CVE-2026-76087 - Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous form

CVE-2026-76086 - Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integra

CVE-2026-75131 - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability t

CVE-2026-71465 - RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) ins

CVE-2026-71464 - LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash

CVE-2026-71463 - Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic

CVE-2026-71462 - StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-suppl

CVE-2026-71461 - HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, a

CVE-2026-71460 - /api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, su

CVE-2026-71459 - JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.chec

CVE-2026-71458 - URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects

CVE-2026-63132 - OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handle

CVE-2026-63131 - OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/

CVE-2026-61814 - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work wh

CVE-2026-61695 - Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0

CVE-2026-59990 - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON

CVE-2026-55632 - GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API u

CVE-2026-55456 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-52744 - GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact a

CVE-2026-91775 - LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafte

CVE-2026-88840 - BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated Clien

CVE-2026-88839 - BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-o

CVE-2026-88837 - BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, invert

CVE-2026-88835 - BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an

CVE-2026-88831 - BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a z

CVE-2026-86938 - A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to exe

CVE-2026-86934 - An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests

CVE-2026-86930 - An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a sp

CVE-2026-86926 - A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine a

CVE-2026-86867 - Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains mu

CVE-2026-18944 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason:

CVE-2026-96808 - In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive reposito

CVE-2026-96807 - In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a syml

CVE-2026-96804 - MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=

CVE-2026-96775 - MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False securi

CVE-2026-96759 - orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanSta

CVE-2026-96758 - orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer

CVE-2026-96757 - orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Co

CVE-2026-96756 - orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory gener

CVE-2026-96755 - orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect gen

CVE-2026-96754 - orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator tha

CVE-2026-96656 - Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be exec

CVE-2026-96655 - Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or

CVE-2026-96654 - Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOn

CVE-2026-96652 - Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Pl

CVE-2026-96651 - Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it

CVE-2026-96514 - A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the

CVE-2026-96513 - A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown p

CVE-2026-95848 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or auth

CVE-2026-95847 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's m

CVE-2026-95846 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a clie

CVE-2026-95845 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum l

CVE-2026-95844 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of to

CVE-2026-95843 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-su

CVE-2026-95842 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only Inter

CVE-2026-93349 - Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console com

CVE-2026-88832 - BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a hea

CVE-2026-88830 - A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication h

CVE-2026-85724 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are config

CVE-2026-6669 - Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a

CVE-2026-6668 - Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthentic

CVE-2026-19888 - Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer th

CVE-2025-63564 - SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to ex

CVE-2026-96675 - alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fa

CVE-2026-96674 - alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/top

CVE-2026-96673 - Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that all

CVE-2026-96672 - Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_f

CVE-2026-93769 - HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user

CVE-2026-79310 - webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be

CVE-2026-79306 - CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the

CVE-2026-79304 - CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /file

CVE-2026-6327 - IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages du

CVE-2026-4921 - IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information

CVE-2026-3626 - IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a

CVE-2026-19267 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication

CVE-2026-19179 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipu

CVE-2026-19087 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve

CVE-2026-18875 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unau

CVE-2026-18872 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scri

CVE-2026-18505 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the P

CVE-2026-18490 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote

CVE-2026-18185 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access

CVE-2026-18184 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18181 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass

CVE-2026-18180 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-96611 - FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t w

CVE-2026-96609 - Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an

CVE-2026-96600 - Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks t

CVE-2026-96599 - Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographica

CVE-2026-96276 - If a malicious SDK container declares an extension point with a crafted `directory` path, and a deve

CVE-2026-96275 - A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary loc

CVE-2026-92419 - WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} end

CVE-2026-92164 - Streamlink is a CLI utility which pipes video streams from various services into a video player. Pri

CVE-2026-88974 - WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in sr

CVE-2026-73858 - Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 throug

CVE-2026-73591 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusio

CVE-2026-73589 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.

CVE-2026-73588 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing A

CVE-2026-73587 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-73586 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insuffic

CVE-2026-71178 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of N

CVE-2026-71177 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-63002 - REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/

CVE-2026-63001 - REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in reda

CVE-2026-63000 - REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in

CVE-2026-62998 - REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redax

CVE-2026-61834 - scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherit

CVE-2026-61413 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-55610 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-96560 - LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when

CVE-2026-96559 - Rejected reason: This ID was for testing

CVE-2026-96512 - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restriction

CVE-2026-86708 - ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of

CVE-2026-86683 - ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user t

CVE-2026-86681 - ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permission

CVE-2026-86679 - ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permission

CVE-2026-86678 - ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user t

CVE-2026-86677 - ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user t

CVE-2026-59167 - SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. P

CVE-2026-18179 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear

CVE-2026-18177 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut

CVE-2026-12974 - A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue aff

CVE-2026-95676 - A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync firs

CVE-2026-86247 - Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate veri

CVE-2026-86246 - Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled

CVE-2026-86243 - Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious

CVE-2026-84091 - The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the pay

CVE-2026-77112 - Server-Side request forgery (SSRF) vulnerability in Global IT Informatics Technology Services Inc. W

CVE-2026-76980 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-76979 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-76978 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-75825 - ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enab

CVE-2026-19599 - ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Exe

CVE-2026-96446 - A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occur

CVE-2026-96445 - A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management

CVE-2026-87022 - Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket

CVE-2026-86350 - Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in

CVE-2026-86248 - CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled v

CVE-2026-84791 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-84789 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-84787 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-80444 - URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS

CVE-2026-79677 - Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability i

CVE-2026-78437 - Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends

CVE-2026-78383 - Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauth

CVE-2026-78253 - Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cau

CVE-2026-77791 - Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close m

CVE-2026-77762 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab

CVE-2026-77756 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap

CVE-2026-76183 - Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constrai

CVE-2026-75973 - Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured w

CVE-2026-73581 - Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenS

CVE-2026-15358 - ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vuln

CVE-2026-14913 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to

CVE-2026-12370 - ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.6

CVE-2026-96456 - The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands.

CVE-2026-96455 - The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, PO

CVE-2026-96442 - A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using l

CVE-2026-90950 - The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its

CVE-2026-87978 - The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on o

CVE-2026-87848 - The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentica

CVE-2026-87071 - The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form s

CVE-2026-87070 - The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a tru

CVE-2026-86612 - The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrat

CVE-2026-86604 - The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing

CVE-2026-86601 - The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content b

CVE-2026-5696 - Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter

CVE-2026-5695 - Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows

CVE-2026-96454 - Pake turns a website into a desktop application built on Tauri. Every application it generates inher

CVE-2026-96443 - Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve r

CVE-2026-95627 - When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript

CVE-2026-95626 - Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution

CVE-2026-94251 - A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/

CVE-2026-94243 - A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin eviden

CVE-2026-92001 - Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability i

CVE-2026-91999 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-91928 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-91852 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-79616 - Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.p

CVE-2026-73192 - An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vul

CVE-2026-95625 - The Tauri updater plugin verifies update binaries using minisign signatures, but the signature cover

CVE-2026-93368 - The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL In

CVE-2026-42801 - NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer M

CVE-2026-31377 - An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an un

CVE-2026-15027 - CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote a

CVE-2026-92378 - A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware

CVE-2026-91818 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annota

CVE-2026-91817 - A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide s

CVE-2026-91816 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reen

CVE-2026-91815 - Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in t

CVE-2026-91814 - A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally u

CVE-2026-91813 - A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replace

CVE-2026-91812 - A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to

CVE-2026-91811 - A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to

CVE-2026-91810 - A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malfor

CVE-2026-91809 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fi

CVE-2026-91808 - A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF im

CVE-2026-91807 - A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malfor

CVE-2026-91806 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embe

CVE-2026-91805 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A special

CVE-2026-91804 - A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circ

CVE-2026-91803 - A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to u

CVE-2026-91802 - A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decodi

CVE-2026-91801 - A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resource

CVE-2026-91800 - A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due

CVE-2026-91799 - A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array obje

CVE-2026-91798 - A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader du

CVE-2026-91797 - Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name,

CVE-2026-91796 - The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode,

CVE-2026-91795 - Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in

CVE-2026-91794 - An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader

CVE-2026-91793 - When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotatio

CVE-2026-91792 - When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layo

CVE-2026-91791 - When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant exec

CVE-2026-91790 - When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects

CVE-2026-91789 - Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image d

CVE-2026-91788 - When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute au

CVE-2026-50228 - An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer Nitr

CVE-2026-50227 - An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoi

CVE-2026-82331 - Improper link resolution before file access ('link following') vulnerability in the `tar` source plu

CVE-2026-6831 - The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all ve

CVE-2026-5924 - The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

CVE-2026-93528 - The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership

CVE-2026-93511 - The Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature befor

CVE-2026-93510 - The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed

CVE-2026-93508 - The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-

CVE-2026-93507 - The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify

CVE-2026-91077 - The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event

CVE-2026-91073 - The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form sett

CVE-2026-91025 - The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user'

CVE-2026-91024 - The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a

CVE-2026-90985 - The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-

CVE-2026-90951 - The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenti

CVE-2026-89331 - The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned

CVE-2026-88997 - The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key be

CVE-2026-88929 - The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not ch

CVE-2026-87981 - The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on sev

CVE-2026-87979 - The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on t

CVE-2026-87074 - The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to

CVE-2026-87069 - The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or owner

CVE-2026-86842 - The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of it

CVE-2026-86785 - The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation check

CVE-2026-86783 - The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or

CVE-2026-86608 - The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of i

CVE-2026-86603 - The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of i

CVE-2026-86602 - The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of i

CVE-2026-85006 - The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one o

CVE-2026-84743 - The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on

CVE-2026-84742 - The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish

CVE-2026-84741 - The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records