CVE-2026-86539 - knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embeddin

CVE-2026-86538 - knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/prev

CVE-2026-86439 - knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing atta

CVE-2026-82758 - Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unau

CVE-2026-82757 - Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server all

CVE-2026-82756 - Improper Encoding or Escaping of Output vulnerability in ash-project ash_authentication_oauth2_serve

CVE-2026-82755 - Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2

CVE-2026-82754 - Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server

CVE-2026-82753 - Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication

CVE-2026-82586 - Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lu

CVE-2026-82584 - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter a

CVE-2026-81638 - Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an atta

CVE-2026-86438 - Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire a

CVE-2026-86437 - Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with o

CVE-2026-86436 - Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload end

CVE-2026-75650 - Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engi

CVE-2026-86287 - Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASC

CVE-2026-16028 - Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream

CVE-2026-86506 - In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof

CVE-2026-86505 - In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to Je

CVE-2026-86504 - In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev

CVE-2026-86503 - In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kuber

CVE-2026-86502 - In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server a

CVE-2026-86501 - In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log

CVE-2026-86500 - In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update

CVE-2026-86499 - In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any use

CVE-2026-86498 - In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed

CVE-2026-86497 - In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed

CVE-2026-86496 - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters ex

CVE-2026-86495 - In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base

CVE-2026-86494 - In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links

CVE-2026-86493 - In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to crea

CVE-2026-86492 - In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub

CVE-2026-86491 - In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon

CVE-2026-86490 - In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled

CVE-2026-86489 - In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues a

CVE-2026-86488 - In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints expo

CVE-2026-86487 - In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard u

CVE-2026-86486 - In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secre

CVE-2026-86485 - In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webh

CVE-2026-86484 - In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stor

CVE-2026-86483 - In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was pos

CVE-2026-86482 - In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privi

CVE-2026-86481 - In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project

CVE-2026-86480 - In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service an

CVE-2026-86479 - In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allow

CVE-2026-86478 - In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpde

CVE-2026-80176 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80167 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80166 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80126 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80125 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80058 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79975 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79639 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-86469 - A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and

CVE-2026-86321 - A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the fu

CVE-2026-80127 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80054 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79943 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79691 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79643 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79642 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-86319 - A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerabil

CVE-2026-86318 - A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePa

CVE-2026-86317 - A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server

CVE-2026-80057 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80056 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-7861 - Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Custo

CVE-2026-79645 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79644 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-78488 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-78480 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-6377 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next

CVE-2026-19843 - A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch comm

CVE-2026-18922 - A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried

CVE-2026-18453 - A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling

CVE-2026-18355 - A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). I

CVE-2026-86452 - Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform pers

CVE-2026-86310 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element

CVE-2026-86309 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown functio

CVE-2026-86308 - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601ef

CVE-2026-86307 - A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d

CVE-2026-80170 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80164 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80131 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80130 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80129 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80128 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-79734 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-78487 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-76560 - A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an

CVE-2026-14444 - The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to

CVE-2026-12757 - The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin fo

CVE-2026-8279 - The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing

CVE-2026-86451 - Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID thr

CVE-2026-86441 - Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that di

CVE-2026-86440 - Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the B

CVE-2026-86435 - commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnot

CVE-2026-86434 - league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulne

CVE-2026-86433 - commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attribu

CVE-2026-86432 - commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer

CVE-2026-86431 - league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scrip

CVE-2026-86430 - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced

CVE-2026-86429 - The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains qu

CVE-2026-86428 - commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the Attrib

CVE-2026-86427 - LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter tha

CVE-2026-86426 - LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows u

CVE-2026-86425 - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability

CVE-2026-86424 - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerabilit

CVE-2026-86423 - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability

CVE-2026-86422 - ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforc

CVE-2026-86421 - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted

CVE-2026-86420 - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operatio

CVE-2026-86419 - Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations

CVE-2026-86418 - Affected versions of MISP expose organisation metadata through the dashboard organisation picker wit

CVE-2026-86417 - Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::

CVE-2026-86416 - ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGr

CVE-2026-86408 - Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys thr

CVE-2026-86306 - A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601

CVE-2026-86305 - A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf4

CVE-2026-86303 - A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Aff

CVE-2026-86302 - A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnera

CVE-2026-80238 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80178 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80135 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80134 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80133 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80132 - ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.

CVE-2026-79678 - A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-

CVE-2026-76578 - A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does

CVE-2026-6431 - The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi

CVE-2026-6223 - Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality

CVE-2026-61410 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-61409 - Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Imprope

CVE-2026-4945 - The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is

CVE-2026-12853 - The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i

CVE-2022-51018 - PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count,

CVE-2022-51017 - PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submi

CVE-2022-51016 - PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the s

CVE-2022-51015 - PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK an

CVE-2022-51014 - PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePac

CVE-2022-51013 - PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item N

CVE-2022-51012 - PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization

CVE-2022-51011 - PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before

CVE-2022-51010 - PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in item

CVE-2026-86404 - EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObj

CVE-2026-86301 - A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unkn

CVE-2026-86300 - A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of t

CVE-2026-86299 - A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_ping

CVE-2026-78325 - Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android th

CVE-2026-2390 - The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load mod

CVE-2026-86351 - Affected versions of MISP validate the user-configurable homepage by checking only whether the suppl

CVE-2026-86298 - A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacte

CVE-2026-86297 - A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel

CVE-2026-86296 - A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function str

CVE-2026-86295 - A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the fil

CVE-2026-86294 - A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this

CVE-2026-85640 - Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escal

CVE-2026-85201 - In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a w

CVE-2026-82325 - A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows

CVE-2026-77699 - Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege

CVE-2026-77697 - Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escal

CVE-2026-19204 - A client may send a WebSocket frame with an unknown opcode and a very large declared payload length,

CVE-2025-52657 - HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without an

CVE-2025-52652 - HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulat

CVE-2025-52651 - HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpe

CVE-2026-86347 - Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() b

CVE-2026-86293 - A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerab

CVE-2026-86292 - A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unk

CVE-2026-86291 - A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impa

CVE-2026-84173 - In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incor

CVE-2026-77698 - Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privileg

CVE-2026-86342 - Affected versions of MISP contain improper authorization checks in the freetext feed preview functio

CVE-2026-86332 - A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/n

CVE-2026-86290 - A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown f

CVE-2026-86289 - A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String o

CVE-2026-86288 - A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unkno

CVE-2026-86285 - A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function Atta

CVE-2026-84732 - Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated at

CVE-2026-84186 - Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaSho

CVE-2026-18796 - Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that

CVE-2026-14297 - A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access C

CVE-2026-86284 - A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf0

CVE-2026-86282 - A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddf

CVE-2026-86281 - A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examina

CVE-2026-86280 - A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-84256 - An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows

CVE-2026-84226 - OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authentica

CVE-2026-82312 - OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated user

CVE-2026-81830 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to

CVE-2026-81738 - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an

CVE-2026-78254 - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can

CVE-2026-78221 - An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 throug

CVE-2026-78043 - The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users

CVE-2026-14296 - When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio

CVE-2026-86279 - A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-86278 - A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination Syste

CVE-2026-86277 - A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-79698 - A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB,

CVE-2026-79697 - A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB,

CVE-2026-86276 - A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.

CVE-2026-86275 - A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination Sy

CVE-2026-86274 - A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. Th

CVE-2026-86273 - A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the func

CVE-2026-86272 - A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.600

CVE-2026-86271 - A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the f

CVE-2026-86270 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element

CVE-2026-86315 - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 al

CVE-2026-86269 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unk

CVE-2026-86268 - A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown fu

CVE-2026-86267 - A security vulnerability has been detected in itsourcecode Information System Society Membership Sys

CVE-2026-86265 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vuln

CVE-2026-86314 - Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung wa

CVE-2026-86313 - Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue

CVE-2026-86264 - A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected i

CVE-2026-86263 - A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.

CVE-2026-86262 - A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d6

CVE-2026-86261 - A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8

CVE-2026-86260 - A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef

CVE-2026-86245 - A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulner

CVE-2026-86244 - A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the f

CVE-2026-86241 - A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of t

CVE-2026-86240 - A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchI

CVE-2026-86239 - A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function

CVE-2026-20518 - In geniezone, there is a possible information disclosure due to a missing bounds check. This could l

CVE-2026-20517 - In geniezone, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20516 - In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could

CVE-2026-20515 - In gpu, there is a possible system crash due to use after free. This could lead to local information

CVE-2026-20514 - In Audio HAL, there is a possible information disclosure due to a missing permission check. This cou

CVE-2026-20513 - In Audio HAL, there is a possible information disclosure due to improper input validation. This coul

CVE-2026-20512 - In Audio HAL, there is a possible escalation of privilege due to improper input validation. This cou

CVE-2026-20511 - In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to l

CVE-2026-20510 - In camera middleware, there is a possible escalation of privilege due to double free. This could lea

CVE-2026-20509 - In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead

CVE-2026-20508 - In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to

CVE-2026-20507 - In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20506 - In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20504 - In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote

CVE-2026-20503 - In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote

CVE-2026-20502 - In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to l

CVE-2026-20501 - In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to l

CVE-2026-20500 - In Modem, there is a possible system crash due to improper input validation. This could lead to loca

CVE-2026-16876 - An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user cou

CVE-2026-86238 - A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element

CVE-2026-86237 - A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the fu

CVE-2026-86236 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects so

CVE-2026-86235 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unk

CVE-2026-86234 - A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown

CVE-2026-86233 - A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected