CVE-2026-73809 - A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway pro

CVE-2026-73125 - Ebyte device web management interface does not consistently enforce authentication before granting

CVE-2026-71396 - Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automati

CVE-2026-71187 - The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticat

CVE-2026-69658 - MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information t

CVE-2026-68967 - Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to del

CVE-2026-68929 - FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions

CVE-2026-67560 - Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker

CVE-2026-61783 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-5706 - In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds

CVE-2026-54330 - Ceph is an open-source distributed storage platform providing object, block, and file storage. In ve

CVE-2026-54085 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-54084 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-54083 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-50152 - Ceph is an open-source distributed storage platform providing object, block, and file storage. In ve

CVE-2026-44629 - Improper access control to the Synergis Softwire installation folder. This vulnerability affects Str

CVE-2026-39944 - Ceph is an open-source distributed storage platform providing object, block, and file storage. In ve

CVE-2026-38350 - An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd

CVE-2026-38349 - An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd297

CVE-2026-38348 - An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attack

CVE-2026-38347 - A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master

CVE-2026-38346 - An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd297

CVE-2026-38345 - A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of

CVE-2026-38344 - A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122

CVE-2026-38343 - An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows at

CVE-2026-18965 - PayRange API is missing proper authorization on management endpoints, which allows verbose details o

CVE-2026-18717 - ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which m

CVE-2026-17610 - In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a deni

CVE-2025-30156 - Ceph is an open-source distributed storage platform providing object, block, and file storage. In ve

CVE-2026-81934 - Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handl

CVE-2026-81931 - Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow

CVE-2026-81893 - A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC p

CVE-2026-81838 - A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac)

CVE-2026-81834 - A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the fu

CVE-2026-81833 - A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerabil

CVE-2026-81731 - Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filteri

CVE-2026-81730 - Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message

CVE-2026-81729 - Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents

CVE-2026-81728 - Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads

CVE-2026-81530 - A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensi

CVE-2026-81529 - Improper neutralization of delimiters in connection-URL construction allows connection-option inject

CVE-2026-81528 - A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the

CVE-2026-81527 - A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of t

CVE-2026-81526 - The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifie

CVE-2026-81525 - The MongoDB client library for PHP does not sufficiently sanitize special elements in application-su

CVE-2026-81524 - A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collectio

CVE-2026-81523 - A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allow

CVE-2026-81522 - A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows spec

CVE-2026-81521 - The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name

CVE-2026-77438 - Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.10

CVE-2026-76640 - Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT serv

CVE-2026-76639 - Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerabilit

CVE-2026-75889 - Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify

CVE-2026-74820 - ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI

CVE-2026-6876 - ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI P

CVE-2026-66353 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-65931 - LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in

CVE-2026-59324 - When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emit

CVE-2026-59322 - The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its

CVE-2026-59321 - A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 e

CVE-2026-59320 - When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery

CVE-2026-59319 - RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-suppli

CVE-2026-59317 - DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound

CVE-2026-59316 - Spring Authorization Server's default consent page renders user-controlled values without HTML entit

CVE-2026-59315 - The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads.

CVE-2026-59314 - Applications that build a Content-Disposition header value from untrusted input may be vulnerable to

CVE-2026-59313 - Spring MVC applications using the functional web framework are vulnerable to stream corruption when

CVE-2026-59311 - A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a dire

CVE-2026-59307 - An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives

CVE-2026-59306 - Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 -

CVE-2026-59305 - Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0

CVE-2026-59304 - Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0

CVE-2026-59303 - Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0

CVE-2026-59302 - Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Sprin

CVE-2026-59301 - Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5

CVE-2026-59300 - Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0

CVE-2026-59299 - Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Funct

CVE-2026-59298 - Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0

CVE-2026-59297 - Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme.

CVE-2026-59294 - ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbat

CVE-2026-59293 - Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1

CVE-2026-59292 - PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its stat

CVE-2026-59291 - Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function

CVE-2026-59289 - Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and for

CVE-2026-59288 - The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the app

CVE-2026-59287 - Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with k

CVE-2026-59286 - The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, with

CVE-2026-59285 - Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated G

CVE-2026-59284 - There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled

CVE-2026-59283 - Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationConte

CVE-2026-59282 - Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied p

CVE-2026-59281 - Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping en

CVE-2026-59277 - Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders

CVE-2026-59276 - Several components in Spring Security compare security-sensitive values using standard string equali

CVE-2026-55758 - CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game.

CVE-2026-54732 - libreoffice-convert is a Node.js module for converting office documents to different formats. Prior

CVE-2026-54721 - Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4

CVE-2026-54718 - Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5,

CVE-2026-54713 - CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager:

CVE-2026-54687 - n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/Sq

CVE-2026-53580 - Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the au

CVE-2026-53579 - Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.10

CVE-2026-53578 - Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.10

CVE-2026-48996 - Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.10

CVE-2026-47727 - Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the de

CVE-2026-37198 - An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Ser

CVE-2026-37073 - Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows

CVE-2026-37072 - Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control

CVE-2026-37071 - Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File

CVE-2026-37070 - Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allo

CVE-2026-37069 - Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.ph

CVE-2026-37068 - Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager

CVE-2026-37067 - Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.

CVE-2026-37066 - Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.

CVE-2026-37065 - Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?sec

CVE-2026-37064 - User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unaut

CVE-2026-37012 - A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclo

CVE-2026-37009 - A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to e

CVE-2026-37007 - A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve c

CVE-2026-37006 - A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthentic

CVE-2026-37004 - BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauth

CVE-2026-37003 - Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection. Th

CVE-2026-36102 - An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authe

CVE-2026-35869 - A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so

CVE-2026-35868 - A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so

CVE-2026-34620 - DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that co

CVE-2026-34616 - DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that cou

CVE-2026-30612 - An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Po

CVE-2026-25250 - EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associat

CVE-2026-19092 - The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal

CVE-2026-18886 - ServiceNow has remediated an improper access control vulnerability that was identified in the Servic

CVE-2026-18885 - ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI pl

CVE-2026-18374 - Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fop

CVE-2026-10036 - SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to

CVE-2026-81827 - Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Em

CVE-2026-81826 - Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password

CVE-2026-81820 - Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object field

CVE-2026-81819 - Affected versions of Flowintel expose the /my_assignment/user API endpoint to any authenticated API

CVE-2026-81818 - Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API.

CVE-2026-81817 - Affected versions of Flowintel contain an insecure direct object reference / broken object-level aut

CVE-2026-81735 - startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::

CVE-2026-81727 - NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.

CVE-2026-81726 - NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass paths

CVE-2026-81725 - NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusRead

CVE-2026-81724 - NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructRea

CVE-2026-81723 - NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_

CVE-2026-81722 - nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-compl

CVE-2026-81721 - openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and ke

CVE-2026-81720 - openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protecti

CVE-2026-81719 - openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the

CVE-2026-81718 - openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 i

CVE-2026-81717 - openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable U

CVE-2026-81716 - openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in Plugin

CVE-2026-81715 - openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer t

CVE-2026-81714 - openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in

CVE-2026-81707 - openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allow

CVE-2026-81706 - openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contac

CVE-2026-81705 - openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the pas

CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus Crypt

CVE-2026-81703 - openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum pr

CVE-2026-81702 - openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities fr

CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing

CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.v

CVE-2026-81699 - openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in cra

CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's

CVE-2026-81697 - openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration

CVE-2026-81696 - openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata

CVE-2026-81695 - openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to st

CVE-2026-81694 - openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted dri

CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before material

CVE-2026-81692 - openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAM

CVE-2026-81691 - openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email

CVE-2026-81690 - openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 ad

CVE-2026-81689 - openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 o

CVE-2026-81688 - openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartex

CVE-2026-81687 - openssl_encrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iter

CVE-2026-81686 - openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.D

CVE-2026-81685 - openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, al

CVE-2026-81684 - In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the stega

CVE-2026-81683 - openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client privat

CVE-2026-81682 - openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desk

CVE-2026-81681 - openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace a

CVE-2026-81680 - openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format

CVE-2026-81679 - OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the

CVE-2026-81678 - AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL functio

CVE-2026-81664 - The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enab

CVE-2026-81335 - Baserow dispatches an Application Builder data source without acting on the result of its permission

CVE-2026-81334 - darknet subscripts its layer array with an index taken from a configuration file without checking it

CVE-2026-81102 - The Dash MCP server bound its listener to the loopback address but never checked the host a request

CVE-2026-81101 - The configure command accepted any endpoint URL and stored it beside the user's access token. Config

CVE-2026-81100 - tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlyi

CVE-2026-81099 - tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK p

CVE-2026-81098 - The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller cre

CVE-2026-81097 - The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylis

CVE-2026-81096 - ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that req

CVE-2026-81095 - pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK pr

CVE-2026-81094 - The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only whe

CVE-2026-81093 - The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The han

CVE-2026-81092 - mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServ

CVE-2026-81091 - The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mou

CVE-2026-80213 - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a

CVE-2026-80212 - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Re

CVE-2026-80211 - FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/use

CVE-2026-80210 - FrontAccounting through 2.4.20 generates a CSRF token in end_form() in includes/ui/ui_controls.inc a

CVE-2026-80209 - The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster thr

CVE-2026-80208 - APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in Interna

CVE-2026-80207 - APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with require

CVE-2026-79988 - The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii

CVE-2026-79720 - Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allow

CVE-2026-79719 - Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allow

CVE-2026-79718 - Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allow

CVE-2026-79653 - In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use

CVE-2026-78251 - DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and

CVE-2026-78002 - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow i

CVE-2026-75871 - GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of t

CVE-2026-75573 - In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when t

CVE-2026-75357 - An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bil

CVE-2026-75159 - An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerbe

CVE-2026-71402 - An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_

CVE-2026-71401 - An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_h

CVE-2026-64896 - Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows

CVE-2026-5738 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-5680 - A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending speciall

CVE-2026-59280 - Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal a

CVE-2026-59272 - Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documente

CVE-2026-57499 - Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vuln

CVE-2026-56652 - Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a

CVE-2026-56651 - Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as

CVE-2026-40526 - Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated

CVE-2026-34674 - Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulner

CVE-2026-30073 - An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to

CVE-2026-30072 - A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a

CVE-2026-30071 - An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service

CVE-2026-30070 - An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of

CVE-2026-30069 - A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attac

CVE-2026-30068 - Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0

CVE-2026-30067 - An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1

CVE-2026-30064 - Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 all

CVE-2026-30063 - An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Servic

CVE-2026-30062 - An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) v

CVE-2026-30060 - An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted

CVE-2026-30059 - An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Servic

CVE-2026-30058 - Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers t

CVE-2026-30057 - An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Deni

CVE-2026-30056 - A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers t

CVE-2026-30051 - An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows

CVE-2026-30050 - An issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of free5g

CVE-2026-30047 - A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7

CVE-2026-30046 - A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to

CVE-2026-30045 - An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers t