CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-121260 Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection 03.11.2026 9.4
CVE-2026-121392 FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate 03.11.2026 9.1
CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures 03.11.2026 9.2
CVE-2026-121022 Default Administrator Password Change Not Enforced in Axxon One Web Client 03.11.2026 9.2
CVE-2026-4052 Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) 03.11.2026 9.8
CVE-2026-13594 Improper Access Control vulnerability 03.11.2026 9.1
CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler 03.11.2026 9.1
CVE-2026-120534 Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type 03.11.2026 9.8
CVE-2026-86596 s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter 02.11.2026 9.8
CVE-2026-116769 Authentication bypass in Secure Access Servers 02.11.2026 9.3
CVE-2026-97718 CSRF in Secure Access Server v14.60 02.11.2026 9.4
CVE-2026-102435 Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field 02.11.2026 9.8
CVE-2026-105606 Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 03.11.2026 9.5
CVE-2026-105604 Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 03.11.2026 9.3
CVE-2026-105603 Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 03.11.2026 9.4
CVE-2026-119085 Template injection in the publishing component of awslabs Virtual Engineering Workbench 02.11.2026 9.4
CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts 02.11.2026 9.3
CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy 03.11.2026 9.1
CVE-2026-94290 Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller 03.11.2026 9.1
CVE-2026-77876 Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory 03.11.2026 9.3
CVE-2026-73696 Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex 03.11.2026 9.3
CVE-2026-120442 ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass 02.11.2026 9.3
CVE-2026-120447 HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code 02.11.2026 9.2
CVE-2026-120459 python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key 02.11.2026 9.1
CVE-2026-116606 Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway 03.11.2026 9.3
CVE-2026-120213 @fastify/http-proxy vulnerable to prefix escape via decoded route parameters 02.11.2026 9.1
CVE-2025-11969 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions 02.11.2026 9.4
CVE-2026-120345 WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection 02.11.2026 10
CVE-2026-120344 WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection 02.11.2026 10
CVE-2026-120322 Termix-SSH Termix transferToHost path traversal 02.11.2026 9.4
CVE-2026-120283 Linksys E8450 portal.cgi strcpy stack-based overflow 02.11.2026 10
CVE-2026-120281 WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow 02.11.2026 10
CVE-2026-120282 WAVLINK WN536AX6-A protocol.csp host_black os command injection 02.11.2026 9.4
CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection 02.11.2026 10
CVE-2026-120280 WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection 02.11.2026 10
CVE-2026-120277 WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection 01.11.2026 10
CVE-2026-120276 WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection 01.11.2026 10
CVE-2026-120240 WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection 02.11.2026 9.4
CVE-2026-120239 WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection 02.11.2026 9.4
CVE-2026-120238 WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection 01.11.2026 9.4
CVE-2026-62048 WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability 01.11.2026 9.3
CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE 02.11.2026 9.9
CVE-2026-120232 Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption 02.11.2026 9.3
CVE-2026-120231 WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection 02.11.2026 9.4
CVE-2026-120230 WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection 01.11.2026 9.4
CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection 01.11.2026 9.4
CVE-2026-120228 WAVLINK WN553X1-B ioos Service sub_416D88 os command injection 02.11.2026 9.4
CVE-2026-120308 Beta9 host filesystem exposure via volume path traversal 02.11.2026 9.9
CVE-2026-120306 Beta9 build sandbox escape via chroot-only isolation 02.11.2026 9.9
CVE-2026-120307 Beta9 container escape via unvalidated sandbox file paths 02.11.2026 9.9
CVE-2026-120227 WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection 02.11.2026 9.4
CVE-2026-120225 Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal 01.11.2026 9.4
CVE-2026-120224 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization 02.11.2026 9.4
CVE-2026-120198 WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection 02.11.2026 10
CVE-2026-120197 WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection 02.11.2026 9.4
CVE-2026-120196 WAVLINK WN579X3-D wapi.cgi port_forward os command injection 01.11.2026 9.4
CVE-2026-120195 WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection 01.11.2026 10
CVE-2026-120189 D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow 01.11.2026 10
CVE-2026-118636 Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder 31.10.2026 9.8
CVE-2026-120201 Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header 02.11.2026 9.3
CVE-2026-120209 AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token 02.11.2026 9.3
CVE-2026-103882 Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter 31.10.2026 9.1
CVE-2026-118235 SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data 02.11.2026 9.8
CVE-2026-116512 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection 02.11.2026 9.8
CVE-2026-119096 Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter 02.11.2026 9.8
CVE-2026-109220 PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field 31.10.2026 9.8
CVE-2026-116557 WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action 31.10.2026 9.1
CVE-2026-89270 Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters 02.11.2026 9.1
CVE-2026-117656 Unverified Sign in with Apple callback parameter can override verified ID token claims 30.10.2026 9.3
CVE-2026-63377 TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover 30.10.2026 9.8
CVE-2026-62863 MoLing: unauthenticated SSE and wildcard CORS expose tool sessions 30.10.2026 9.6
CVE-2026-62849 ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection 30.10.2026 9.1
CVE-2026-62853 ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks 30.10.2026 9.9
CVE-2026-117666 ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary 30.10.2026 9.1
CVE-2026-116238 pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks 30.10.2026 9.2
CVE-2026-116241 pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier 30.10.2026 9.4
CVE-2026-61620 HoneySQL unchecked entity names can lead to SQL injection results 30.10.2026 9.8
CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation) 30.10.2026 9.1
CVE-2026-61850 Kargo: Privilege escalation via Project RBAC management in the Kargo API 30.10.2026 9.3
CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server 30.10.2026 9.3
CVE-2026-116386 WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability 30.10.2026 9.8
CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability 30.10.2026 9.1
CVE-2026-119526 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-39732 WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability 30.10.2026 9.3
CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability 01.11.2026 9.8
CVE-2026-90888 WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-118697 02.11.2026 9
CVE-2026-119978 Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore 02.11.2026 9
CVE-2026-61826 Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery 30.10.2026 10
CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD 31.10.2026 10
CVE-2026-119706 LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization 02.11.2026 9.3
CVE-2026-119716 pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments 02.11.2026 9.3
CVE-2026-93327 Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution 30.10.2026 9.4
CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin 30.10.2026 9.8
CVE-2026-61738 SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) 30.10.2026 10
CVE-2026-61729 SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection 30.10.2026 9.4
CVE-2026-61730 SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount 30.10.2026 9.3
CVE-2026-110799 Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover 30.10.2026 9.8
CVE-2026-112905 Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft 30.10.2026 9
CVE-2026-119660 MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key 30.10.2026 9.3
CVE-2026-61728 SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover 30.10.2026 9.9
CVE-2026-119597 OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery 30.10.2026 9.3
CVE-2026-119418 CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame() 30.10.2026 9.2
CVE-2026-119419 CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation 30.10.2026 9.2
CVE-2026-119568 vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking 30.10.2026 9.1
CVE-2026-116366 Unauthenticated RCE vulnerability against ClickHouse Server 30.10.2026 9.5
CVE-2025-31704 Dahua Intelligent Connection Center command injection 30.10.2026 9.8
CVE-2026-82104 API permission bypass via logic bug 30.10.2026 9.4
CVE-2026-103039 Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field 30.10.2026 9.8
CVE-2023-22793 30.10.2026 9.3
CVE-2026-61707 SOCFortress CoPilot: Stored case-report template injection permits backend code execution 30.10.2026 9
CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API 30.10.2026 9.1
CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform 29.10.2026 9.4
CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption 29.10.2026 9.2
CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN 29.10.2026 9.3
CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie 03.11.2026 9.1
CVE-2026-119145 Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload 29.10.2026 9.4
CVE-2026-90865 Command Injection via FTP Notification Variables in Progress WS_FTP Server 30.10.2026 9
CVE-2026-90866 Virtual Folder Path Confinement Bypass in Progress WS_FTP Server 30.10.2026 9.1
CVE-2026-90868 OS Command Injection in Progress WS_FTP Server 30.10.2026 9.9
CVE-2026-84295 Improper Authentication in Progress WS_FTP Server 30.10.2026 10
CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager 30.10.2026 9.1
CVE-2026-90864 Host Administrator Path Containment Bypass in Progress WS_FTP Server 30.10.2026 9.1
CVE-2026-111732 Out-of-bounds write when parsing AR Vendor Block requests 29.10.2026 9.3
CVE-2026-112256 Logon bypass (trust of attacker-controlled completed-methods list) 29.10.2026 9.2
CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-107327 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-107328 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-107329 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-54856 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-54857 WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-54858 WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-54859 WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-54860 WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability 30.10.2026 10
CVE-2026-61992 WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61997 WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61998 WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62001 WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62002 WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62003 WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62004 WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62005 WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62006 WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62008 WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62009 WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62010 WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62011 WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62012 WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62013 WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62014 WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62015 WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62016 WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62017 WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62018 WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62131 WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-93680 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-110186 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection 29.10.2026 9.2
CVE-2026-97854 29.10.2026 9.3
CVE-2026-115964 WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability 29.10.2026 9.3
CVE-2026-114358 SQL Injection Vulnerability in Radius Xenia M2M Platform 29.10.2026 9.3
CVE-2026-109516 Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token 29.10.2026 9.8
CVE-2026-42922 29.10.2026 9.8
CVE-2026-66088 Unrestricted Command Execution via system.execute 29.10.2026 9.4
CVE-2026-118579 D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor 29.10.2026 9.3
CVE-2026-61564 AVideo-Encoder: unauthenticated installer PHP code injection 03.11.2026 10
CVE-2026-61567 AVideo-Encoder: unauthenticated command execution through streamer login trust 03.11.2026 10
CVE-2026-118690 Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs 29.10.2026 9.3
CVE-2026-117574 Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization 03.11.2026 9.1
CVE-2026-63190 FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS 29.10.2026 9.4
CVE-2026-118264 Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls 30.10.2026 9.1
CVE-2026-118633 28.10.2026 9.2
CVE-2026-103406 Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. 28.10.2026 9.8
CVE-2026-103409 Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed 28.10.2026 9.8
CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code 02.11.2026 9.9
CVE-2026-115968 WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability 28.10.2026 9.8
CVE-2026-105420 Path Traversal in Wing WFTP Server leading to Remote Code Execution 28.10.2026 9.4
CVE-2026-111411 WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability 30.10.2026 9.3
CVE-2026-115607 WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability 29.10.2026 9.3
CVE-2026-115904 Topluyo Desktop for Linux has an OS Command Injection issue 03.11.2026 9.6
CVE-2026-67074 HCL BigFix AEX is affected by multiple security vulnerabilities. 28.10.2026 9.1
CVE-2026-114278 Unauthenticated Command Injection via kubeconfig Username in che-machine-exec 28.10.2026 9.8
CVE-2026-99153 scsi: libiscsi: Validate the ITT reflected in a Reject PDU 31.10.2026 9.8
CVE-2026-99154 scsi: libiscsi: Reject a negative task index from parse_pdu_itt 31.10.2026 9.8
CVE-2026-103792 29.10.2026 9.6
CVE-2026-103799 03.11.2026 9.6
CVE-2026-112197 Missing Authentication for Critical Function in Tactis' NoviGest Desktop App 28.10.2026 9.4
CVE-2026-103780 29.10.2026 9.8
CVE-2026-86384 29.10.2026 9.8
CVE-2026-14571 SQL injection (SQLi) in the user authentication module of Futurum Software 28.10.2026 9.1
CVE-2026-86397 30.10.2026 9.8
CVE-2026-86400 30.10.2026 9.8
CVE-2026-90717 02.11.2026 9.1
CVE-2026-109218 Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass 29.10.2026 9.8
CVE-2026-104383 Code injection in EagleCloud Aquila on-premises version 28.10.2026 9.4
CVE-2026-84999 Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler 29.10.2026 9.8
CVE-2026-118375 llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv() 03.11.2026 9.2
CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter 29.10.2026 9.8
CVE-2026-110879 jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512) 28.10.2026 9.8
CVE-2026-58256 GRR vulnerable to Remote Code Execution Via PHP Code Injection 03.11.2026 9.1

Latest Updates

CVE Title Updated Score
CVE-2026-118505 AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource 03.11.2026
CVE-2026-119215 AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account 03.11.2026
CVE-2026-108147 Potential memory exhaustion in MultiPartParser via base64-encoded file upload 03.11.2026
CVE-2026-111211 Potential log injection via unescaped geometry form values 03.11.2026
CVE-2026-111362 Server-side request forgery via crs member of GeoJSON geometries 03.11.2026
CVE-2026-113593 Potential exposure of private data via empty and missing Vary headers 03.11.2026
CVE-2026-113733 Password hash disclosure to "view only" admin users with custom user models 03.11.2026
CVE-2026-114582 Server-side request forgery via SpatialReference string input 03.11.2026
CVE-2026-120756 Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize 03.11.2026
CVE-2026-120757 Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse 03.11.2026
CVE-2026-120758 NULL Pointer Dereference in H5HL_unprotect via Corrupted File 03.11.2026
CVE-2026-121578 CVE-2026-121578 03.11.2026
CVE-2026-65109 03.11.2026 4.7
CVE-2026-65138 03.11.2026 6.3
CVE-2026-65139 03.11.2026 6.3
CVE-2026-65140 03.11.2026 5.7
CVE-2026-65165 03.11.2026 5.3
CVE-2026-65168 03.11.2026 7
CVE-2026-118487 Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser 03.11.2026 7.5
CVE-2026-119741 rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions 03.11.2026
CVE-2026-120755 Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter 03.11.2026
CVE-2026-121260 Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection 03.11.2026
CVE-2026-120754 Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter 03.11.2026
CVE-2026-121564 Silent loss of messages when merging overlapping chat exports in whatstk 03.11.2026
CVE-2026-65107 03.11.2026 6.3
CVE-2026-65108 03.11.2026 6.3
CVE-2026-97350 Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows 03.11.2026
CVE-2026-121450 CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID 03.11.2026
CVE-2026-121451 AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF 03.11.2026
CVE-2026-121452 bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service 03.11.2026
CVE-2026-121453 SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint 03.11.2026
CVE-2026-121454 Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests 03.11.2026
CVE-2026-121455 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save 03.11.2026
CVE-2026-121543 smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation 03.11.2026
CVE-2026-121544 Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers 03.11.2026
CVE-2026-121545 Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler 03.11.2026
CVE-2026-121546 ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following 03.11.2026
CVE-2026-121547 dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata 03.11.2026
CVE-2026-121548 nnn through 5.3 OS Command Injection via togglex Plugin 03.11.2026
CVE-2026-121549 nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins 03.11.2026
CVE-2026-121550 nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling 03.11.2026
CVE-2026-121551 PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description 03.11.2026
CVE-2026-121552 domain-admin before 1.6.79 Missing Authorization via getGroupUserList 03.11.2026
CVE-2026-121553 Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime()) 03.11.2026
CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects 03.11.2026
CVE-2026-121555 Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb 03.11.2026
CVE-2026-121556 FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints 03.11.2026
CVE-2026-121557 WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot 03.11.2026
CVE-2026-121558 AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id 03.11.2026
CVE-2026-121559 GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning 03.11.2026
CVE-2026-121560 LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts 03.11.2026
CVE-2026-121561 Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads 03.11.2026
CVE-2026-121562 CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint 03.11.2026
CVE-2026-73328 Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/ 03.11.2026
CVE-2026-100493 03.11.2026
CVE-2026-110265 runZero search SQL injection 03.11.2026 6.5
CVE-2026-118488 Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client 03.11.2026 5.9
CVE-2026-40652 03.11.2026
CVE-2026-40659 03.11.2026
CVE-2026-40660 03.11.2026
CVE-2026-40661 03.11.2026
CVE-2026-43603 03.11.2026
CVE-2026-118489 CachingWebClient shares user-specific HTTP responses across users via the shared cache tier 03.11.2026 7.5
CVE-2026-118527 03.11.2026 4.3
CVE-2026-121386 FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers 03.11.2026
CVE-2026-121387 FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder 03.11.2026
CVE-2026-121388 FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST 03.11.2026
CVE-2026-121389 FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging 03.11.2026
CVE-2026-121390 FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response 03.11.2026
CVE-2026-121391 FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE 03.11.2026
CVE-2026-121392 FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate 03.11.2026
CVE-2026-121393 FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion 03.11.2026
CVE-2026-121394 FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder 03.11.2026
CVE-2026-121395 FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder 03.11.2026
CVE-2026-121396 FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion 03.11.2026
CVE-2026-121397 FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer() 03.11.2026
CVE-2026-121398 FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module 03.11.2026
CVE-2026-121399 FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length 03.11.2026
CVE-2026-121400 FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet 03.11.2026
CVE-2026-121401 FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet 03.11.2026
CVE-2026-121402 FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics 03.11.2026
CVE-2026-121403 FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP 03.11.2026
CVE-2026-121404 FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA 03.11.2026
CVE-2026-121405 FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control 03.11.2026
CVE-2026-121406 FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload 03.11.2026
CVE-2026-121407 FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel 03.11.2026
CVE-2026-121408 FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel 03.11.2026
CVE-2026-121409 FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token 03.11.2026
CVE-2026-121410 FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2 03.11.2026
CVE-2026-121411 FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry 03.11.2026
CVE-2026-121412 FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly 03.11.2026
CVE-2026-121413 Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession 03.11.2026
CVE-2026-121414 Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update 03.11.2026
CVE-2026-121415 Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key 03.11.2026
CVE-2026-121416 SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations 03.11.2026
CVE-2026-121417 SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends 03.11.2026
CVE-2026-121418 SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner 03.11.2026
CVE-2026-121419 SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision 03.11.2026
CVE-2026-121420 SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses 03.11.2026
CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass 03.11.2026
CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass 03.11.2026
CVE-2026-121423 SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization 03.11.2026
CVE-2026-121424 Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments 03.11.2026
CVE-2026-121425 Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing 03.11.2026
CVE-2026-121426 Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser 03.11.2026
CVE-2026-121427 AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config 03.11.2026
CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone 03.11.2026
CVE-2026-121429 AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe() 03.11.2026
CVE-2026-121430 AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints 03.11.2026
CVE-2026-121431 AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors 03.11.2026
CVE-2026-121432 AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist 03.11.2026
CVE-2026-121433 AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export 03.11.2026
CVE-2026-121434 Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API 03.11.2026
CVE-2026-121435 Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API 03.11.2026
CVE-2026-121436 Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.php 03.11.2026
CVE-2026-121437 Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters 03.11.2026
CVE-2026-121438 Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing 03.11.2026
CVE-2026-121439 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http 03.11.2026
CVE-2026-121440 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass 03.11.2026
CVE-2026-121441 Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling 03.11.2026
CVE-2026-121442 Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API 03.11.2026
CVE-2026-121443 svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag 03.11.2026
CVE-2026-121444 svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph 03.11.2026
CVE-2026-121445 svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping 03.11.2026
CVE-2026-121446 svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes 03.11.2026
CVE-2026-121447 svg-sanitizer before 1.1.0 XSS via animateTransform on Safari 03.11.2026
CVE-2026-121448 Dockhand before 1.0.54 Path Traversal via Stack Environment Routes 03.11.2026
CVE-2026-121449 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook 03.11.2026
CVE-2026-106991 03.11.2026 7.1
CVE-2026-121505 Out-of-bounds Read in NTPsec 03.11.2026 3.7
CVE-2026-121506 Out-of-bounds Write in NTPsec 03.11.2026 7.4
CVE-2026-121507 Double Free in µD3TN 03.11.2026 5.9
CVE-2026-121508 Use After Free in µD3TN 03.11.2026 5.9
CVE-2026-121510 Out-of-bounds Write in µD3TN 03.11.2026 7.5
CVE-2026-121511 Out-of-bounds Read in µD3TN 03.11.2026 7.1
CVE-2026-121512 Missing Release of Memory after Effective Lifetime in µD3TN 03.11.2026 7.5
CVE-2026-121513 Out-of-bounds Write in µD3TN 03.11.2026 7.5
CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 03.11.2026
CVE-2026-119742 Nagios XI < 2026R2 OS Command Injection via mibs.php 03.11.2026
CVE-2026-119179 MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data 03.11.2026
CVE-2026-85032 Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progress 03.11.2026 4.8
CVE-2026-85033 Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peer 03.11.2026 4.6
CVE-2026-85034 Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscribers 03.11.2026 6.7
CVE-2026-85035 Use-after-free via dynamically allocated message queue retained by the CAN RX filter 03.11.2026 8.8
CVE-2026-89295 Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter 03.11.2026
CVE-2026-65160 03.11.2026 5.5
CVE-2026-121458 Instatic before 0.0.21 Authorization Bypass via MCP Content Read Tools 03.11.2026
CVE-2026-76124 BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint 03.11.2026 8.8
CVE-2026-99270 tcp: Fix potential UAF in reqsk_timer_handler(). 03.11.2026
CVE-2026-108046 Direct Object Reference (IDOR) vulnerability in Alosuite 03.11.2026
CVE-2026-108047 Inadequate authorization vulnerability in Alosuite’s user invitation functionality 03.11.2026
CVE-2026-108048 Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality. 03.11.2026
CVE-2026-108049 Clickjacking vulnerability in the Alosuite web application. 03.11.2026
CVE-2026-108050 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108051 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108052 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108053 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108054 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108055 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108056 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108057 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108058 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108059 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-108060 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. 03.11.2026
CVE-2026-99262 io_uring/timeout: don't lose a cancel as io-wq arms a timeout 03.11.2026
CVE-2026-99263 io_uring/poll: avoid retry wakeup loss when dropping ownership 03.11.2026
CVE-2026-99264 io_uring/net: don't retry recv on uncommitted buffers 03.11.2026
CVE-2026-99265 io_uring/openclose: keep the lock in io_pipe_fixed() 03.11.2026
CVE-2026-99266 io_uring/zcrx: fix buffer offsets in areas above 4GB 03.11.2026
CVE-2026-99267 io_uring/napi: make stale entries time out after 60s 03.11.2026
CVE-2026-99268 io_uring: wake ring pollers for local task_work 03.11.2026
CVE-2026-99269 sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs 03.11.2026
CVE-2026-99252 io_uring/mpscq: disable preemption while pushing 03.11.2026
CVE-2026-99253 io_uring/cancel: rearm local work wake up before sleep 03.11.2026
CVE-2026-99254 io_uring: don't flood a cancelling task with task_work 03.11.2026
CVE-2026-99255 io_uring/io-wq: don't hide a link from cancellations 03.11.2026
CVE-2026-99256 dm cache: fix issue with background work locking 03.11.2026
CVE-2026-99257 gpio: shared: gracefully handle no-device lookup of shared GPIOs 03.11.2026
CVE-2026-99258 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() 03.11.2026
CVE-2026-99259 soc/tegra: pmc: Fix uninitialised clock rate 03.11.2026
CVE-2026-99260 ntfs: fix resident conversion in ntfs_new_attr_flags 03.11.2026
CVE-2026-99261 drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction 03.11.2026
CVE-2026-99243 io-wq: order the exit bit against worker creation task work 03.11.2026
CVE-2026-99244 pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper 03.11.2026
CVE-2026-99245 KEYS: Fix key_reject_and_link() race with keyring restriction 03.11.2026
CVE-2026-99246 tipc: protect node reset trace dump with node lock 03.11.2026
CVE-2026-99247 tracing: Do not initialize tracefs work if tracing is disabled 03.11.2026
CVE-2026-99248 i2c: xiic: restore non-managed runtime PM to fix clk WARN flood 03.11.2026
CVE-2026-99249 pid_namespace: make zap_pid_ns_processes() freezable 03.11.2026
CVE-2026-99250 printk: Postpone kthread startup 03.11.2026
CVE-2026-99251 Drivers: hv: Avoid infinite retry loop in init_vp_index() 03.11.2026
CVE-2026-114442 Apache HertzBeat: incomplete XPath expression validation in aliasFields 03.11.2026
CVE-2026-120327 Open Redirection in extension "Mail" (mail) 03.11.2026
CVE-2026-120328 Information Disclosure in extension "Mail" (mail) 03.11.2026
CVE-2026-120329 Broken Access Control in extension "Mail" (mail) 03.11.2026
CVE-2026-120330 Broken Access Control in extension "Mail" (mail) 03.11.2026
CVE-2026-120331 Server-Side Request Forgery in extension "Mail" (mail) 03.11.2026
CVE-2026-120332 Cross-Site Scripting in extension "Mail" (mail) 03.11.2026
CVE-2026-120333 Broken Access Control in extension "Frontend User Registration" (sf_register) 03.11.2026
CVE-2026-77691 Command injection vulnerability 03.11.2026 8.1
CVE-2026-119843 Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags 03.11.2026
CVE-2026-89229 03.11.2026
CVE-2026-119641 Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership 03.11.2026
CVE-2026-119724 Apache JClouds: XML External Entity (XXE) in provider-response parsing 03.11.2026
CVE-2026-77778 Improper access control vulnerability 03.11.2026 7.1
CVE-2026-89293 Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering 03.11.2026
CVE-2026-77777 Improper access control vulnerability 03.11.2026 7.1
CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures 03.11.2026
CVE-2026-105979 Command Injection in ZeroTier VPN 03.11.2026
CVE-2026-105980 Command Injection in WireGuard VPN 03.11.2026
CVE-2026-105981 Command Injection in Digital I/O 03.11.2026
CVE-2026-105982 Command Injection in IPsec VPN 03.11.2026
CVE-2026-109161 Buffer Overflow in Digital I/O 03.11.2026
CVE-2026-118444 Out-of-bounds reads during instruction decoding in pybddisasm 03.11.2026
CVE-2026-118445 Use-after-free in INSTRUX structure members in pybddisasm 03.11.2026
CVE-2026-118446 Use-after-free in INSTRUX array members in pybddisasm 03.11.2026
CVE-2026-118447 Uninitialized INSTRUX contents returned after decoding failure in pybddisasm 03.11.2026
CVE-2026-118448 Uninitialized output buffer returned after nd_to_text failure in pybddisasm 03.11.2026
CVE-2026-105978 Command Injection in Management Control Functions 03.11.2026
CVE-2026-121023 LDAP Bind Password Exposure in AxxonNet ARP Agent Logs 03.11.2026 5.5
CVE-2026-121024 Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet 03.11.2026 5.4
CVE-2026-121020 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API 03.11.2026 4.3
CVE-2026-121021 Plaintext Storage of LDAP Password in Axxon One Shared Configuration 03.11.2026 5.5
CVE-2026-121022 Default Administrator Password Change Not Enforced in Axxon One Web Client 03.11.2026 8.1
CVE-2026-92610 Improper limitation of paths in py-aspect-model-loader 03.11.2026
CVE-2026-103327 CryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook Secret 03.11.2026 5.3
CVE-2026-113421 ThreadX Modules invokes trace-full callbacks after module unload 03.11.2026
CVE-2026-115231 User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege 03.11.2026
CVE-2026-91075 Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass 03.11.2026 5.3
CVE-2026-4052 Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) 03.11.2026 9.8
CVE-2026-74846 Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier 03.11.2026
CVE-2026-16900 Authentication Bypass 03.11.2026 7.5
CVE-2026-103653 Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP 03.11.2026
CVE-2026-13594 Improper Access Control vulnerability 03.11.2026 9.1
CVE-2026-120988 03.11.2026
CVE-2026-120987 03.11.2026
CVE-2025-1397 Improper IDP Status Validation via JWT Bearer or SAML2 Bearer Grants in Multiple WSO2 Products Allows Access Token Issuance for Disabled Identity Providers 03.11.2026 4.8
CVE-2025-5769 Reflected Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Allows Browser Redirection and UI Modification 03.11.2026 6.1
CVE-2026-103379 WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token 03.11.2026
CVE-2026-104647 weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can() 03.11.2026
CVE-2026-104648 weMail <= 2.1.6 - Editor+ API Key Disclosure 03.11.2026
CVE-2026-105967 Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter 03.11.2026
CVE-2026-105993 DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update 03.11.2026
CVE-2026-106004 DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation 03.11.2026
CVE-2026-115205 AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item 03.11.2026
CVE-2026-77800 Authentication bypass vulnerability 03.11.2026 7.7
CVE-2026-77799 Two-factor authentication bypass 03.11.2026 7.4
CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler 03.11.2026 9.1
CVE-2026-120524 News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action 03.11.2026 6.4
CVE-2026-120534 Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type 03.11.2026 9.8
CVE-2026-120538 Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capture 03.11.2026 8.1
CVE-2026-120544 Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route 03.11.2026 4.3
CVE-2026-120551 WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters 03.11.2026 5.3
CVE-2026-120552 SEO Engine <= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Entity-Encoded Post Title via Strip-then-Decode in build_title() 03.11.2026 6.4
CVE-2026-120558 Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter 03.11.2026 7.2
CVE-2026-120559 Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal 03.11.2026 7.5
CVE-2026-120561 JetFormBuilder <= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification 03.11.2026 5.3
CVE-2026-120563 WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field 03.11.2026 4.9
CVE-2026-120574 SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account Takeover 03.11.2026 8.1
CVE-2026-120575 Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection Name 03.11.2026 6.4
CVE-2026-120577 FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter 03.11.2026 8.1
CVE-2026-120578 AI Alt Text Generator <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter 03.11.2026 5.3
CVE-2026-120971 Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses 03.11.2026
CVE-2026-111464 WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response 03.11.2026 5.9
CVE-2026-120831 Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service 03.11.2026
CVE-2026-76955 03.11.2026 8.8
CVE-2026-107441 03.11.2026 8.8
CVE-2026-105770 Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages 03.11.2026 5.3
CVE-2026-120833 labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch 03.11.2026
CVE-2026-120830 Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure 03.11.2026
CVE-2026-71450 02.11.2026
CVE-2026-120597 Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting 02.11.2026
CVE-2026-111565 02.11.2026
CVE-2026-120752 PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout 02.11.2026
CVE-2026-120740 Hivex: hivex: denial of service via out-of-bounds read in big-data block processing 02.11.2026
CVE-2026-115215 NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool 02.11.2026
CVE-2026-115403 NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full 02.11.2026
CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server 02.11.2026 6.1
CVE-2026-86596 s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter 02.11.2026 9.8