CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-100109 Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user 05.11.2026 9.8
CVE-2026-123025 05.11.2026 9.4
CVE-2026-122992 05.11.2026 9.2
CVE-2026-122302 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check 05.11.2026 9.3
CVE-2026-122303 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy 05.11.2026 9.4
CVE-2026-122304 Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader 05.11.2026 9.4
CVE-2026-122310 Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath 05.11.2026 9.4
CVE-2026-122311 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument 05.11.2026 9.4
CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy 05.11.2026 9.4
CVE-2026-122051 Edimax BR-6208AC mp command injection 04.11.2026 10
CVE-2026-115770 Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing 04.11.2026 9.6
CVE-2026-52848 GLPI: MFA bypass 04.11.2026 9.2
CVE-2026-54384 VitaFit Cloud API Authentication Bypass via POST /front/login/sns/ 04.11.2026 9.3
CVE-2026-54378 VitaFit Cloud API Broken Access Control via S3 Token Endpoint 04.11.2026 9.3
CVE-2026-57566 Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy 04.11.2026 9.3
CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover 04.11.2026 9.1
CVE-2026-102895 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin 04.11.2026 9.8
CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise 04.11.2026 9.9
CVE-2026-82418 IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL 04.11.2026 9.8
CVE-2026-122013 Comfast CF-WR632AX Multipart webmgnt path traversal 04.11.2026 10
CVE-2025-71457 vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php 04.11.2026 9.3
CVE-2026-113373 Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again 04.11.2026 9.1
CVE-2026-122220 WPO365 LOGIN before 45.2 SAML Replay Protection Bypass 04.11.2026 9.1
CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication 04.11.2026 10
CVE-2026-107846 bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list 04.11.2026 9.3
CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 04.11.2026 9.3
CVE-2026-121932 Linksys E5350 apply.cgi system os command injection 04.11.2026 10
CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection 04.11.2026 9.4
CVE-2026-121930 Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection 04.11.2026 9.4
CVE-2026-122120 04.11.2026 9
CVE-2026-121952 FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability 04.11.2026 9.3
CVE-2026-121953 FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close 04.11.2026 9.3
CVE-2026-121638 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks 04.11.2026 9.1
CVE-2026-121639 WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service 04.11.2026 9.2
CVE-2026-121640 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions 04.11.2026 9.1
CVE-2026-122006 04.11.2026 9.8
CVE-2026-121939 Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking 04.11.2026 9.2
CVE-2026-119481 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 04.11.2026 9.8
CVE-2026-65555 WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability 04.11.2026 9.8
CVE-2026-114424 Code execution through double evaluation in address replacement rules 04.11.2026 9.2
CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion 04.11.2026 9.2
CVE-2026-121802 04.11.2026 9.1
CVE-2026-121615 Linksys E5600 Login mesh_login.cgi improper authentication 04.11.2026 10
CVE-2026-121609 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials 04.11.2026 10
CVE-2026-121607 Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection 04.11.2026 10
CVE-2026-121606 Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification 04.11.2026 10
CVE-2026-121600 TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow 04.11.2026 9.4
CVE-2026-121598 TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow 04.11.2026 9.4
CVE-2026-121599 TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow 04.11.2026 9.4
CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow 04.11.2026 9.4
CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability 03.11.2026 9.8
CVE-2026-114549 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability 03.11.2026 9.8
CVE-2026-92188 Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability 03.11.2026 9.8
CVE-2026-92190 Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability 03.11.2026 9.8
CVE-2022-29966 Emerson Ovation Missing Authentication for Critical Functionality 03.11.2026 9.3
CVE-2026-22058 CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) 04.11.2026 9.1
CVE-2026-112354 Etrel INCH AC Charging Station Hard-coded Default Credentials 03.11.2026 9.3
CVE-2026-119084 Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters 03.11.2026 9.2
CVE-2026-82158 03.11.2026 9
CVE-2026-115731 Report Deserialization Code Execution 03.11.2026 9.4
CVE-2026-115732 Certificate Name Authorization Bypass 03.11.2026 9
CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions 03.11.2026 9.1
CVE-2026-95731 Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access 03.11.2026 9.8
CVE-2026-95732 Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution 03.11.2026 9.6
CVE-2026-95733 Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution 03.11.2026 9.6
CVE-2026-63469 fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict 03.11.2026 9.3
CVE-2026-63470 fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring 03.11.2026 9.3
CVE-2026-63471 fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator 03.11.2026 9.3
CVE-2026-112917 Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall 04.11.2026 9.2
CVE-2026-44266 Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels 03.11.2026 9.8
CVE-2026-44267 Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter 03.11.2026 9.8
CVE-2026-28336 SolarWinds Dameware Command Injection Vulnerability 04.11.2026 9.9
CVE-2026-121260 Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection 03.11.2026 9.4
CVE-2026-121392 FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate 03.11.2026 9.1
CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures 03.11.2026 9.2
CVE-2026-121022 Default Administrator Password Change Not Enforced in Axxon One Web Client 03.11.2026 9.2
CVE-2026-4052 Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) 03.11.2026 9.8
CVE-2026-13594 Improper Access Control vulnerability 04.11.2026 9.1
CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler 03.11.2026 9.1
CVE-2026-120534 Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type 03.11.2026 9.8
CVE-2026-86596 s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter 02.11.2026 9.8
CVE-2026-116769 Authentication bypass in Secure Access Servers 02.11.2026 9.3
CVE-2026-97718 CSRF in Secure Access Server v14.60 02.11.2026 9.4
CVE-2026-102435 Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field 03.11.2026 9.8
CVE-2026-105606 Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 03.11.2026 9.5
CVE-2026-105604 Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 03.11.2026 9.3
CVE-2026-105603 Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 03.11.2026 9.4
CVE-2026-119085 Template injection in the publishing component of awslabs Virtual Engineering Workbench 03.11.2026 9.4
CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts 02.11.2026 9.3
CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy 03.11.2026 9.1
CVE-2026-94290 Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller 03.11.2026 9.1
CVE-2026-120442 ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass 02.11.2026 9.3
CVE-2026-120447 HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code 02.11.2026 9.2
CVE-2026-120459 python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key 02.11.2026 9.1
CVE-2026-116606 Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway 03.11.2026 9.3
CVE-2026-120213 @fastify/http-proxy vulnerable to prefix escape via decoded route parameters 02.11.2026 9.1
CVE-2025-11969 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions 02.11.2026 9.4
CVE-2026-120345 WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection 02.11.2026 10
CVE-2026-120344 WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection 02.11.2026 10
CVE-2026-120322 Termix-SSH Termix transferToHost path traversal 02.11.2026 9.4
CVE-2026-120283 Linksys E8450 portal.cgi strcpy stack-based overflow 02.11.2026 10
CVE-2026-120281 WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow 02.11.2026 10
CVE-2026-120282 WAVLINK WN536AX6-A protocol.csp host_black os command injection 02.11.2026 9.4
CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection 02.11.2026 10
CVE-2026-120280 WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection 02.11.2026 10
CVE-2026-120277 WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection 01.11.2026 10
CVE-2026-120276 WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection 01.11.2026 10
CVE-2026-120240 WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection 02.11.2026 9.4
CVE-2026-120239 WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection 02.11.2026 9.4
CVE-2026-120238 WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection 01.11.2026 9.4
CVE-2026-62048 WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability 01.11.2026 9.3
CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE 02.11.2026 9.9
CVE-2026-120232 Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption 02.11.2026 9.3
CVE-2026-120231 WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection 02.11.2026 9.4
CVE-2026-120230 WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection 01.11.2026 9.4
CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection 01.11.2026 9.4
CVE-2026-120228 WAVLINK WN553X1-B ioos Service sub_416D88 os command injection 02.11.2026 9.4
CVE-2026-120308 Beta9 host filesystem exposure via volume path traversal 02.11.2026 9.9
CVE-2026-120306 Beta9 build sandbox escape via chroot-only isolation 02.11.2026 9.9
CVE-2026-120307 Beta9 container escape via unvalidated sandbox file paths 02.11.2026 9.9
CVE-2026-120227 WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection 02.11.2026 9.4
CVE-2026-120225 Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal 01.11.2026 9.4
CVE-2026-120224 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization 02.11.2026 9.4
CVE-2026-120198 WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection 02.11.2026 10
CVE-2026-120197 WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection 02.11.2026 9.4
CVE-2026-120196 WAVLINK WN579X3-D wapi.cgi port_forward os command injection 01.11.2026 9.4
CVE-2026-120195 WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection 01.11.2026 10
CVE-2026-120189 D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow 01.11.2026 10
CVE-2026-118636 Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder 31.10.2026 9.8
CVE-2026-120201 Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header 02.11.2026 9.3
CVE-2026-120209 AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token 02.11.2026 9.3
CVE-2026-103882 Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter 31.10.2026 9.1
CVE-2026-118235 SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data 02.11.2026 9.8
CVE-2026-116512 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection 02.11.2026 9.8
CVE-2026-119096 Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter 02.11.2026 9.8
CVE-2026-109220 PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field 03.11.2026 9.8
CVE-2026-116557 WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action 31.10.2026 9.1
CVE-2026-89270 Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters 02.11.2026 9.1
CVE-2026-117656 Unverified Sign in with Apple callback parameter can override verified ID token claims 30.10.2026 9.3
CVE-2026-63377 TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover 05.11.2026 9.8
CVE-2026-62863 MoLing: unauthenticated SSE and wildcard CORS expose tool sessions 30.10.2026 9.6
CVE-2026-62849 ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection 30.10.2026 9.1
CVE-2026-62853 ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks 30.10.2026 9.9
CVE-2026-117666 ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary 30.10.2026 9.1
CVE-2026-116238 pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks 30.10.2026 9.2
CVE-2026-116241 pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier 30.10.2026 9.4
CVE-2026-61620 HoneySQL unchecked entity names can lead to SQL injection results 30.10.2026 9.8
CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation) 30.10.2026 9.1
CVE-2026-61850 Kargo: Privilege escalation via Project RBAC management in the Kargo API 05.11.2026 9.3
CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server 30.10.2026 9.3
CVE-2026-116386 WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability 30.10.2026 9.8
CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability 30.10.2026 9.1
CVE-2026-119526 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-39732 WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability 30.10.2026 9.3
CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability 01.11.2026 9.8
CVE-2026-90888 WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-118697 02.11.2026 9
CVE-2026-119978 Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore 02.11.2026 9
CVE-2026-61826 Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery 05.11.2026 10
CVE-2026-112816 Improper certificate validation in the HTTPS listener in LXD 31.10.2026 10
CVE-2026-119706 LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization 02.11.2026 9.3
CVE-2026-119716 pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments 02.11.2026 9.3
CVE-2026-93327 Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution 30.10.2026 9.4
CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin 30.10.2026 9.8
CVE-2026-61738 SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) 30.10.2026 10
CVE-2026-61729 SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection 30.10.2026 9.4
CVE-2026-61730 SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount 30.10.2026 9.3
CVE-2026-110799 Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover 30.10.2026 9.8
CVE-2026-112905 Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft 04.11.2026 9
CVE-2026-119660 MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key 30.10.2026 9.3
CVE-2026-61728 SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover 30.10.2026 9.9
CVE-2026-119597 OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery 30.10.2026 9.3
CVE-2026-119418 CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame() 30.10.2026 9.2
CVE-2026-119419 CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation 04.11.2026 9.2
CVE-2026-119568 vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking 30.10.2026 9.1
CVE-2026-116366 Unauthenticated RCE vulnerability against ClickHouse Server 30.10.2026 9.5
CVE-2025-31704 Dahua Intelligent Connection Center command injection 30.10.2026 9.8
CVE-2026-82104 API permission bypass via logic bug 30.10.2026 9.4
CVE-2026-103039 Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field 30.10.2026 9.8
CVE-2023-22793 30.10.2026 9.3
CVE-2026-61707 SOCFortress CoPilot: Stored case-report template injection permits backend code execution 30.10.2026 9
CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API 30.10.2026 9.1
CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform 29.10.2026 9.4
CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption 29.10.2026 9.2
CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN 04.11.2026 9.3
CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie 03.11.2026 9.1
CVE-2026-119145 Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload 29.10.2026 9.4
CVE-2026-90865 Command Injection via FTP Notification Variables in Progress WS_FTP Server 30.10.2026 9
CVE-2026-90866 Virtual Folder Path Confinement Bypass in Progress WS_FTP Server 30.10.2026 9.1
CVE-2026-90868 OS Command Injection in Progress WS_FTP Server 30.10.2026 9.9
CVE-2026-84295 Improper Authentication in Progress WS_FTP Server 30.10.2026 10
CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager 30.10.2026 9.1
CVE-2026-90864 Host Administrator Path Containment Bypass in Progress WS_FTP Server 30.10.2026 9.1
CVE-2026-111732 Out-of-bounds write when parsing AR Vendor Block requests 29.10.2026 9.3
CVE-2026-112256 Logon bypass (trust of attacker-controlled completed-methods list) 29.10.2026 9.2
CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-107327 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-107328 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-107329 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.9
CVE-2026-54856 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-54857 WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-54858 WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-54859 WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-54860 WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability 30.10.2026 10
CVE-2026-61992 WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61997 WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-61998 WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62001 WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62002 WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62003 WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62004 WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62005 WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62006 WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62008 WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62009 WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62010 WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62011 WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62012 WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62013 WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62014 WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62015 WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62016 WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-62017 WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62018 WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability 29.10.2026 9.8
CVE-2026-62131 WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability 30.10.2026 9.8
CVE-2026-93680 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-110186 Langflow OSS is affected by multiple vulnerabilities 30.10.2026 9.8
CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection 04.11.2026 9.2

Latest Updates

CVE Title Updated Score
CVE-2026-112072 vault-java-driver: stored deeply nested JSON kills every thread that reads it 05.11.2026 6.5
CVE-2026-100109 Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user 05.11.2026
CVE-2026-107776 Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon 05.11.2026 2.2
CVE-2026-109408 vault-java-driver: SslConfig silently disables requested TLS verification 05.11.2026 7.4
CVE-2026-123033 05.11.2026 8.3
CVE-2026-123029 05.11.2026 7.5
CVE-2026-123025 05.11.2026
CVE-2026-123017 05.11.2026 6.5
CVE-2025-15701 Easy Social Icons < 4.0.3 - Admin+ Stored XSS via Icon Color Settings 05.11.2026
CVE-2025-15702 Cloud Blocks <= 1.1.8 - Unauthenticated Stored XSS 05.11.2026
CVE-2026-100144 IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter 05.11.2026
CVE-2026-105259 Easy Social Icons < 4.0.3 - Author+ Stored XSS via SVG Upload 05.11.2026
CVE-2026-105971 Car Dealer <= 4.73 - Unauthenticated Private/Draft/Pending Post Content Disclosure via cardealer_single_car_ajax 05.11.2026
CVE-2026-107773 Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint 05.11.2026
CVE-2026-107774 Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form 05.11.2026
CVE-2026-107775 Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation 05.11.2026
CVE-2026-107786 CatFolders < 2.5.7 - Author+ SQLi via 'sortFile' Setting 05.11.2026
CVE-2026-107787 CatFolders < 2.5.7 - Subscriber+ Folder Ownership Reset and User Restriction Disable via catf_run_merge 05.11.2026
CVE-2026-109150 WP PageNavi Style <= 1.4 - Stored XSS via CSRF 05.11.2026
CVE-2026-16304 WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids 05.11.2026
CVE-2026-19256 All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force 05.11.2026
CVE-2026-85346 FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers 05.11.2026
CVE-2026-85347 FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption 05.11.2026
CVE-2026-85351 FV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import 05.11.2026
CVE-2026-85570 Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure 05.11.2026
CVE-2026-86442 WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR 05.11.2026
CVE-2026-86795 Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list 05.11.2026
CVE-2026-87856 Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass 05.11.2026
CVE-2026-88814 YITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race Condition 05.11.2026
CVE-2026-90963 Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax 05.11.2026
CVE-2026-90964 Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending 05.11.2026
CVE-2026-90965 Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure 05.11.2026
CVE-2026-90966 Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax 05.11.2026
CVE-2026-90967 Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR 05.11.2026
CVE-2026-91049 EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute 05.11.2026
CVE-2026-123014 05.11.2026
CVE-2026-123012 05.11.2026
CVE-2026-104812 Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key 05.11.2026 6.4
CVE-2026-116617 Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter 05.11.2026 8.1
CVE-2026-118193 GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter 05.11.2026 8.8
CVE-2026-120533 Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile 05.11.2026 6.4
CVE-2026-120553 Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute 05.11.2026 6.4
CVE-2026-93389 LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching 05.11.2026 8.2
CVE-2026-123011 05.11.2026 4.2
CVE-2026-123010 05.11.2026 7.2
CVE-2026-122236 OpenHands Landing missing authentication 05.11.2026
CVE-2026-122191 itsourcecode Airline Reservation System manage_booked.php sql injection 05.11.2026
CVE-2026-122190 SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting 05.11.2026
CVE-2026-122189 OpenPPL ppl.nn CUDA Optimizer opt_graph.cc InitQuantization out-of-bounds 05.11.2026
CVE-2026-122188 DeepGraphLearning KnowledgeGraphEmbedding Checkpoint Loading run.py override_config path traversal 05.11.2026
CVE-2025-66366 05.11.2026
CVE-2025-66367 05.11.2026
CVE-2026-33965 05.11.2026
CVE-2026-35494 05.11.2026
CVE-2026-48173 05.11.2026
CVE-2026-48174 05.11.2026
CVE-2026-48175 05.11.2026
CVE-2026-48178 05.11.2026
CVE-2026-48183 05.11.2026
CVE-2026-48186 05.11.2026
CVE-2026-68984 05.11.2026
CVE-2026-68985 05.11.2026
CVE-2026-68990 05.11.2026
CVE-2026-68991 05.11.2026
CVE-2026-68993 05.11.2026
CVE-2026-68994 05.11.2026
CVE-2026-69002 05.11.2026
CVE-2026-69005 05.11.2026
CVE-2026-69006 05.11.2026
CVE-2026-69025 05.11.2026
CVE-2026-69043 05.11.2026
CVE-2026-69044 05.11.2026
CVE-2026-69050 05.11.2026
CVE-2026-69066 05.11.2026
CVE-2026-69068 05.11.2026
CVE-2025-66368 05.11.2026
CVE-2026-122160 myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere 05.11.2026
CVE-2026-122992 05.11.2026
CVE-2026-33958 05.11.2026
CVE-2026-33969 05.11.2026
CVE-2026-33971 05.11.2026
CVE-2026-33972 05.11.2026
CVE-2026-35495 05.11.2026
CVE-2026-48176 05.11.2026
CVE-2026-48179 05.11.2026
CVE-2025-66365 05.11.2026
CVE-2026-122301 Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Response 05.11.2026
CVE-2026-122302 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check 05.11.2026
CVE-2026-122303 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy 05.11.2026
CVE-2026-122304 Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader 05.11.2026
CVE-2026-122305 Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop 05.11.2026
CVE-2026-122306 Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching 05.11.2026
CVE-2026-122307 Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling 05.11.2026
CVE-2026-122308 Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest 05.11.2026
CVE-2026-122309 Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost 05.11.2026
CVE-2026-122310 Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath 05.11.2026
CVE-2026-122311 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument 05.11.2026
CVE-2026-122312 Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String 05.11.2026
CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy 05.11.2026
CVE-2026-122314 Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic 05.11.2026
CVE-2026-122315 Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic 05.11.2026
CVE-2026-122316 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting 05.11.2026
CVE-2026-122318 Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates 05.11.2026
CVE-2026-122319 Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic 05.11.2026
CVE-2026-122320 Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone 05.11.2026
CVE-2026-122321 Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass 05.11.2026
CVE-2026-122322 Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression 05.11.2026
CVE-2026-122323 Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression 05.11.2026
CVE-2026-122159 Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.__init__ path traversal 05.11.2026
CVE-2026-122158 InvoiceShelf MemberService.php create access control 05.11.2026
CVE-2026-122157 Purocean Yank Note Terminal index.ts checkPermission os command injection 05.11.2026
CVE-2025-66364 05.11.2026
CVE-2026-122154 purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure 05.11.2026
CVE-2026-122151 Presenton User Configuration user-config JSON.parse cross-site request forgery 05.11.2026
CVE-2026-122146 101arrowz fflate index.mjs unzipSync memory corruption 05.11.2026
CVE-2026-109849 05.11.2026
CVE-2026-122144 nliautaud pico-content-editor cross-site request forgery 05.11.2026
CVE-2026-122052 laspy LAS File lasreader.py memory allocation 05.11.2026
CVE-2026-122051 Edimax BR-6208AC mp command injection 04.11.2026
CVE-2026-122050 Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection 04.11.2026
CVE-2026-122049 Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication 04.11.2026
CVE-2026-122048 Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection 04.11.2026
CVE-2026-102337 Webmin: SSRF exploit in Upload and Download and File Manager modules 04.11.2026
CVE-2026-122299 Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation 04.11.2026
CVE-2026-77372 VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path) 04.11.2026
CVE-2026-97702 Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforce 04.11.2026 5.3
CVE-2026-122047 Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload 04.11.2026
CVE-2026-62365 Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML 04.11.2026 5.3
CVE-2026-115770 Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing 04.11.2026 9.6
CVE-2026-122038 krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection 04.11.2026
CVE-2026-108387 radare2: Remote code execution when loading Pebble/SMD binary 04.11.2026
CVE-2026-47678 GLPI: Blind Time based SQLI in dropdowns 04.11.2026
CVE-2026-53631 GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds 04.11.2026
CVE-2026-62662 Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences 04.11.2026
CVE-2026-52848 GLPI: MFA bypass 04.11.2026
CVE-2026-54382 VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access 04.11.2026
CVE-2026-54383 VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint 04.11.2026
CVE-2026-54384 VitaFit Cloud API Authentication Bypass via POST /front/login/sns/ 04.11.2026
CVE-2026-57152 GLPI: Unallowed notifications sending 04.11.2026
CVE-2026-122028 NST Labs Tech Nstbrowser Local Agent API info information disclosure 04.11.2026
CVE-2026-54381 VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure 04.11.2026
CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow 04.11.2026
CVE-2026-76892 tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process 04.11.2026
CVE-2026-86041 ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header 04.11.2026
CVE-2026-122020 NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service 04.11.2026
CVE-2026-54376 VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking 04.11.2026
CVE-2026-54377 VitaFit Cloud API IDOR via profile_id Endpoints 04.11.2026
CVE-2026-54378 VitaFit Cloud API Broken Access Control via S3 Token Endpoint 04.11.2026
CVE-2026-54380 VitaFit Cloud API Stored XSS via SVG File Upload 04.11.2026
CVE-2026-63655 tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS 04.11.2026 7.5
CVE-2026-76893 tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients 04.11.2026
CVE-2026-102280 Sandboxie-Plus: Sandbox containment bypass 04.11.2026
CVE-2026-54375 VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure 04.11.2026
CVE-2026-54372 VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation 04.11.2026
CVE-2026-54373 VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config 04.11.2026
CVE-2026-54374 VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure 04.11.2026
CVE-2026-122019 6amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization 04.11.2026
CVE-2026-122266 Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS 04.11.2026 8.7
CVE-2026-57562 Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the caller 04.11.2026 6.5
CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal) 04.11.2026 6.5
CVE-2026-57566 Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy 04.11.2026 9.3
CVE-2026-57567 Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview 04.11.2026 8.6
CVE-2026-115473 Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c) 04.11.2026 6.5
CVE-2026-55367 h2o: heap exhaustion using capsules 04.11.2026 7.5
CVE-2026-55368 h2o: buffer overflow when using the %{error}x log directive 04.11.2026 8.1
CVE-2026-103002 GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover 04.11.2026 8.8
CVE-2026-121746 nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write 04.11.2026
CVE-2026-121747 nvm prints the contents of any readable file through a symlinked .nvmrc 04.11.2026
CVE-2026-121749 nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files 04.11.2026
CVE-2026-122016 yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management 04.11.2026
CVE-2026-54379 04.11.2026
CVE-2026-58128 Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivity 04.11.2026
CVE-2026-121745 nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line 04.11.2026
CVE-2026-121748 nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writable 04.11.2026
CVE-2026-121750 nvm install --offline installs a cached tarball that previously failed checksum verification 04.11.2026
CVE-2026-121751 nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases 04.11.2026
CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover 04.11.2026 9.1
CVE-2026-102895 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin 04.11.2026 9.8
CVE-2026-122015 NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation 04.11.2026
CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise 04.11.2026 9.9
CVE-2026-122233 FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode 04.11.2026
CVE-2026-122234 jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters 04.11.2026
CVE-2026-122235 Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink 04.11.2026
CVE-2026-16725 IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith 04.11.2026 6.5
CVE-2026-17493 IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. 04.11.2026 7.5
CVE-2026-19319 IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx 04.11.2026 5.3
CVE-2026-82418 IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL 04.11.2026 9.8
CVE-2026-105702 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 4.3
CVE-2026-105991 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 3.5
CVE-2026-108536 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 4.6
CVE-2026-108588 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 5.4
CVE-2026-108767 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 4.3
CVE-2026-108838 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 3.3
CVE-2026-108910 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 4.3
CVE-2026-110281 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 5.9
CVE-2026-110282 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 6.5
CVE-2026-110283 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 4.3
CVE-2026-116376 Multiple vulnerabilities that affects IBM Db2 Genius Hub 04.11.2026 3.4
CVE-2026-122014 NPC-Worldwide npcpy sft.py load_sft_model code injection 04.11.2026
CVE-2026-115762 draw.io: Prototype pollution in GraphML (mxGraphMlCodec) 04.11.2026 6.1
CVE-2026-97373 draw.io: Incomplete SSRF blocklist in `ProxyServlet` / `Utils.sanitizeUrl`: RFC 6598 CGNAT range `100.64.0.0/10` is not blocked -> server-side request to internal CGNAT hosts 04.11.2026 5.8
CVE-2026-104203 Traccar: Authentication bypass via path parameters exposes protected device media 04.11.2026 7.5
CVE-2026-115758 SumatraPDF: TLS hostname validation disabled in `HttpGet()` 04.11.2026
CVE-2026-122013 Comfast CF-WR632AX Multipart webmgnt path traversal 04.11.2026
CVE-2026-102340 Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets 04.11.2026 8.5
CVE-2026-102664 ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path 04.11.2026 7.1
CVE-2025-71453 vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList 04.11.2026
CVE-2025-71454 vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering 04.11.2026
CVE-2025-71455 vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service 04.11.2026
CVE-2025-71456 vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView 04.11.2026
CVE-2025-71457 vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php 04.11.2026
CVE-2026-102339 Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable 04.11.2026 8.2
CVE-2026-121968 Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets 04.11.2026
CVE-2026-121969 netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessage 04.11.2026
CVE-2026-122009 DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery 04.11.2026
CVE-2026-122126 reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket 04.11.2026
CVE-2026-122127 CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder 04.11.2026
CVE-2026-122129 CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder 04.11.2026
CVE-2026-122130 CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin 04.11.2026
CVE-2026-122131 Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via __proto__ Language Key 04.11.2026
CVE-2026-122132 go-chi chi 5.2.2 through 5.5.0 Open Redirect via RedirectSlashes Middleware 04.11.2026
CVE-2026-122133 Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe 04.11.2026
CVE-2026-122134 Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers 04.11.2026
CVE-2026-122135 Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program 04.11.2026
CVE-2026-122136 Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File 04.11.2026
CVE-2026-122137 Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer 04.11.2026
CVE-2026-122138 BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass 04.11.2026
CVE-2026-122139 blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset 04.11.2026
CVE-2026-122140 Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass 04.11.2026
CVE-2026-122224 WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints 04.11.2026
CVE-2026-10859 IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability 04.11.2026 7.5
CVE-2026-11376 IBM MQ is affected by a denial of service vulnerability 04.11.2026 8.8
CVE-2026-11724 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 04.11.2026 8.5
CVE-2026-12356 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 04.11.2026 7.5
CVE-2026-12538 IBM MQ Appliance is affected by an improper validation vulnerability 04.11.2026 5.4
CVE-2026-12550 IBM MQ is affected by a denial of service vulnerability 04.11.2026 5.4
CVE-2026-13271 IBM MQ Managed File Transfer is affected by a denial of service vulnerability 04.11.2026 8.1
CVE-2026-13284 IBM MQ Managed File Transfer is vulnerable to XML external entity injection 04.11.2026 7.1
CVE-2026-13289 IBM MQ Managed File Transfer is vulnerable to XML external entity injection 04.11.2026 7.1
CVE-2026-13292 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 04.11.2026 8.8
CVE-2026-14252 IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility 04.11.2026 6.2
CVE-2026-18142 IBM MQ is affected by a denial of service vulnerability 04.11.2026 7.1
CVE-2026-113368 Nexus Repository 3 - Group Repository Member Authorization Bypass 04.11.2026
CVE-2026-113369 Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab 04.11.2026
CVE-2026-113370 Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task 04.11.2026
CVE-2026-113371 Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase 04.11.2026
CVE-2026-113372 Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key 04.11.2026
CVE-2026-113373 Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again 04.11.2026
CVE-2026-113374 Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation 04.11.2026
CVE-2026-122220 WPO365 LOGIN before 45.2 SAML Replay Protection Bypass 04.11.2026
CVE-2026-122192 Guest access to Firecracker process memory after a failed memory discard 04.11.2026 7.5
CVE-2026-76806 Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle 04.11.2026 6.3
CVE-2026-97705 Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser 04.11.2026 7.5
CVE-2026-115474 Zulip: Saving a draft DM to a user bypasses can_access_all_users_group permission 04.11.2026 6.5
CVE-2026-115574 Zulip: Custom profile fields can be read by logged-out visitors in organization with web-public channels 04.11.2026 5.3
CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication 04.11.2026
CVE-2026-107846 bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list 04.11.2026
CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 04.11.2026 9.3
CVE-2026-113783 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses 04.11.2026 7.4
CVE-2026-63183 OmniAuth: Host Header Injection Vulnerability 04.11.2026
CVE-2026-97701 Zulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requests 04.11.2026 6.5
CVE-2026-102345 Zammad: Stored XSS in ticket article rendering in the new Vue-based interface 04.11.2026
CVE-2026-113782 ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing 04.11.2026 7.1
CVE-2026-121932 Linksys E5350 apply.cgi system os command injection 04.11.2026
CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection 04.11.2026
CVE-2026-82033 DeepSeek Harness Unauthenticated RPC Command Execution 04.11.2026
CVE-2026-121930 Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection 04.11.2026
CVE-2026-122148 04.11.2026
CVE-2026-82029 Invoice Ninja < 5.13.28 Broken Access Control via Vendor Portal 04.11.2026
CVE-2026-121928 InfiniFlow RAGFlow Images API file_utils.py cross site scripting 04.11.2026
CVE-2026-121929 EmpireSoft EmpireCMS index.php cross site scripting 04.11.2026
CVE-2026-122120 04.11.2026 9
CVE-2026-122124 04.11.2026 6.1
CVE-2026-122118 04.11.2026 7.4
CVE-2026-57853 DataGerry < 3.3.0 SSTI via DocAPI Template Rendering 04.11.2026
CVE-2026-121927 InfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgery 04.11.2026
CVE-2026-121971 Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References 04.11.2026
CVE-2026-122116 04.11.2026 4.3
CVE-2026-122054 BIG-HKSCS decoding hang on crafted input 04.11.2026 5.9
CVE-2026-121926 yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authentication 04.11.2026
CVE-2026-119748 GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice 04.11.2026
CVE-2026-119749 GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass 04.11.2026
CVE-2026-119747 GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API 04.11.2026
CVE-2026-20241 Cisco Identity Services Engine Authorization Bypass Vulnerability 04.11.2026 5.3
CVE-2026-76419 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 04.11.2026 6.1
CVE-2026-76506 Cisco Unified Computing System Central Remote Code Execution Vulnerability 05.11.2026 7.6
CVE-2026-106554 jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC) 04.11.2026
CVE-2026-109518 APT RCE via hard link reuse 05.11.2026
CVE-2026-119746 ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies 04.11.2026
CVE-2026-121950 FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap 04.11.2026
CVE-2026-121951 FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event 04.11.2026
CVE-2026-121952 FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability 04.11.2026
CVE-2026-121953 FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close 04.11.2026
CVE-2026-121954 FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec 04.11.2026
CVE-2026-121955 FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext 04.11.2026
CVE-2026-121956 FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt 04.11.2026
CVE-2026-121957 FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race 04.11.2026
CVE-2026-121958 FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys 04.11.2026
CVE-2026-121959 FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame 04.11.2026
CVE-2026-121960 FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest 04.11.2026
CVE-2026-121961 FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race 04.11.2026
CVE-2026-121962 FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read 04.11.2026
CVE-2026-121963 FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close 04.11.2026
CVE-2026-121964 FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment 04.11.2026
CVE-2026-121965 Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key 04.11.2026
CVE-2026-121966 Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak 04.11.2026
CVE-2026-121967 Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal 04.11.2026
CVE-2026-92704 SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution 04.11.2026 8.3
CVE-2026-122032 SPIP before 4.4.29 Authenticated SQL Injection via where Parameter 04.11.2026
CVE-2026-91163 Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller 04.11.2026 3.7
CVE-2026-91168 Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account 04.11.2026 6.8
CVE-2026-100407 Git for Windows: git-credential-wincred OAuth Store Heap Overflow 04.11.2026 4.4
CVE-2026-100408 Git for Windows: git-credential-wincred Erase Path Heap Overflow 04.11.2026 4.4
CVE-2026-120421 Reflected XSS via client window id in URL client window mode 04.11.2026 6.1
CVE-2026-66736 04.11.2026
CVE-2026-122008 Oqtane Framework before 10.3.0 SSRF via File Upload From URL 04.11.2026
CVE-2026-121637 WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results 04.11.2026
CVE-2026-121638 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks 04.11.2026
CVE-2026-121639 WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service 04.11.2026
CVE-2026-121640 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions 04.11.2026
CVE-2026-122007 Oqtane Framework before 10.3.0 Broken Access Control via SettingController 04.11.2026
CVE-2026-114627 Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output 04.11.2026
CVE-2026-121007 SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position 04.11.2026
CVE-2026-121008 SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile 04.11.2026
CVE-2026-121009 SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func 04.11.2026
CVE-2026-121632 Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping 04.11.2026
CVE-2026-39431 04.11.2026
CVE-2026-119776 frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses 04.11.2026
CVE-2026-122006 04.11.2026 9.8
CVE-2026-39430 04.11.2026
CVE-2026-118391 Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto 04.11.2026
CVE-2026-119745 Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download 04.11.2026
CVE-2026-121993 wePOS before 2.0.3 Missing Authorization via payment/process Endpoint 04.11.2026
CVE-2026-121373 Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761) 04.11.2026
CVE-2026-121970 Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery 04.11.2026
CVE-2026-121146 Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application 04.11.2026
CVE-2026-121147 Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application 04.11.2026
CVE-2026-118516 Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control 04.11.2026
CVE-2026-121145 Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application 04.11.2026
CVE-2026-121620 CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification 04.11.2026
CVE-2026-121144 Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile application 04.11.2026
CVE-2026-121936 easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API 04.11.2026
CVE-2026-121937 loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint 04.11.2026
CVE-2026-121938 langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid} 04.11.2026
CVE-2026-121939 Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking 04.11.2026
CVE-2026-121940 Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers 04.11.2026
CVE-2026-121941 libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex 04.11.2026
CVE-2026-121942 ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c 04.11.2026
CVE-2026-121943 Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet 04.11.2026
CVE-2026-121944 sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLV 04.11.2026
CVE-2026-121945 CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint 04.11.2026
CVE-2026-121946 zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders 04.11.2026
CVE-2026-107479 Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework 04.11.2026
CVE-2026-118513 Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063) 04.11.2026
CVE-2026-119468 WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability 04.11.2026 7.1
CVE-2026-119481 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 04.11.2026 9.8
CVE-2026-65555 WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability 04.11.2026 9.8