CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-129258 Tenda AC18 Firmware Upgrade upgrade data authenticity 14.11.2026 9.4
CVE-2026-120522 Cloud Storage Manager for Fluent Forms <= 1.2.0 - Unauthenticated Arbitrary File Write via Google Drive Filename Path Traversal 14.11.2026 9.8
CVE-2026-129255 CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission 14.11.2026 9.3
CVE-2026-129433 Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName 14.11.2026 9.4
CVE-2026-19907 Shipo 1.6 - 1.8.0 - Authentication Bypass to Administrator 14.11.2026 9.8
CVE-2026-129250 Edimax BR6478ACV2 webs formPPTPSetup buffer overflow 14.11.2026 9.4
CVE-2026-126173 AutomatorWP Pro Webhooks addon <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field 14.11.2026 9.8
CVE-2026-124020 Control Web Panel < 1.30.6 Host Header Password Reset Poisoning 13.11.2026 9.2
CVE-2026-124021 Control Web Panel < 1.30.6 Authorization Bypass via oauth_authorization_codes 13.11.2026 9.2
CVE-2026-82504 VITEC EZ TV Platform Server Unauthenticated File Upload via UploadHandler.ashx 13.11.2026 9.3
CVE-2026-129161 Dromara free-fs 2.0.1 through 2.3.1 Password Reset Code Brute-Force Account Takeover 13.11.2026 9.1
CVE-2026-129165 Tactical RMM 0.17.0 through 1.6.1 Arbitrary File Read via Report Preview 13.11.2026 9.4
CVE-2026-129167 SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 Path Traversal RCE via confluence-to-wiki 13.11.2026 9.2
CVE-2026-129171 NginxPulse 1.5.0 before 1.6.26 SQL Injection via /api/stats/:type 13.11.2026 9.3
CVE-2026-123965 Jet Admin cloud platform prompt injection 13.11.2026 9.3
CVE-2026-129124 C-Kermit before 11.1.515 OS Command Injection via REMOTE WHO and REMOTE SPACE 13.11.2026 9.2
CVE-2026-129125 C-Kermit 6.0.192 before 11.1.515 Command Execution via REMOTE QUERY 13.11.2026 9.2
CVE-2026-129126 C-Kermit before 11.1.515 Heap Buffer Overflow via putsrv() Packet Decoding 13.11.2026 9.2
CVE-2026-129110 sysPass 3.0.1 through 3.2.11 Unauthenticated Reinstallation RCE via install/install 13.11.2026 9.3
CVE-2026-95377 OS command injection via DHCP option 66 in Zenitel EdgeAudioClient TFTP provisioning 13.11.2026 9.4
CVE-2026-95614 Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container 13.11.2026 9.3
CVE-2026-103813 14.11.2026 9.1
CVE-2026-63079 RBH Integra32 5.1.11 .NET Remoting Deserialization RCE 13.11.2026 9.3
CVE-2026-124415 WordPress Alex Reservations plugin <= 2.4.8 - SQL Injection vulnerability 13.11.2026 9.3
CVE-2026-124970 WordPress WP BASE Booking plugin <= 6.5.2 - SQL Injection vulnerability 13.11.2026 9.3
CVE-2026-125851 WordPress Hotel Booking Lite theme <= 2.5.1 - Arbitrary File Upload vulnerability 13.11.2026 9.9
CVE-2026-125855 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.9 - PHP Object Injection vulnerability 13.11.2026 9.8
CVE-2026-109445 PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie 13.11.2026 9.3
CVE-2026-119077 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.9 - Unauthenticated PHP Object Injection to Remote Code Execution via 'form' Parameter 13.11.2026 9.8
CVE-2026-125055 Chatterbug Forms <= 1.0.2 - Unauthenticated Arbitrary File Upload via File Upload via Public Form Submission 13.11.2026 9.8
CVE-2026-126265 SiYuan 2.1.0 before 3.8.9 CAPTCHA Bypass via Stale Login Cookie 13.11.2026 9.1
CVE-2026-126269 NocoDB before 2026.09.0 Stored XSS via Attachment MIME Type 13.11.2026 9.3
CVE-2026-126273 NocoDB before 2026.09.0 Privilege Escalation via Incomplete Admin Bootstrap 13.11.2026 9.2
CVE-2026-126274 NocoDB before 2026.08.0 Stored XSS via Table Deletion Dialog 13.11.2026 9.3
CVE-2026-126280 NocoDB before 2026.08.0 Refresh Token Reuse via Non-Atomic Rotation 13.11.2026 9.1
CVE-2026-126315 Frappe HRMS 16.14.0 before 16.20.1 Telemetry Setting Bypass Information Exposure 13.11.2026 9.3
CVE-2026-126377 Vvveb before 1.0.9.0 Cookie Forgery via PHP Type Juggling in generateCookie() 13.11.2026 9.2
CVE-2026-126378 Vvveb through 1.0.8.6 Webshell Upload via Theme Installer validFile() Bypass 13.11.2026 9.4
CVE-2026-126380 Vvveb before 1.0.9.0 RCE via .phar Extension Denylist Bypass in Media Upload 13.11.2026 9.4
CVE-2026-126473 OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalization 13.11.2026 9.3
CVE-2026-126937 Zipline before 4.6.5 TOCTOU Race Condition via /api/setup 13.11.2026 9.2
CVE-2026-126945 Zipline before 4.5.1 Stored XSS via HighlightCode Component 13.11.2026 9.3
CVE-2026-75491 Cudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none Tokens 13.11.2026 9.2
CVE-2026-75495 Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Password Parameter 13.11.2026 9.2
CVE-2026-126952 Zipline through 4.4.0 WebAuthn Authentication Bypass via Passkey Login 13.11.2026 9.2
CVE-2026-126953 Cudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Username 13.11.2026 9.2
CVE-2026-127073 OpsTree BuildPiper before 2.7.0 Privilege Escalation via Additional Manifest 13.11.2026 9.4
CVE-2026-127079 OpsTree BuildPiper before 2.7.0 OTP Brute Force via password_reset/check_otp 13.11.2026 9.1
CVE-2026-127080 OpsTree BuildPiper before 2.7.0 Container Escape via Unrestricted HostPath Volumes 13.11.2026 9.4
CVE-2026-128014 FrankenPHP 1.8.0 before 1.13.2 Out-of-Bounds Write via Bundled Brotli Decoder 13.11.2026 9.2
CVE-2026-128023 FrankenPHP before 1.13.0 Authentication Bypass via Dot-Form Header Name Aliasing 13.11.2026 9.1
CVE-2026-128027 FrankenPHP before 1.1.11 Delayed Propagation of Base Image Security Fixes 13.11.2026 9.3
CVE-2026-128046 OpenMage magento-lts 20.17.0 before 20.18.2 Unrestricted File Upload RCE via Custom Options 13.11.2026 9.2
CVE-2026-128047 OpenMage magento-lts before 20.18.2 Account Takeover via Predictable Confirmation Key 13.11.2026 9.2
CVE-2026-128049 OpenMage Magento LTS before 20.18.2 CSRF via OAuth Authorization Confirm 13.11.2026 9.4
CVE-2026-128332 listmonk 6.0.0 before 7.0.0-beta.2 TOTP Brute-Force via /admin/login/twofa 13.11.2026 9.1
CVE-2026-128333 listmonk 6.0.0 before 7.0.0-beta.2 2FA Bypass via Password Reset Flow 13.11.2026 9.1
CVE-2026-120864 Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway 13.11.2026 9.3
CVE-2026-111334 Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway 13.11.2026 9.3
CVE-2026-107415 Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway 13.11.2026 9.3
CVE-2026-107412 Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway 13.11.2026 9.5
CVE-2026-107407 Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler 13.11.2026 9.3
CVE-2026-107408 Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler 13.11.2026 9.3
CVE-2026-107409 Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler 13.11.2026 9.3
CVE-2026-107410 Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler 13.11.2026 9.3
CVE-2026-127277 Linksys EA8100 SMB Service service_smbd.sh initialization 13.11.2026 10
CVE-2026-127275 Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication 13.11.2026 10
CVE-2026-120868 Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway 12.11.2026 9.3
CVE-2026-107360 Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions 13.11.2026 9.6
CVE-2026-124012 Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication Bypass 13.11.2026 9.2
CVE-2026-124010 Dixell/Copeland XWEB EVO Unauthenticated Command Injection via xwconsole.cgi 13.11.2026 9.3
CVE-2026-124007 Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password Field 13.11.2026 9.2
CVE-2026-124005 Dixell/Copeland XWEB EVO Predictable Administrator Password Generation 13.11.2026 9.2
CVE-2026-124006 Dixell/Copeland XWEB EVO Predictable Root Password Generation 13.11.2026 9.2
CVE-2026-124004 Dixell/Copeland XWEB EVO Hardcoded Administrator Backdoor Password 13.11.2026 9.3
CVE-2026-68548 Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gate 13.11.2026 9.4
CVE-2026-124002 Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Username 13.11.2026 9.3
CVE-2026-117551 Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 13.11.2026 10
CVE-2026-127063 13.11.2026 9.3
CVE-2026-126837 Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guard 13.11.2026 9.1
CVE-2026-127131 SOGo before 5.12.13 Missing Rate Limiting on TOTP Verification 12.11.2026 9.1
CVE-2026-127111 SOGo before 5.12.13 Unauthenticated Password Recovery Brute Force 13.11.2026 9.1
CVE-2026-120869 An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance 12.11.2026 9.3
CVE-2026-19422 Authentication Bypass 12.11.2026 9.1
CVE-2026-127046 MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response 12.11.2026 9.2
CVE-2026-127016 MISP Modules Website: Missing Authorization on External Tool Management Endpoints 12.11.2026 9.2
CVE-2026-90908 Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticator 12.11.2026 9.3
CVE-2026-110003 Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code Execution 12.11.2026 9.3
CVE-2026-12591 Privilege Escalation 14.11.2026 9.9
CVE-2026-12507 Authenticated remote code execution 14.11.2026 9.1
CVE-2026-8333 TimePictra Stored Cross-site Scripting 12.11.2026 9.4
CVE-2026-76954 12.11.2026 9.8
CVE-2026-126785 rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission 13.11.2026 9.3
CVE-2026-67449 Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key 12.11.2026 9.8
CVE-2026-126229 14.11.2026 9.1
CVE-2026-126251 12.11.2026 9.1
CVE-2026-126253 12.11.2026 9.3
CVE-2026-126254 12.11.2026 9.6
CVE-2026-126257 11.11.2026 9
CVE-2026-126259 13.11.2026 9
CVE-2026-126262 13.11.2026 9.3
CVE-2026-126263 13.11.2026 9.4
CVE-2026-126147 14.11.2026 9.8
CVE-2026-126148 14.11.2026 9.8
CVE-2026-126150 11.11.2026 9.1
CVE-2026-126155 11.11.2026 9.1
CVE-2026-126156 11.11.2026 9.1
CVE-2026-126157 11.11.2026 9.1
CVE-2026-126164 14.11.2026 9.4
CVE-2026-126170 14.11.2026 9.8
CVE-2026-126797 NextScan 1.1.0 through 1.2.0 Hardcoded JWT Key Authentication Bypass in ns-admin 11.11.2026 9.3
CVE-2026-126800 Hydro @hydrooj/ui-default before 4.59.1 Stored XSS via Markdown language- Class 12.11.2026 9.3
CVE-2026-126806 WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source Tag 13.11.2026 9.3
CVE-2026-126812 blueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker Compose 13.11.2026 9.3
CVE-2026-126777 Traccar 3.15 before 6.17.0 Authentication Bypass via Empty LDAP Password 13.11.2026 9.1
CVE-2026-65840 Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKey 12.11.2026 9.6
CVE-2026-126768 OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag 12.11.2026 9.3
CVE-2026-110697 Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens 13.11.2026 9.9
CVE-2026-126325 Critical Remote Code Execution (RCE) vulnerability reported in Windchill 11.11.2026 9.2
CVE-2026-123710 Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation 13.11.2026 9.8
CVE-2026-85632 Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCommerce) 11.11.2026 9.1
CVE-2026-126537 Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress' 12.11.2026 9.1
CVE-2026-78287 WordPress STAGGS plugin <= 3.3.0 - Remote Code Execution (RCE) vulnerability 12.11.2026 10
CVE-2026-118965 Path traversal in host label synchronization allows code execution on the central site from a remote site 14.11.2026 9.4
CVE-2026-120495 Arbitrary file write and code execution via crafted Synthetic Monitoring agent data 14.11.2026 9.4
CVE-2026-121374 Arbitrary file write and code execution via excluded node roles in Kubernetes special agent 14.11.2026 9.4
CVE-2026-112174 Privilege escalation in Enter’s Iperius Backup 11.11.2026 9.3
CVE-2026-64678 Nitrite: Unfiltered Java Deserialization in Legacy v1 Database Migration Path 12.11.2026 9.8
CVE-2026-64682 AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name 12.11.2026 9.8
CVE-2026-64670 Stored XSS in @waline/client via the unsanitized markdown preview of a comment's raw body on edit 12.11.2026 9.3
CVE-2026-126539 Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface 12.11.2026 9.2
CVE-2026-126542 WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login 14.11.2026 9.3
CVE-2026-126187 React: Unauthenticated Remote Code Execution in React Server Components 13.11.2026 9.5
CVE-2026-126261 14.11.2026 9
CVE-2026-82391 Out-of-bounds write in Zephyr HTTP/2 server static-filesystem handler via corrupted receive-buffer length 13.11.2026 9.1
CVE-2026-113579 Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) 11.11.2026 9.9
CVE-2026-113580 Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) 11.11.2026 9.9
CVE-2026-114371 Adobe Experience Manager | Incorrect Authorization (CWE-863) 11.11.2026 9.9
CVE-2026-119017 Adobe Experience Manager | Incorrect Authorization (CWE-863) 11.11.2026 9.9
CVE-2026-125297 AsiaInfo Business Support System (BSS) Missing Authentication 10.11.2026 9.3
CVE-2026-125298 AsiaInfo Business Support System (BSS) Missing JWT Signature Verification 10.11.2026 9.3
CVE-2026-121349 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 11.11.2026 9.6
CVE-2026-121351 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 11.11.2026 10
CVE-2026-121352 Adobe Connect | Incorrect Authorization (CWE-863) 11.11.2026 10
CVE-2026-121353 Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93) 11.11.2026 10
CVE-2026-121354 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 11.11.2026 9.9
CVE-2026-121355 Adobe Connect | Incorrect Authorization (CWE-863) 12.11.2026 9.1
CVE-2026-121356 Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) 11.11.2026 10
CVE-2026-121887 Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 11.11.2026 9.9
CVE-2026-121889 Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) 11.11.2026 10
CVE-2026-121892 Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) 11.11.2026 9.9
CVE-2026-121894 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 11.11.2026 9.9
CVE-2026-121896 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 11.11.2026 9.9
CVE-2026-121898 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 11.11.2026 9.9
CVE-2026-121902 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 11.11.2026 9.4
CVE-2026-121904 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) 12.11.2026 9.6
CVE-2026-121906 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 11.11.2026 9.9
CVE-2026-121908 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 11.11.2026 9.9
CVE-2026-125881 Schema-hint SSRF via service import schema validation 13.11.2026 9.3
CVE-2026-89324 Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback Salt 13.11.2026 9.8
CVE-2026-125883 Multiple XXE Vulnerabilities 12.11.2026 9.3
CVE-2026-118383 Pre-authentication use-after-free in MongoDB Server replica set primary catch-up 13.11.2026 9.5
CVE-2026-126065 OpenObserve: Empty external password allows authentication bypass 14.11.2026 9.8
CVE-2026-102166 Security Advisory 0227 10.11.2026 9.4
CVE-2026-120808 Certificate Validation Bypass via IPv6 trust-result skip in macOS TLS client 13.11.2026 9.1
CVE-2026-121289 Security Advisory 0208 13.11.2026 9.3
CVE-2026-121295 Security Advisory 0223 13.11.2026 9.2
CVE-2026-121370 Security Advisory 0224 10.11.2026 9.2
CVE-2026-121529 13.11.2026 9.1
CVE-2026-126087 Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent 10.11.2026 9.4
CVE-2026-125331 HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with a made-up bearer 12.11.2026 9.1
CVE-2026-116945 Microsoft SQL Server Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-118740 Aspire Security Feature Bypass Vulnerability 13.11.2026 9.1
CVE-2026-119958 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-120002 Microsoft SharePoint Server Elevation of Privilege Vulnerability 13.11.2026 9.9
CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-114146 ASP.NET Core Elevation of Privilege Vulnerability 13.11.2026 9
CVE-2026-114160 Azure Managed Grafana Elevation of Privilege Vulnerability 13.11.2026 9.8
CVE-2026-114162 Microsoft Graph Elevation of Privilege Vulnerability 13.11.2026 9.1
CVE-2026-116928 Windows Search Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability 13.11.2026 9.8
CVE-2026-120779 Visual Studio Code Remote Code Execution Vulnerability 13.11.2026 9.6
CVE-2026-80095 Microsoft Office SharePoint Elevation of Privilege Vulnerability 13.11.2026 9
CVE-2026-85844 Windows Kerberos Elevation of Privilege Vulnerability 13.11.2026 9.8
CVE-2026-88218 Windows DNS Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-88234 Windows iSCSI Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-88243 Windows DHCP Server Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-95882 Microsoft DirectMusic Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-95901 Microsoft DirectMusic Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-95962 Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability 13.11.2026 9
CVE-2026-96067 Microsoft Color Management Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-96078 Microsoft Color Management Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-96157 Microsoft Windows Media Foundation Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-109454 Microsoft Office SharePoint Spoofing Vulnerability 13.11.2026 9
CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability 13.11.2026 9.9
CVE-2026-66801 Microsoft Xbox Remote Code Execution Vulnerability 13.11.2026 9.8
CVE-2026-44685 13.11.2026 9.3
CVE-2026-61473 13.11.2026 9.2
CVE-2026-61887 13.11.2026 9.4
CVE-2026-63011 GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels 10.11.2026 9.4
CVE-2026-61547 rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY 14.11.2026 9.8
CVE-2026-108186 11.11.2026 9.6
CVE-2026-121683 10.11.2026 9.4
CVE-2026-121653 11.11.2026 9.8
CVE-2026-125757 mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer 10.11.2026 9.4
CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET 14.11.2026 9.1
CVE-2026-82509 V Programming Language net.http TLS Certificate Validation Bypass 14.11.2026 9.1
CVE-2026-112136 10.11.2026 9.2
CVE-2026-119446 Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token 12.11.2026 9.4
CVE-2026-13312 12.11.2026 9.9
CVE-2026-115646 Partial String Comparison Vulnerability in HiRDB 10.11.2026 9.8
CVE-2026-109795 Missing authorization check in S4CRM 11.11.2026 9.9
CVE-2026-109798 XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 10.11.2026 9.1
CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) 11.11.2026 9.9
CVE-2026-120017 Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) 11.11.2026 10
CVE-2026-125086 D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials 13.11.2026 10
CVE-2026-89126 Memory Corruption vulnerability in SAP Web Dispatcher 11.11.2026 10
CVE-2026-107246 12.11.2026 9.2
CVE-2026-124600 Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1 12.11.2026 10
CVE-2026-76964 Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) 11.11.2026 10
CVE-2026-76965 OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform 11.11.2026 9.9
CVE-2026-89103 Broken Access Control in SAP Gateway 11.11.2026 10
CVE-2026-89119 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager 11.11.2026 9.6
CVE-2026-125370 Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secret 13.11.2026 9.3
CVE-2026-125383 INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass 12.11.2026 9.3
CVE-2026-125384 INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder 10.11.2026 9.3
CVE-2026-115934 SQL injection leading to privilege escalation 12.11.2026 9.3
CVE-2026-125120 Mongoose: sanitizeFilter not applied on countDocuments 13.11.2026 9.8
CVE-2026-123815 pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) 13.11.2026 9.4
CVE-2026-123807 Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution 10.11.2026 9.8
CVE-2026-124001 ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR 14.11.2026 9.2
CVE-2026-123800 SuperTokens Core: App-scoped API key can overwrite the parent connection URI domain's credentials and take over sibling applications 14.11.2026 9.9
CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP 09.11.2026 9.3
CVE-2026-104989 Pre-authentication remote code execution in Chaos V-Ray Swarm 09.11.2026 9.3
CVE-2026-110468 Remote Code Execution via Unrestricted File Upload in WidzialniCMS 09.11.2026 10
CVE-2026-110469 Remote Code Execution via Unrestricted File Upload in WidzialniCMS 09.11.2026 10
CVE-2026-124079 rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning 14.11.2026 9.3
CVE-2026-118462 AIS update mechanism executes unverified code 12.11.2026 9.2
CVE-2026-115252 Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option 09.11.2026 10
CVE-2026-123870 [Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when GITHUB_WEBHOOK_SECRET is unset 12.11.2026 9.5
CVE-2026-124585 Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injection 12.11.2026 9.4
CVE-2026-124580 Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injection 12.11.2026 10
CVE-2026-124577 Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication 12.11.2026 9.3
CVE-2026-113363 10.11.2026 9.3
CVE-2026-113364 10.11.2026 9.3
CVE-2026-124560 D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow 12.11.2026 9.3
CVE-2026-119506 WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability 09.11.2026 9.1
CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software 10.11.2026 9.8
CVE-2026-17466 IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities 09.11.2026 9.1
CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software 10.11.2026 9.8
CVE-2026-114464 Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 09.11.2026 9.3
CVE-2026-107331 DataStage on Cloud Pak for Data has several vulnerabilities 12.11.2026 9.9
CVE-2026-101117 IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks. 09.11.2026 9.1
CVE-2026-109900 WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability 08.11.2026 9.6
CVE-2026-124427 Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next 12.11.2026 9.3
CVE-2026-124438 Scriban before 7.5.2 Delegate Target Exposure via array.map Member Access 12.11.2026 9.1
CVE-2026-124440 Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass 09.11.2026 9.4
CVE-2026-124445 OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force 13.11.2026 9.3
CVE-2026-124450 OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument 12.11.2026 9.3
CVE-2026-124463 OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View 12.11.2026 9.3
CVE-2026-124469 OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter 10.11.2026 9.4
CVE-2026-124490 OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument 10.11.2026 9.4
CVE-2026-124493 SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent 12.11.2026 9.3
CVE-2026-124494 SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass 10.11.2026 9.3
CVE-2026-123549 OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass 12.11.2026 9.3
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions 09.11.2026 9.3
CVE-2026-123551 OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket 13.11.2026 10
CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow 09.11.2026 9.3

Latest Updates

CVE Title Updated Score
CVE-2026-129260 Mereithhh VanBlog Custom local.provider.ts fs.readFileSync path traversal 14.11.2026
CVE-2026-110531 FV Player 8 <= 8.1.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Popup' Shortcode Attribute via Profile Video 14.11.2026 6.4
CVE-2026-116753 Multi Step for Contact Form 7 <= 2.9.1 - Unauthenticated Stored Cross-Site Scripting via Multipart Field Name 14.11.2026 7.2
CVE-2026-120687 Lightbox & Modal Popup WordPress Plugin <= 2.8.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Image Alt Attribute in .wp-caption Containers 14.11.2026 7.2
CVE-2026-127115 BuddyForms <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'title' Attribute of [bf_login_form] Shortcode 14.11.2026 5.4
CVE-2026-129259 Mereithhh VanBlog Image Upload Endpoint access.ts cross site scripting 14.11.2026
CVE-2026-129258 Tenda AC18 Firmware Upgrade upgrade data authenticity 14.11.2026
CVE-2011-10042 HTTP::Session versions before 0.43 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::Memcached 14.11.2026
CVE-2025-71464 @kolkov/angular-editor before 3.0.4 XSS via toggleEditorMode() 14.11.2026
CVE-2025-71465 @kolkov/angular-editor before 3.0.3 XSS via refreshView() 14.11.2026
CVE-2026-120522 Cloud Storage Manager for Fluent Forms <= 1.2.0 - Unauthenticated Arbitrary File Write via Google Drive Filename Path Traversal 14.11.2026 9.8
CVE-2026-129255 CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission 14.11.2026
CVE-2026-129428 Pulse 5.0.17 before 6.8.0 Missing Authorization via AI Assistant Approval API 14.11.2026
CVE-2026-129429 Frappe india-payroll before 16.0.4 Missing Authorization via Tax Regime Selector 14.11.2026
CVE-2026-129430 axeloz filesharing before 2.14.3 Stored XSS via Bundle Description Markdown Links 14.11.2026
CVE-2026-129431 Ettercap through 0.8.5.1 Heap Out-of-Bounds Read via SOCKS5 Dissector 14.11.2026
CVE-2026-129432 Ettercap through 0.8.5.1 Heap Out-of-Bounds Read in NFS mountd Dissector 14.11.2026
CVE-2026-129433 Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName 14.11.2026
CVE-2026-18053 MemberDash <= 1.8.7 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Edit Profile 'id' Parameter 14.11.2026 8.8
CVE-2026-19907 Shipo 1.6 - 1.8.0 - Authentication Bypass to Administrator 14.11.2026 9.8
CVE-2026-129254 Opixido OCMS Admin TUI index.php cross site scripting 14.11.2026
CVE-2026-124540 JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag 14.11.2026
CVE-2026-124541 JSON::XS versions before 4.05 for Perl leak the decoded part of a rejected long string in decode_str 14.11.2026
CVE-2026-129113 JSON::XS versions from 4.0_00 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incr_skip after a top-level number 14.11.2026
CVE-2026-129114 JSON::XS versions from 3.04 before 4.05 for Perl write one byte past a heap buffer when appending a one-byte chunk in incr_parse 14.11.2026
CVE-2026-129115 JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allow_tags in encode_rv 14.11.2026
CVE-2026-124536 JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse 14.11.2026
CVE-2026-124539 JSON::XS versions before 4.05 for Perl leak the decoded key of an object rejected for a missing colon in decode_hv 14.11.2026
CVE-2026-129251 hrshadhin CloudSchool Event Description EventController.php cross site scripting 14.11.2026
CVE-2026-129250 Edimax BR6478ACV2 webs formPPTPSetup buffer overflow 14.11.2026
CVE-2026-129427 Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO 14.11.2026 8.7
CVE-2026-129248 Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check 14.11.2026
CVE-2026-129247 yangzongzhuan RuoYi Code Generator VelocityUtils.java VelocityUtils.getFileName path traversal 14.11.2026
CVE-2026-18742 Flatsome <= 3.20.12 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block 14.11.2026 6.4
CVE-2026-129181 projectworlds Visitor Management System Login Endpoint user%20page.php mysqli_query sql injection 14.11.2026
CVE-2026-129319 create-ecdh: computeSecret does not validate that the peer public key is on the curve (invalid-curve attack) 14.11.2026
CVE-2026-105983 Email Marketing 4Dem <= 2.0.5 - Unauthenticated Settings Modification and Configuration Disclosure 14.11.2026
CVE-2026-105984 Email Marketing 4Dem <= 2.0.5 - Unauthenticated Configuration Destruction and Arbitrary Plugin Record Deletion 14.11.2026
CVE-2026-111033 Countdown, Coming Soon, Maintenance – Countdown & Clock <= 3.0.8 - Author+ Stored XSS via savePost 14.11.2026
CVE-2026-111034 Countdown, Coming Soon, Maintenance – Countdown & Clock <= 3.0.8 - Subscriber+ Non-Public Post Title Disclosure via select2Ajax 14.11.2026
CVE-2026-116528 Chargely Free Subscriptions <= 1.0 - Unauthenticated WooCommerce REST API Credential Disclosure 14.11.2026
CVE-2026-117487 Flatsome < 3.20.13 - Unauthenticated Unpublished Post Disclosure via flatsome_ajax_apply_shortcode 14.11.2026
CVE-2026-117490 Flatsome < 3.20.13 - Contributor+ Post Type and Status Overwrite via ux_builder_save 14.11.2026
CVE-2026-118181 Copy & Delete Posts < 1.5.8 - Authenticated Plugin Settings and Access Control Modification 14.11.2026
CVE-2026-118182 Copy & Delete Posts < 1.5.8 - Authenticated Arbitrary Post Slug Takeover 14.11.2026
CVE-2026-118183 Copy & Delete Posts < 1.5.8 - Authenticated Post Publishing Restriction Bypass 14.11.2026
CVE-2026-119258 Swipe <= 1.4 - Unauthenticated Authentication Bypass 14.11.2026
CVE-2026-123046 SEOJuice < 2.12.0 - Administrator Account Creation via CSRF 14.11.2026
CVE-2026-123122 Checkout Files Upload for WooCommerce 2.4.0 - Unauthenticated Stored XSS via Uploaded File 14.11.2026
CVE-2026-124649 Lightbox with PhotoSwipe < 5.19.0 - Unauthenticated Stored XSS via Comment Link Title 14.11.2026
CVE-2026-126639 WP Ultimate CSV Importer (Free & Pro) - Unauthenticated Post Data Disclosure via Predictable Single Export Path 14.11.2026
CVE-2026-126640 WP Ultimate CSV Importer < 9.3 - Admin+ SQLi via LifterLMS Import 14.11.2026
CVE-2026-126697 Quick Page/Post Redirect 5.2.1 - 5.2.3 - Backdoor via Off-Repository Update Channel 14.11.2026
CVE-2026-124969 Optimole <= 4.2.19 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via 'comment_content'/'comment_agent' Parameter during Attachment Rename 14.11.2026 7.1
CVE-2026-126173 AutomatorWP Pro Webhooks addon <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field 14.11.2026 9.8