CVE-2026-14948 - A low privileged remote attacker can hijack an active administrative session without needing to know

CVE-2026-14947 - A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal se

CVE-2026-14946 - A high privileged remote attacker can upload a .php file and then request it directly from /uploads/

CVE-2026-76569 - Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1

CVE-2026-76565 - Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Car

CVE-2026-76564 - Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.

CVE-2026-75948 - Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The fronte

CVE-2025-14601 - An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative

CVE-2026-71368 - F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged

CVE-2026-14163 - In affected versions of Octopus Server under certain circumstances it is possible for sensitive vari

CVE-2025-14602 - The application generates uploaded file names using a weak and predictable method based on the reque

CVE-2026-75963 - The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up t

CVE-2026-75860 - The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verifica

CVE-2026-74992 - The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives

CVE-2026-73542 - Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle at

CVE-2026-19699 - The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of i

CVE-2026-19697 - The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the uploa

CVE-2026-19615 - The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG f

CVE-2026-17153 - The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all version

CVE-2026-15049 - The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a

CVE-2026-13405 - The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom

CVE-2026-76957 - libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-

CVE-2026-76956 - In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to ins

CVE-2026-19582 - Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to u

CVE-2026-76800 - A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of th

CVE-2026-76799 - A weakness has been identified in code-projects Login Registration System 1.0. This affects an unkno

CVE-2026-76795 - A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of th

CVE-2026-76785 - A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Aff

CVE-2026-76783 - A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown

CVE-2026-75628 - Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login be

CVE-2026-8619 - An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150

CVE-2026-76764 - A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an un

CVE-2026-76762 - A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an

CVE-2022-4996 - A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing

CVE-2026-76929 - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76928 - X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76927 - H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76926 - BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76924 - Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76923 - Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial o

CVE-2026-76922 - Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of

CVE-2026-76921 - CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76920 - 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76919 - ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76918 - SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76917 - Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial

CVE-2026-76891 - Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76890 - Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76889 - UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76888 - RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76887 - Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of serv

CVE-2026-76886 - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76885 - Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76884 - ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76883 - Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76882 - Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of

CVE-2026-76881 - CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76880 - RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76879 - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76761 - A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExe

CVE-2026-76760 - A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the f

CVE-2026-19563 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-19562 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-19561 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-18862 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-18502 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-76878 - In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects q

CVE-2026-76850 - LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine

CVE-2026-76832 - Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that al

CVE-2026-76591 - A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function

CVE-2026-76590 - A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some

CVE-2026-76589 - A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000

CVE-2026-76405 - In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the

CVE-2026-76404 - In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execut

CVE-2026-76403 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network

CVE-2026-76402 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76401 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76400 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76399 - In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app

CVE-2026-76398 - In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76397 - In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and

CVE-2026-76396 - In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capabil

CVE-2026-76395 - In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute ar

CVE-2026-76394 - In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "p

CVE-2026-76393 - In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model bein

CVE-2026-76392 - In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76391 - In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76390 - In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated u

CVE-2026-76389 - In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a

CVE-2026-76388 - In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterpri

CVE-2026-76387 - In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security ro

CVE-2026-76386 - In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to

CVE-2026-76385 - In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission t

CVE-2026-76384 - In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a

CVE-2026-76383 - In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who ho

CVE-2026-76382 - In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76381 - In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a

CVE-2026-76380 - In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role wi

CVE-2026-76379 - In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permiss

CVE-2026-76378 - In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds

CVE-2026-76377 - In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with perm

CVE-2026-76376 - In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76375 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76374 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76373 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76372 - In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playboo

CVE-2026-76371 - In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in

CVE-2026-76370 - In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use t

CVE-2026-76369 - In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outsi

CVE-2026-76368 - In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permis

CVE-2026-76367 - In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role coul

CVE-2026-76366 - In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representatio

CVE-2026-76365 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou

CVE-2026-76364 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou

CVE-2026-76363 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbit

CVE-2026-76362 - In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffi

CVE-2026-76361 - In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/suppor

CVE-2026-76360 - In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest

CVE-2026-76359 - In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversa

CVE-2026-76358 - In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal dur

CVE-2026-76357 - In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a craf

CVE-2026-76356 - In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a

CVE-2026-76355 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the informat

CVE-2026-76354 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76353 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76352 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76351 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76350 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76349 - In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick

CVE-2026-76348 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk ro

CVE-2026-76347 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76346 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76345 - In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage

CVE-2026-76344 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76343 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76342 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76341 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76340 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterpri

CVE-2026-76339 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76338 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76337 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76336 - In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "powe

CVE-2026-76335 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who do

CVE-2026-76334 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76333 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76332 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76331 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76330 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76329 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76328 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76327 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76326 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76325 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76324 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76323 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76322 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user"

CVE-2026-76321 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76320 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76319 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that d

CVE-2026-76318 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76317 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76316 - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76315 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76314 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76313 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76312 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76311 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76310 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76309 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that d

CVE-2026-76263 - In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "powe

CVE-2026-76262 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus servi

CVE-2026-76261 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76260 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76259 - In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local

CVE-2026-76258 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76257 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76256 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76255 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the

CVE-2026-76254 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated u

CVE-2026-76253 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76252 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who

CVE-2026-76251 - In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin"

CVE-2026-69550 - Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information

CVE-2026-63123 - Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev ser

CVE-2026-59992 - Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0

CVE-2025-36398 - IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0

CVE-2025-36255 - IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0

CVE-2025-36254 - IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0

CVE-2026-76827 - A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed

CVE-2026-76584 - A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some

CVE-2026-76583 - A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is a

CVE-2026-76582 - A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/syst

CVE-2026-76576 - A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDown

CVE-2026-76139 - A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a s

CVE-2026-75616 - An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmwa

CVE-2026-75596 - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2

CVE-2026-75595 - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.

CVE-2026-75569 - A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remot

CVE-2026-75476 - Tanium addressed a compression bomb vulnerability in Threat Response.

CVE-2026-69222 - LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2

CVE-2026-68555 - Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TUR

CVE-2026-68554 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path att

CVE-2026-68553 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticat

CVE-2026-68552 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthentic

CVE-2026-62727 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-61556 - LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 unt

CVE-2026-54743 - Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/l

CVE-2026-54741 - Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, Lemmy b

CVE-2026-54740 - Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, a lower

CVE-2026-54739 - Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's l

CVE-2026-54738 - Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web

CVE-2026-54494 - Koel is a free, open-source music streaming solution. Prior to 9.7.1, App\Helpers\Network::isPublicH

CVE-2026-54493 - Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible create

CVE-2026-54492 - Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible create

CVE-2026-54491 - Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fet

CVE-2026-53549 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-53548 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-53547 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-53546 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-53545 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-53542 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-4937 - IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 throug

CVE-2026-4936 - IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.0

CVE-2026-18849 - IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update pr

CVE-2026-18544 - IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image polic

CVE-2026-18102 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memor

CVE-2026-17015 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-14978 - HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclu

CVE-2026-14514 - IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial

CVE-2026-12634 - The NVS backend of the Zephyr settings subsystem (subsys/settings/src/settings_nvs.c) reads stored s

CVE-2026-12633 - The IPv6 neighbor-discovery code in subsys/net/ip/ipv6_nbr.c processes the 6LoWPAN Context Option (6

CVE-2026-12522 - The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() in drivers

CVE-2026-11617 - Tanium addressed a compression bomb vulnerability in Findings.

CVE-2026-76647 - Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JS

CVE-2026-76574 - A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the

CVE-2026-76572 - A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3.5.0-4. The affected element is

CVE-2026-75593 - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and

CVE-2026-75112 - A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insuf

CVE-2026-74228 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-74227 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-74226 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-68901 - Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/export, /api

CVE-2026-68900 - Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/

CVE-2026-68899 - Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/fileValidation

CVE-2026-68561 - Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) ru

CVE-2026-68560 - Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidation.js interpolated

CVE-2026-68559 - Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boardId/export

CVE-2026-68558 - Wekan is open source kanban built with Meteor. From 8.36 until 9.74, the outgoing webhook Integratio

CVE-2026-67189 - pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnera

CVE-2026-63722 - ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthentic