CVE-2026-109714 - Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 a

CVE-2026-109713 - Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefo

CVE-2026-109712 - Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed i

CVE-2026-109711 - Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Fir

CVE-2026-109710 - Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox

CVE-2026-109709 - Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vul

CVE-2026-109708 - Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability

CVE-2026-109707 - Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Fi

CVE-2026-109706 - Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Fir

CVE-2026-109705 - Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Net

CVE-2026-109704 - Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 15

CVE-2026-109407 - A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some u

CVE-2026-109406 - A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the functi

CVE-2026-109405 - A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the f

CVE-2026-109404 - A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue

CVE-2026-109403 - A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerabili

CVE-2026-94410 - A low privileged remote attacker is able to view a list of roles that should only be accessible to a

CVE-2026-89279 - Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encrypti

CVE-2026-63316 - A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input p

CVE-2026-109832 - A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O

CVE-2026-109402 - A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.lis

CVE-2026-109190 - A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiT

CVE-2026-109189 - A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the f

CVE-2026-109160 - A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function

CVE-2026-109157 - A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the func

CVE-2026-109156 - A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_e

CVE-2026-109155 - A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Mo

CVE-2026-109153 - A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.ex

CVE-2026-89208 - A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital E

CVE-2026-89206 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89205 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89204 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89203 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89202 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89201 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89200 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89199 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89198 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89197 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-89196 - A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do

CVE-2026-85115 - A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All version

CVE-2026-85114 - A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All version

CVE-2026-78557 - A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The a

CVE-2026-78556 - A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The a

CVE-2026-72895 - A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW

CVE-2026-63357 - Affected devices do not properly sanitize calculated signal data contained in imported calculated si

CVE-2026-63356 - Affected devices do not properly sanitize calculated signal names contained in imported CSV trace fi

CVE-2026-63355 - Affected devices do not properly sanitize signal names contained in imported CSV trace files before

CVE-2026-63354 - Affected devices do not properly validate and sanitize visual marker data contained in imported CSV

CVE-2026-63353 - Affected devices do not properly sanitize comment fields contained in imported trace files before re

CVE-2026-63352 - Affected devices do not properly sanitize calculated signal data contained in imported CSV trace fil

CVE-2026-63351 - Affected devices do not properly validate and sanitize visual properties of calculated signals conta

CVE-2026-63350 - Affected devices do not properly restrict executable content contained in imported trace files. T

CVE-2026-59241 - A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All ve

CVE-2026-44415 - Affected systems do not properly restrict access to internal APIs and paths for authenticated users.

CVE-2026-44414 - A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device K

CVE-2026-109854 - A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing IS

CVE-2026-109162 - Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploa

CVE-2026-109152 - A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is t

CVE-2026-109149 - A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is

CVE-2026-109144 - A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown

CVE-2026-102076 - A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P

CVE-2026-102075 - A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P

CVE-2026-102074 - A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P

CVE-2026-102073 - A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P

CVE-2026-96535 - Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting

CVE-2026-89309 - The authorization middleware of the WMS MobileServer fails to require authentication in two distinct

CVE-2026-13138 - Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce In

CVE-2026-109699 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploit

CVE-2026-109697 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-109696 - Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiti

CVE-2026-109691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-109687 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-109684 - Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Config

CVE-2026-109143 - A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects

CVE-2026-109116 - A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-109115 - A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e

CVE-2026-109114 - A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-109110 - A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the c

CVE-2026-108496 - Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploi

CVE-2026-108495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108493 - Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocomme

CVE-2026-108492 - Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments

CVE-2026-108490 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108489 - Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tabl

CVE-2026-108488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108179 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-108174 - Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploit

CVE-2026-106598 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retriev

CVE-2026-106597 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploit

CVE-2026-105881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-103076 - Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration al

CVE-2026-101020 - An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD,

CVE-2026-89097 - The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Informati

CVE-2026-67165 - HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this i

CVE-2026-15399 - The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'co

CVE-2026-14308 - Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient

CVE-2026-109703 - Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensi

CVE-2026-109109 - A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the functio

CVE-2026-109108 - A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the functio

CVE-2026-109107 - A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function

CVE-2026-103418 - Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript

CVE-2026-103417 - Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred

CVE-2026-102562 - The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField

CVE-2026-102007 - The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin f

CVE-2026-75826 - Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 bef

CVE-2026-109106 - A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulner

CVE-2026-108975 - A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerabil

CVE-2026-108974 - A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function sa

CVE-2026-108973 - A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue

CVE-2026-103316 - The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process

CVE-2026-89271 - The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination o

CVE-2026-89269 - The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and

CVE-2026-54870 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-54869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-54868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-54867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108972 - A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this v

CVE-2026-108971 - A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file

CVE-2026-108970 - A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbf

CVE-2026-108969 - A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e6

CVE-2026-108968 - A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected elem

CVE-2026-108967 - A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is

CVE-2026-108966 - A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affect

CVE-2026-109758 - Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer

CVE-2026-108965 - A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerabilit

CVE-2026-108964 - A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknow

CVE-2026-108962 - A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7

CVE-2026-108961 - A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the fun

CVE-2026-109786 - In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts

CVE-2026-108960 - A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4.

CVE-2026-108959 - A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This imp

CVE-2026-108958 - A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph

CVE-2026-108957 - A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b5

CVE-2026-9268 - GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 bef

CVE-2026-97229 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3

CVE-2026-96893 - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 bef

CVE-2026-92883 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3

CVE-2026-92528 - GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 be

CVE-2026-85529 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3

CVE-2026-84284 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all

CVE-2026-82632 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3

CVE-2026-81839 - GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 bef

CVE-2026-7767 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3

CVE-2026-78335 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3

CVE-2026-6567 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3

CVE-2026-5954 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3

CVE-2026-35001 - OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric

CVE-2026-16301 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3

CVE-2026-16275 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3

CVE-2026-14814 - GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.

CVE-2026-14552 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3

CVE-2026-14210 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3

CVE-2026-108956 - A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is

CVE-2026-108955 - A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4

CVE-2026-108954 - A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function Offlin

CVE-2026-108948 - A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affec

CVE-2026-108947 - A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loa

CVE-2026-105458 - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 bef

CVE-2026-104661 - GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 bef

CVE-2026-103549 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3

CVE-2026-101168 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3

CVE-2026-100755 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3

CVE-2026-100104 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3

CVE-2026-89124 - Display Product Catalog Based on Customs Declaration application does not perform sufficient authori

CVE-2026-89122 - SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component.

CVE-2026-89121 - SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification

CVE-2026-89120 - A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorizat

CVE-2026-89118 - SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources an

CVE-2026-89117 - SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into

CVE-2026-89116 - The affected code used child_process.execSync with a shell string for generator installation and uni

CVE-2026-89113 - SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorpora

CVE-2026-89112 - The admin API endpoint used to retrieve CLA signature records does not consistently enforce the requ

CVE-2026-89111 - The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applic

CVE-2026-89110 - SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal fun

CVE-2026-89108 - SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundarie

CVE-2026-89107 - SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by

CVE-2026-89106 - SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with

CVE-2026-89105 - The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accept

CVE-2026-87689 - The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::Web

CVE-2026-76976 - Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently

CVE-2026-76975 - Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could gener

CVE-2026-76972 - Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence,

CVE-2026-58249 - SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted re

CVE-2026-58242 - SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-priv

CVE-2026-108945 - A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Aff

CVE-2026-108944 - A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb

CVE-2026-108943 - A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokeniz

CVE-2026-108942 - A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8

CVE-2026-96119 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive informa

CVE-2026-93886 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script

CVE-2026-81858 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-19938 - The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_se

CVE-2026-19937 - The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c

CVE-2026-19936 - The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c sha

CVE-2026-18343 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper

CVE-2026-18318 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain

CVE-2026-17487 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the ret

CVE-2026-17484 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improp

CVE-2026-108941 - A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_c

CVE-2026-108940 - A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the functi

CVE-2026-108939 - A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_g

CVE-2026-93892 - IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to

CVE-2026-93891 - IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to

CVE-2026-92832 - IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive i

CVE-2026-85457 - IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary

CVE-2026-84418 - IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forg

CVE-2026-82110 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-82108 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-82103 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain se

CVE-2026-82101 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a d

CVE-2026-82096 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-75782 - IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated priv

CVE-2026-75621 - IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive i

CVE-2026-75095 - IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of

CVE-2026-75076 - IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive

CVE-2026-75063 - IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary

CVE-2026-75061 - IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the sys

CVE-2026-19627 - IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and o

CVE-2026-19622 - IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escal

CVE-2026-19620 - IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrativ

CVE-2026-18541 - IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability

CVE-2026-17475 - IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders an

CVE-2026-109675 - Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control

CVE-2026-109674 - Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some

CVE-2026-109673 - Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulner

CVE-2026-109672 - Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerabilit

CVE-2026-109671 - Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulner

CVE-2026-109670 - Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a stored cross-site scripting vulner

CVE-2026-109669 - Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerabilit

CVE-2026-109668 - Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerabilit

CVE-2026-109667 - Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability

CVE-2026-109666 - Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerabilit

CVE-2026-109665 - Frappe ERPNext before 15.108.0 and 16.x before 16.18.0 contains a missing authorization vulnerabilit

CVE-2026-109664 - Frappe ERPNext before 15.112.0 contains a missing authorization vulnerability that allows authentica

CVE-2026-109663 - Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability cause

CVE-2026-109662 - Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulner

CVE-2026-109661 - Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerabilit

CVE-2026-109660 - Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce pro

CVE-2026-109659 - Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a missing authorization vulnerabilit

CVE-2026-109658 - Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerabilit

CVE-2026-109657 - Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows

CVE-2026-109656 - Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerabilit

CVE-2026-109655 - Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerabilit

CVE-2026-109654 - Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerabilit

CVE-2026-109653 - Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulner

CVE-2026-109652 - Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vul

CVE-2026-109651 - Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulner

CVE-2026-109650 - Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a missing authorization vulnerabilit