CVE-2026-107295 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107294 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107293 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107292 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107291 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107290 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-105436 - Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object In

CVE-2026-104078 - Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 S

CVE-2026-104077 - Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers

CVE-2026-95208 - An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2

CVE-2026-19585 - HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to

CVE-2026-107678 - FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in

CVE-2026-107677 - FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows atta

CVE-2026-107676 - FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plu

CVE-2026-107675 - FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp

CVE-2026-107660 - FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability i

CVE-2026-107289 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107288 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107287 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-106177 - A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local pri

CVE-2026-9209 - mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Logi

CVE-2026-95125 - libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafte

CVE-2026-93034 - SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder uncondit

CVE-2026-93017 - The `insights-operator-gather` ClusterRole grants the operator's service account read access to secr

CVE-2026-14999 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14992 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14988 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14905 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14888 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14509 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14508 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14507 - IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause

CVE-2026-14502 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14497 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14496 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14273 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14269 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-13258 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-13257 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-12859 - Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allo

CVE-2026-107640 - Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/use

CVE-2026-107639 - ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerabili

CVE-2026-107638 - pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication

CVE-2026-107637 - pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in

CVE-2026-107636 - pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that al

CVE-2026-107635 - Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that

CVE-2026-107634 - Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_ne

CVE-2026-107623 - A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the r

CVE-2026-107604 - A flaw was found in the installation provider and client registration endpoints of the Keycloak iden

CVE-2026-107589 - Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated

CVE-2026-107586 - Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer

CVE-2026-107585 - Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer

CVE-2026-107565 - A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corrupt

CVE-2026-107286 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-105833 - EspoCRM before 10.0.5 contains an insecure direct object reference vulnerability in PersonalAccount\

CVE-2026-105832 - EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped a

CVE-2026-105831 - EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated att

CVE-2026-105830 - league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability

CVE-2026-105829 - League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows

CVE-2026-105828 - Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure

CVE-2026-105827 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105826 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105825 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105824 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105823 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105405 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105404 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105403 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105402 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105401 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105400 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105399 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105398 - Rejected reason: This CVE ID has been rejected as a duplicate.

CVE-2026-105331 - Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Or

CVE-2026-91844 - Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and F

CVE-2026-89290 - Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzome

CVE-2026-88257 - Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP cl

CVE-2026-42698 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab

CVE-2026-27420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-16167 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16165 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16164 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16163 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16161 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16159 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16111 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15824 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15822 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15819 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15784 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15781 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-15762 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14991 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14990 - IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnera

CVE-2026-107615 - An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8

CVE-2026-107614 - An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windo

CVE-2026-107613 - A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Serv

CVE-2026-107612 - Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local

CVE-2026-107611 - An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows befo

CVE-2026-104634 - Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows a

CVE-2026-103663 - Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of

CVE-2026-66479 - Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allo

CVE-2026-62142 - Cross-Site Request Forgery (CSRF) vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request

CVE-2026-62128 - Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrec

CVE-2026-62127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-44038 - A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg

CVE-2026-44037 - Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() a

CVE-2026-44036 - Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parse

CVE-2026-44035 - Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCM

CVE-2026-44034 - A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc o

CVE-2026-44033 - Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML

CVE-2026-44031 - Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of O

CVE-2026-19218 - Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Impo

CVE-2026-16340 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16182 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 t

CVE-2026-16181 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16179 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16178 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16177 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16176 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16170 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-16169 - IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of s

CVE-2026-14521 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-106611 - Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site

CVE-2026-106603 - Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box al

CVE-2026-106600 - Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrec

CVE-2026-106596 - Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcompose

CVE-2026-105893 - Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Ticke

CVE-2026-105891 - Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exp

CVE-2026-105890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-105888 - Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exp

CVE-2026-105887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-105886 - Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploitin

CVE-2026-105878 - Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-produc

CVE-2026-105079 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-105078 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-105076 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-103072 - Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting

CVE-2026-103070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-102784 - Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesCon

CVE-2026-102783 - Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contai

CVE-2026-92555 - Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Exp

CVE-2026-19083 - Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Expo

CVE-2026-107587 - Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5

CVE-2026-107584 - Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbou

CVE-2026-107583 - Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robo

CVE-2026-107582 - Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW respon

CVE-2026-107581 - Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in a

CVE-2026-107580 - Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMa

CVE-2026-107579 - Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot hMail

CVE-2026-107578 - Improper link resolution and external control of file paths in the administrative command-line opera

CVE-2026-107577 - Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received mes

CVE-2026-107576 - Inefficient algorithmic complexity in the inbound DKIM and ARC signature verification of Progressive

CVE-2026-107575 - Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6.3.4

CVE-2026-107574 - Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remo

CVE-2026-107573 - Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 throug

CVE-2026-107572 - Inefficient complexity in the Sieve filter evaluation of Progressive Robot hMailServer 6.2.24 throug

CVE-2026-107570 - heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB wr

CVE-2026-107275 - @fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a

CVE-2026-93509 - The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet tran

CVE-2026-105190 - The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registrati

CVE-2026-104704 - Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to

CVE-2026-104671 - The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration setting

CVE-2026-104660 - Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows o

CVE-2026-104659 - Missing Host header validation and missing throttling of failed administrator sign-ins in the REST A

CVE-2026-104658 - The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6

CVE-2026-103649 - Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 al

CVE-2026-103647 - Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a re

CVE-2026-103517 - The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incomin

CVE-2026-103011 - Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, cal

CVE-2026-103010 - Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFrom

CVE-2026-107510 - An authenticated high privilege user can inject arguments in troubleshooting commands resulting in p

CVE-2026-107503 - In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its comple

CVE-2026-89191 - Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is render

CVE-2026-71896 - An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve oth

CVE-2026-71895 - An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to re

CVE-2026-71183 - An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain infor

CVE-2026-66087 - An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to opera

CVE-2026-66084 - An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modif

CVE-2026-66082 - An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perfo

CVE-2026-4894 - A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext au

CVE-2026-12260 - SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user

CVE-2026-105110 - OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an una

CVE-2026-93699 - Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other ac

CVE-2026-107466 - A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disc

CVE-2026-87428 - In Brocade ASCG before 3.5.0, a  local unauthorized user on the ASCG VM who can issue a request to t

CVE-2026-87426 - An unauthenticated network-based attacker can query specific internal management endpoints on Brocad

CVE-2026-87425 - An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions be

CVE-2026-87424 - A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.

CVE-2026-85490 - When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised en

CVE-2026-85489 - An authentication flaw exists in the Brocade ASCG administrative management service component. An un

CVE-2026-85488 - Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed

CVE-2026-85487 - A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before

CVE-2026-85486 - Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validatio

CVE-2026-85423 - A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3

CVE-2026-85422 - A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryp

CVE-2026-85421 - A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTT

CVE-2026-85097 - The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versi

CVE-2026-94275 - The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an orde

CVE-2026-94258 - The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed

CVE-2026-94246 - The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet acc

CVE-2026-94245 - The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submi

CVE-2026-94244 - The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability che

CVE-2026-86828 - The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files

CVE-2026-86827 - The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered bac

CVE-2026-86826 - The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working dir

CVE-2026-5769 - A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password

CVE-2026-5049 - A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav befo

CVE-2026-5048 - In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories

CVE-2026-5047 - A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authenticati

CVE-2026-107459 - The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated r

CVE-2026-105260 - The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify th

CVE-2026-105198 - The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns t

CVE-2026-105197 - The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff u

CVE-2026-105196 - The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorizat

CVE-2026-105195 - The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a low

CVE-2026-105194 - The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to

CVE-2026-105193 - The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes wi

CVE-2026-104646 - The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several ga

CVE-2026-104645 - The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify aut

CVE-2026-103692 - The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce che

CVE-2026-103646 - The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logg

CVE-2026-103309 - The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translatio

CVE-2026-94587 - A buffer overflow vulnerability exists in the WebTools administrative interface handling configurati

CVE-2026-94586 - A command injection vulnerability exists in the WebTools administrative interface handling configura

CVE-2026-94585 - An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS v

CVE-2026-94581 - An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric

CVE-2026-94579 - An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cl

CVE-2026-94577 - A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorizati

CVE-2026-94576 - An authentication logic and privilege escalation vulnerability exists in the account management inte

CVE-2026-87677 - An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric O

CVE-2026-87664 - A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS ver

CVE-2026-87663 - An authentication bypass and command injection vulnerability exists in the inter-switch remote execu

CVE-2026-87662 - Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download prot

CVE-2026-87661 - Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configu

CVE-2026-17609 - The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory

CVE-2026-17196 - The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File T

CVE-2026-107450 - In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/s

CVE-2026-107449 - linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to Item

CVE-2023-5649 - An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG befor

CVE-2023-5648 - In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in vari

CVE-2026-94584 - A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabr

CVE-2026-94580 - An arbitrary file and directory deletion vulnerability exists in the REST API management interface h

CVE-2026-94575 - A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an

CVE-2026-87688 - An input validation vulnerability exists in the security certificate management component of the Bro

CVE-2026-87687 - An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.

CVE-2026-87685 - An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade

CVE-2026-87675 - An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fa

CVE-2026-87674 - A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS

CVE-2026-87673 - An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Bro