CVE-2026-75799 - The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it

CVE-2026-19438 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB

CVE-2026-18365 - The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of

CVE-2026-18364 - The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several

CVE-2026-16264 - The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its su

CVE-2026-14321 - The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it

CVE-2025-15696 - The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor

CVE-2022-4997 - The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a pay

CVE-2026-96258 - A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. T

CVE-2026-96257 - A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function

CVE-2026-95958 - A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_par

CVE-2026-95957 - A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This i

CVE-2026-95930 - A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vul

CVE-2026-95929 - A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function

CVE-2026-91777 - Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs

CVE-2026-91776 - TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deseriali

CVE-2026-89425 - UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token t

CVE-2026-95928 - A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the

CVE-2026-95927 - A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects

CVE-2026-95926 - A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted

CVE-2026-96273 - Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), ca

CVE-2026-96272 - ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search end

CVE-2026-96271 - Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mut

CVE-2026-95925 - A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected elem

CVE-2026-95924 - A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is

CVE-2026-95897 - A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_np

CVE-2026-95868 - A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-95833 - A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown f

CVE-2026-95830 - A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8

CVE-2026-95829 - A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects th

CVE-2026-94367 - OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulner

CVE-2026-92930 - OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset un

CVE-2026-92929 - OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header suppli

CVE-2026-92928 - OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented reco

CVE-2026-95828 - A vulnerability was determined in Mstfakts College-Management-System. This affects the function sess

CVE-2026-95820 - A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca17261

CVE-2026-61685 - ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list

CVE-2026-57576 - plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.

CVE-2026-18176 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18173 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18172 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18170 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause

CVE-2026-18169 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18163 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut

CVE-2026-18162 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut

CVE-2026-95819 - A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca

CVE-2026-19202 - A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google

CVE-2026-18161 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18156 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18154 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18153 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18152 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge

CVE-2026-18137 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut

CVE-2026-18134 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain

CVE-2026-18133 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18132 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18131 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execut

CVE-2026-18124 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain

CVE-2026-18123 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause

CVE-2026-18114 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read a

CVE-2026-18095 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-18074 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perfor

CVE-2026-18066 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain

CVE-2026-17647 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute

CVE-2026-17646 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-17645 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-17644 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain un

CVE-2026-17643 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain

CVE-2026-17637 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacke

CVE-2026-17636 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated atta

CVE-2026-17635 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perfor

CVE-2026-17620 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (

CVE-2026-17618 - IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated at

CVE-2026-17472 - IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unau

CVE-2026-17465 - IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of ser

CVE-2026-17102 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-16672 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-16469 - IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker t

CVE-2026-16468 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-16426 - IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow

CVE-2026-16346 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-15915 - IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to

CVE-2025-36084 - IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow

CVE-2025-12767 - IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a s

CVE-2026-96269 - GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untruste

CVE-2026-96260 - Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t

CVE-2026-96259 - Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t

CVE-2026-95815 - OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to

CVE-2026-95814 - Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-

CVE-2026-95813 - e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in Pagin

CVE-2026-95812 - ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_

CVE-2026-94450 - Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow

CVE-2026-91018 - lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, me

CVE-2026-89019 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-88020 - Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page gener

CVE-2026-77987 - A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub E

CVE-2026-77912 - A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that al

CVE-2026-77426 - Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contain

CVE-2026-77425 - Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:pro

CVE-2026-76910 - Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /

CVE-2026-76909 - Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval e

CVE-2026-75101 - An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any au

CVE-2026-67615 - openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allow

CVE-2026-62364 - wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discove

CVE-2026-94574 - A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybor

CVE-2026-89282 - The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation

CVE-2026-89281 - The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuratio

CVE-2026-88624 - Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to ex

CVE-2026-88419 - An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m

CVE-2026-88418 - CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no

CVE-2026-88416 - MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

CVE-2026-88350 - An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_ut

CVE-2026-88345 - An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-len

CVE-2026-88344 - An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-len

CVE-2026-88341 - A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule fil

CVE-2026-88340 - An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yr

CVE-2026-88339 - A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7

CVE-2026-87121 - lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain

CVE-2026-83805 - Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the g

CVE-2026-83801 - Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a

CVE-2026-79767 - Gardener implements the automated management and operation of Kubernetes clusters as a service. Prio

CVE-2026-77322 - SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in

CVE-2026-76717 - A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclos

CVE-2026-76716 - Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unautho

CVE-2026-76715 - A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable

CVE-2026-76714 - Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users

CVE-2026-76713 - A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (AL

CVE-2026-76712 - A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized ac

CVE-2026-76711 - A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted proces

CVE-2026-76710 - A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allo

CVE-2026-76709 - A vulnerability exists in the internal administrative component of Analytics and Location Engine (AL

CVE-2026-76708 - A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlyi

CVE-2026-75432 - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scan

CVE-2026-65829 - MPXJ is an open source library to read and write project plans from a variety of file formats and da

CVE-2026-63628 - mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosignin

CVE-2026-63627 - mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPolicy in src/

CVE-2026-63104 - Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authen

CVE-2026-62985 - request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved

CVE-2026-61570 - MPXJ is an open source library to read and write project plans from a variety of file formats and da

CVE-2026-59991 - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.

CVE-2026-58268 - SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSi

CVE-2026-47116 - LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest accoun

CVE-2026-28325 - SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code exec

CVE-2026-28324 - SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code exec

CVE-2026-95862 - A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability foun

CVE-2026-95861 - A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability f

CVE-2026-95831 - Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Pyth

CVE-2026-94462 - Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5

CVE-2026-91130 - Home Assistant is open source home automation software focused on local control and privacy. Prior t

CVE-2026-91129 - Home Assistant is open source home automation software focused on local control and privacy. Prior t

CVE-2026-89277 - CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could re

CVE-2026-88415 - MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content fie

CVE-2026-88414 - MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (G

CVE-2026-84396 - InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an app

CVE-2026-84395 - Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in

CVE-2026-83964 - Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to dis

CVE-2026-83963 - Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbit

CVE-2026-83962 - Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result i

CVE-2026-82000 - Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability

CVE-2026-81999 - Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability

CVE-2026-81998 - Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbit

CVE-2026-81995 - Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that co

CVE-2026-79906 - Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbit

CVE-2026-77558 - A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found

CVE-2026-77556 - A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found

CVE-2026-77555 - A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability foun

CVE-2026-77544 - A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability foun

CVE-2026-77399 - icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 u

CVE-2026-77272 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77269 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77268 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77266 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77262 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77259 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77257 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77256 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77255 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77254 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77253 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77249 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77248 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77247 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77246 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-76194 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-76192 - InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an app

CVE-2026-75745 - Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that coul

CVE-2026-75744 - Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability

CVE-2026-75743 - Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability

CVE-2026-75698 - Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could

CVE-2026-75697 - Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-75689 - Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-75686 - Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitra

CVE-2026-75684 - Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-75682 - Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command (

CVE-2026-75676 - Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary cod

CVE-2026-75665 - Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code

CVE-2026-75663 - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu

CVE-2026-75658 - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu

CVE-2026-75656 - Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive

CVE-2026-75655 - Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code ex

CVE-2026-75649 - Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code

CVE-2026-75638 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-75634 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-75633 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-75632 - CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could

CVE-2026-63386 - js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key

CVE-2026-57149 - plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as

CVE-2026-48361 - Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-37604 - pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _pro

CVE-2026-37603 - Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software

CVE-2026-34689 - Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path T

CVE-2026-19480 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-95660 - A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is a

CVE-2026-95657 - A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the f

CVE-2026-95656 - A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects

CVE-2026-95624 - The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly

CVE-2026-94384 - Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principa

CVE-2026-93345 - MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labell

CVE-2026-8849 - Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation

CVE-2026-89276 - Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injecti

CVE-2026-89275 - Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injecti

CVE-2026-86056 - Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler

CVE-2026-86054 - Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack b

CVE-2026-85995 - Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ update

CVE-2026-85288 - Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enfor

CVE-2026-85279 - Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack b

CVE-2026-84412 - Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injecti

CVE-2026-83660 - Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that

CVE-2026-83597 - Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent

CVE-2026-82443 - Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that

CVE-2026-82013 - Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that

CVE-2026-82011 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-82010 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-82009 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-82008 - Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could re

CVE-2026-82003 - Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could re

CVE-2026-7866 - Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overfl

CVE-2026-77605 - Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run

CVE-2026-77274 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77271 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77270 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77267 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77265 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77261 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77260 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77258 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77252 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77251 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77250 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-77244 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).