |
CVE-2026-77955 | Medium | 4.4 | 2026-09-16 | In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a… |
CVE-2026-77860 | Low | 3.7 | 2026-09-16 | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' count… |
CVE-2026-73464 | High | 8.8 | 2026-09-16 | On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticat… |
CVE-2026-73463 | Medium | 5.3 | 2026-09-16 | On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz se… |
CVE-2026-73461 | High | 8.0 | 2026-09-16 | On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong priv… |
CVE-2026-73454 | High | 8.1 | 2026-09-16 | On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended m… |
CVE-2026-73445 | Medium | 4.9 | 2026-09-16 | On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which w… |
CVE-2026-73439 | High | 7.5 | 2026-09-16 | On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz… |
CVE-2026-2380 | High | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be uni… |
CVE-2026-92355 | | 2026-09-16 | In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary… | |
CVE-2026-92091 | Medium | 5.9 | 2026-09-16 | A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an algorithm with O(n^2) time complexit… |
CVE-2026-89207 | Medium | 6.5 | 2026-09-16 | A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices… |
CVE-2026-88263 | High | 7.5 | 2026-09-16 | XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing networ… |
CVE-2026-86341 | Medium | 4.4 | 2026-09-16 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain cond… |
CVE-2026-84408 | High | 8.8 | 2026-09-16 | QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected pro… |
CVE-2026-81326 | Medium | 5.5 | 2026-09-16 | QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to… |
CVE-2026-27565 | Critical | 9.8 | 2026-09-16 | An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains acti… |
CVE-2026-27564 | High | 7.2 | 2026-09-16 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin crede… |
CVE-2026-27563 | High | 7.2 | 2026-09-16 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with adm… |
CVE-2026-27562 | High | 7.2 | 2026-09-16 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin cr… |
CVE-2026-27561 | High | 7.2 | 2026-09-16 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin cr… |
CVE-2026-27560 | High | 7.2 | 2026-09-16 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin… |
CVE-2026-27559 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user cred… |
CVE-2026-27558 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint… |
CVE-2026-27557 | High | 7.5 | 2026-09-16 | An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's priv… |
CVE-2026-27556 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator c… |
CVE-2026-27555 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie… |
CVE-2026-27554 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials… |
CVE-2026-27553 | Medium | 6.5 | 2026-09-16 | A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user co… |
CVE-2026-27552 | High | 8.1 | 2026-09-16 | A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the devic… |
CVE-2026-27551 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing… |
CVE-2026-27550 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution… |
CVE-2026-27549 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credent… |
CVE-2026-27548 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator creden… |
CVE-2026-27547 | High | 8.8 | 2026-09-16 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator… |
CVE-2026-27546 | Critical | 9.8 | 2026-09-16 | An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly con… |
CVE-2026-8030 | Medium | 4.3 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain co… |
CVE-2026-86475 | Medium | 5.3 | 2026-09-16 | The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its ow… |
CVE-2026-84906 | Medium | 5.3 | 2026-09-16 | The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is applied to, confirming only that the payment… |
CVE-2026-7514 | Medium | 4.3 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated… |
CVE-2026-79708 | High | 8.5 | 2026-09-16 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain cond… |
CVE-2026-78252 | High | 8.2 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain c… |
CVE-2026-73447 | Critical | 9.1 | 2026-09-16 | A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated use… |
CVE-2026-3855 | Low | 3.1 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain… |
CVE-2026-1168 | High | 7.5 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain… |
CVE-2026-19857 | Medium | 4.8 | 2026-09-16 | The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a s… |
CVE-2026-19619 | Medium | 4.7 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain co… |
CVE-2026-19248 | | 2026-09-16 | QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input. | |
CVE-2026-16794 | Medium | 4.3 | 2026-09-16 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain cond… |
CVE-2026-13407 | Medium | 5.4 | 2026-09-16 | The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including the… |
CVE-2026-92358 | Medium | 6.4 | 2026-09-16 | A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is cre… |
CVE-2026-89328 | Low | 3.8 | 2026-09-16 | The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management… |
CVE-2026-89327 | Low | 3.8 | 2026-09-16 | The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing an… |
CVE-2026-88910 | Medium | 5.3 | 2026-09-16 | The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently dele… |
CVE-2026-87959 | Medium | 5.4 | 2026-09-16 | The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with… |
CVE-2026-87907 | Medium | 5.3 | 2026-09-16 | The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking service and category r… |
CVE-2026-87896 | Medium | 5.3 | 2026-09-16 | The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking agent (staff) records… |
CVE-2026-87860 | Medium | 4.3 | 2026-09-16 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attacke… |
CVE-2026-87854 | Medium | 5.3 | 2026-09-16 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing un… |
CVE-2026-87828 | Medium | 5.7 | 2026-09-16 | The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated… |
CVE-2026-86823 | Medium | 5.3 | 2026-09-16 | The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthen… |
CVE-2026-86784 | Medium | 6.8 | 2026-09-16 | The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart edit… |
CVE-2026-86449 | Medium | 5.3 | 2026-09-16 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST rout… |
CVE-2026-86448 | Low | 3.7 | 2026-09-16 | The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export… |
CVE-2026-86447 | Medium | 5.3 | 2026-09-16 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course tools, allowing unauthenticated attack… |
CVE-2026-86445 | Medium | 5.3 | 2026-09-16 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated a… |
CVE-2026-86444 | High | 7.1 | 2026-09-16 | The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthentic… |
CVE-2026-85641 | Medium | 4.3 | 2026-09-16 | The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on th… |
CVE-2026-85572 | Medium | 4.3 | 2026-09-16 | The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any aut… |
CVE-2026-85569 | High | 7.2 | 2026-09-16 | The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce th… |
CVE-2026-85530 | High | 8.1 | 2026-09-16 | The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses t… |
CVE-2026-85349 | Medium | 4.3 | 2026-09-16 | The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authe… |
CVE-2026-85131 | Medium | 6.5 | 2026-09-16 | The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, a… |
CVE-2026-84907 | Low | 3.7 | 2026-09-16 | The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline (local) payment method is enabled, relying on a non… |
CVE-2026-84905 | Low | 2.7 | 2026-09-16 | The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users with contributor-level… |
CVE-2026-84829 | High | 8.8 | 2026-09-16 | The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthent… |
CVE-2026-84088 | Medium | 6.8 | 2026-09-16 | The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a… |
CVE-2026-82126 | Low | 2.7 | 2026-09-16 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema gene… |
CVE-2026-82125 | Medium | 5.3 | 2026-09-16 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before ret… |
CVE-2026-82124 | Medium | 5.3 | 2026-09-16 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the… |
CVE-2026-78474 | Medium | 5.3 | 2026-09-16 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines… |
CVE-2026-78472 | High | 8.6 | 2026-09-16 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenti… |
CVE-2026-77702 | Medium | 5.3 | 2026-09-16 | The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to change that order's tickets afterwards… |
CVE-2026-76559 | Medium | 4.1 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with… |
CVE-2026-76558 | Medium | 6.8 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database before inserting them into the DOM of o… |
CVE-2026-76557 | Medium | 6.8 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statem… |
CVE-2026-76556 | Medium | 6.8 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, a… |
CVE-2026-76555 | Medium | 6.8 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessibl… |
CVE-2026-76553 | Medium | 6.5 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the directo… |
CVE-2026-76552 | High | 8.8 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during… |