CVE-2026-16940 - The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before d

CVE-2026-48331 - Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that

CVE-2026-48330 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-48323 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a

CVE-2026-69085 - SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint

CVE-2026-69084 - SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-su

CVE-2026-69083 - SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetConten

CVE-2026-18452 - DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauth

CVE-2026-66803 - Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a ne

CVE-2026-48449 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu