CVE-2026-4070 - The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers

CVE-2026-44409 - There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of

CVE-2026-3481 - The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortc

CVE-2026-2518 - The FastX theme for WordPress is vulnerable to unauthorized limited plugin installation and activati

CVE-2026-9054 - An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size woul

CVE-2026-9053 - Mothra would respect a default value given by a website for HTML file upload forms. An attacker coul

CVE-2026-4834 - The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in

CVE-2026-46598 - For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, lead

CVE-2026-46597 - An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet dec

CVE-2026-46595 - Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if a

CVE-2026-42508 - Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now

CVE-2026-39835 - SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHost

CVE-2026-39834 - When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in t

CVE-2026-39833 - The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse cons

CVE-2026-39832 - When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.c

CVE-2026-39831 - The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25

CVE-2026-39830 - A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blo

CVE-2026-39829 - The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public k

CVE-2026-39828 - When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, th

CVE-2026-39827 - An authenticated SSH client that repeatedly opened channels which were rejected by the server caused

CVE-2026-9264 - A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remo

CVE-2026-34911 - A malicious actor with access to the network and low privileges could exploit a Path Traversal vulne

CVE-2026-34910 - A malicious actor with access to the network could exploit an Improper Input Validation vulnerabilit

CVE-2026-34909 - A malicious actor with access to the network could exploit a Path Traversal vulnerability found in U

CVE-2026-34908 - A malicious actor with access to the network could exploit an Improper Access Control vulnerability

CVE-2026-33000 - A malicious actor with access to the network and high privileges could exploit an Improper Input Val