2026 CVEs (page 79)
Page 79 of 663 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76551 | High | 7.2 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values, allowing users granted i… |
CVE-2026-76550 | High | 7.2 | 2026-09-16 | The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing users granted its ex… |
CVE-2026-74926 | High | 7.1 | 2026-09-16 | The MultiVendorX WordPress plugin before 5.0.16 does not verify that a user owns the store they are acting on in one of its REST API routes, allowing any auth… |
CVE-2026-89063 | High | 7.5 | 2026-09-16 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |
CVE-2026-5920 | Medium | 6.4 | 2026-09-16 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content' parameter of the bt_bb_shortcode shortcode… |
CVE-2026-18555 | Medium | 6.1 | 2026-09-16 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn… |
CVE-2026-78088 | High | 8.8 | 2026-09-16 | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Overwrite in… |
CVE-2026-18595 | High | 7.2 | 2026-09-16 | The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, an… |
CVE-2026-16588 | Medium | 6.5 | 2026-09-16 | The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to… |
CVE-2026-14349 | Critical | 9.8 | 2026-09-16 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2… |
CVE-2026-12793 | Critical | 9.8 | 2026-09-16 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This i… |
CVE-2026-11996 | Medium | 6.4 | 2026-09-16 | The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including… |
CVE-2026-11984 | Medium | 5.3 | 2026-09-16 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a mis… |
CVE-2026-92247 | Medium | 4.7 | 2026-09-16 | A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of th… |
CVE-2026-92221 | Medium | 4.7 | 2026-09-16 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function… |
CVE-2026-92220 | Medium | 5.3 | 2026-09-16 | A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_fini… |
CVE-2026-86109 | Medium | 6.6 | 2026-09-16 | The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the d… |
CVE-2026-86108 | High | 8.0 | 2026-09-16 | Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or… |
CVE-2026-73450 | Medium | 6.9 | 2026-09-16 | On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection net… |
CVE-2026-92299 | High | 7.4 | 2026-09-16 | @jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in th… |
CVE-2026-92298 | Medium | 4.8 | 2026-09-16 | EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographicall… |
CVE-2026-92217 | Medium | 6.3 | 2026-09-16 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/… |
CVE-2026-92216 | Medium | 4.3 | 2026-09-16 | A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/g… |
CVE-2026-92215 | High | 7.3 | 2026-09-16 | A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agent_sdks/python/a2ui_a… |
CVE-2026-92214 | Low | 3.5 | 2026-09-16 | A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/… |
CVE-2026-92213 | Medium | 5.5 | 2026-09-16 | A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client… |
CVE-2026-92184 | Medium | 6.3 | 2026-09-16 | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/… |
CVE-2026-73460 | Medium | 6.1 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can c… |
CVE-2026-73459 | High | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legi… |
CVE-2026-73446 | High | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Da… |
CVE-2026-15640 | | 2026-09-16 | Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user. | |
CVE-2026-15639 | | 2026-09-16 | An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker. | |
CVE-2026-15638 | | 2026-09-16 | An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. T… | |
CVE-2026-85893 | High | 8.8 | 2026-09-15 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-69486 | High | 8.8 | 2026-09-15 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-92259 | Medium | 5.5 | 2026-09-15 | Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-… |
CVE-2026-92257 | Medium | 5.4 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the cal… |
CVE-2026-92256 | Medium | 6.5 | 2026-09-15 | NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_show_cgi.c, and mod_vpn_remote/plan.json… |
CVE-2026-92255 | Medium | 5.4 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Att… |
CVE-2026-92248 | High | 7.8 | 2026-09-15 | A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer ov… |
CVE-2026-92114 | Medium | 5.3 | 2026-09-15 | A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functio… |
CVE-2026-83408 | High | 8.1 | 2026-09-15 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle… |
CVE-2026-83368 | High | 7.0 | 2026-09-15 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported… |
CVE-2026-83357 | High | 8.1 | 2026-09-15 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle… |
CVE-2026-82567 | Medium | 6.3 | 2026-09-15 | The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is access… |
CVE-2026-81855 | Critical | 9.1 | 2026-09-15 | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. |
CVE-2026-78225 | Critical | 9.0 | 2026-09-15 | A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard. |
CVE-2026-76873 | Medium | 5.2 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components han… |
CVE-2026-76872 | Medium | 5.4 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcp_add_stati… |
CVE-2026-76871 | Medium | 6.5 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json, pptpd_user_show.cgi, pptp_client_conf… |
CVE-2026-76870 | High | 7.1 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine triggered by short firmware uploa… |
CVE-2026-76869 | High | 7.2 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing. Attackers can exploi… |
CVE-2026-76868 | Medium | 4.9 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a missing exit_port parameter. Attackers… |
CVE-2026-76867 | Medium | 5.4 | 2026-09-15 | Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including rout… |
CVE-2026-76866 | High | 7.2 | 2026-09-15 | Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSset_cgi.c and related ddns_Proc.c compo… |
CVE-2026-76865 | Medium | 4.9 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi… |
CVE-2026-76864 | Medium | 4.8 | 2026-09-15 | NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval() in qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and… |
CVE-2026-76863 | Medium | 4.3 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling within filter_conns_du… |
CVE-2026-76862 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi… |
CVE-2026-76861 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing for… |
CVE-2026-76860 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers ca… |
CVE-2026-76859 | Medium | 6.5 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can e… |
CVE-2026-76858 | Medium | 4.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused by unsafe eval() handling of DDNS data… |
CVE-2026-76857 | Medium | 6.5 | 2026-09-15 | Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSse… |
CVE-2026-76856 | High | 8.1 | 2026-09-15 | Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_c… |
CVE-2026-76855 | Medium | 6.5 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7_web_auth_log_dump_cgi.c, audi… |
CVE-2026-76854 | Medium | 6.5 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cgi related to captive-portal credential… |
CVE-2026-76853 | High | 8.1 | 2026-09-15 | Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation. Attacker… |
CVE-2026-76852 | High | 8.8 | 2026-09-15 | Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can… |
CVE-2026-73807 | Critical | 9.8 | 2026-09-15 | The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the… |
CVE-2026-73444 | Medium | 4.7 | 2026-09-15 | On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the… |
CVE-2026-73437 | Critical | 9.6 | 2026-09-15 | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access coul… |
CVE-2026-61560 | Critical | 9.8 | 2026-09-15 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools withou… |
CVE-2026-10144 | High | 7.8 | 2026-09-15 | Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing sh… |
CVE-2026-92237 | Medium | 6.5 | 2026-09-15 | Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authentic… |
CVE-2026-92234 | Medium | 5.4 | 2026-09-15 | QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page… |
CVE-2026-92000 | High | 7.5 | 2026-09-15 | adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malic… |
CVE-2026-91939 | Critical | 9.8 | 2026-09-15 | Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantia… |
CVE-2026-91749 | Critical | 9.6 | 2026-09-15 | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra… |
CVE-2026-91748 | High | 8.3 | 2026-09-15 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged… |
CVE-2026-91747 | Low | 3.1 | 2026-09-15 | Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data v… |
CVE-2026-91746 | Medium | 4.3 | 2026-09-15 | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-91745 | High | 8.8 | 2026-09-15 | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-91744 | Medium | 5.3 | 2026-09-15 | Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and… |
CVE-2026-91743 | High | 8.3 | 2026-09-15 | Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitr… |
CVE-2026-91742 | Medium | 4.8 | 2026-09-15 | Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system acc… |
CVE-2026-91741 | High | 8.8 | 2026-09-15 | Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTM… |
CVE-2026-91740 | Medium | 4.3 | 2026-09-15 | Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-91739 | Medium | 4.2 | 2026-09-15 | Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to sp… |
CVE-2026-91738 | Critical | 9.6 | 2026-09-15 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-91737 | High | 8.8 | 2026-09-15 | Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-91736 | High | 8.8 | 2026-09-15 | Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-91735 | High | 8.3 | 2026-09-15 | Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially exec… |
CVE-2026-91734 | High | 7.4 | 2026-09-15 | Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox vi… |
CVE-2026-91733 | High | 8.3 | 2026-09-15 | Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory out… |
CVE-2026-91732 | High | 8.1 | 2026-09-15 | Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged s… |
CVE-2026-91731 | High | 8.8 | 2026-09-15 | Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-91730 | Low | 3.1 | 2026-09-15 | Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged soc… |
CVE-2026-91729 | Critical | 9.6 | 2026-09-15 | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
CVE-2026-91728 | Critical | 9.6 | 2026-09-15 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |