CVE-2026-94047 - A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element i

CVE-2026-94046 - A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the f

CVE-2026-94045 - A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown fu

CVE-2026-94044 - A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb235

CVE-2026-94043 - A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of th

CVE-2026-94042 - A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e

CVE-2026-94041 - A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-88857 - Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla

CVE-2026-88856 - Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla

CVE-2026-88855 - Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery

CVE-2026-88854 - Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension

CVE-2026-94040 - A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function

CVE-2026-94039 - A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoic

CVE-2026-94038 - A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textS

CVE-2026-94037 - A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6

CVE-2026-94036 - A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. Th

CVE-2026-94035 - A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unkn

CVE-2026-94034 - A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some

CVE-2026-94033 - A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability

CVE-2026-94032 - A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of t

CVE-2026-94031 - A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affec

CVE-2026-94030 - A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c1362

CVE-2026-94028 - A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function paylo

CVE-2026-94016 - A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts a

CVE-2026-94015 - A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unk

CVE-2026-92254 - Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Ant

CVE-2026-92253 - Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-V

CVE-2026-92252 - Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow

CVE-2026-90817 - An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing a

CVE-2026-94113 - Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vu

CVE-2026-94112 - mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers

CVE-2026-94111 - Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daem

CVE-2026-94109 - openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerab

CVE-2026-94108 - getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helpe

CVE-2026-94107 - NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.ph

CVE-2026-94106 - getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail

CVE-2026-94105 - NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin passwor

CVE-2026-94104 - NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() e

CVE-2026-94004 - A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of t

CVE-2026-94003 - A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_fro

CVE-2026-93997 - A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this is

CVE-2026-93980 - A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability

CVE-2026-93979 - A security flaw has been discovered in code-projects Internship Management System 1.0. This affects

CVE-2026-93978 - A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this i

CVE-2026-93977 - A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerab

CVE-2026-93976 - A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown functio

CVE-2026-93975 - A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown f

CVE-2026-86555 - The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server informatio

CVE-2026-93974 - A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unkno

CVE-2026-93973 - A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted e

CVE-2026-93972 - A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0.

CVE-2026-93971 - A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the

CVE-2026-93970 - A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown p

CVE-2026-86554 - SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within

CVE-2026-93969 - A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the functio

CVE-2026-93968 - A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of th

CVE-2026-93967 - A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function gene

CVE-2026-93966 - A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the

CVE-2026-92965 - The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting o

CVE-2026-92541 - The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote

CVE-2026-92540 - The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce t

CVE-2026-92423 - The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restric

CVE-2026-92422 - The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value befo

CVE-2026-92410 - The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that prot

CVE-2026-87840 - The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on it

CVE-2026-87839 - The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate

CVE-2026-87068 - The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforce

CVE-2026-87067 - The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instan

CVE-2026-85017 - The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability ch

CVE-2026-84223 - The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uplo

CVE-2026-82842 - The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for

CVE-2026-81654 - The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user

CVE-2026-81653 - The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the us

CVE-2026-81652 - The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the re

CVE-2026-81651 - The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the us

CVE-2026-81650 - The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate

CVE-2026-16542 - The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-sup

CVE-2026-14844 - The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcod

CVE-2026-93965 - A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of th

CVE-2026-93964 - A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the

CVE-2026-93963 - A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects

CVE-2026-93962 - A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element

CVE-2026-93961 - A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the funct

CVE-2026-93960 - A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of

CVE-2026-86553 - SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its

CVE-2026-86552 - SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at run

CVE-2026-93959 - A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue a

CVE-2026-94084 - Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by r

CVE-2026-94083 - Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code

CVE-2026-93958 - A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function syst

CVE-2026-93957 - A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEn

CVE-2026-86551 - The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve th

CVE-2026-94057 - Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent mess

CVE-2026-94056 - Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers

CVE-2026-94055 - Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-fre

CVE-2026-94054 - Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bo

CVE-2026-93993 - Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation p

CVE-2026-93992 - Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allow

CVE-2026-93991 - Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArc

CVE-2026-93990 - Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surr

CVE-2026-93989 - vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generatio

CVE-2026-93988 - QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/aj

CVE-2026-93956 - A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function Sear

CVE-2026-93955 - A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerab

CVE-2026-89155 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-93954 - A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is

CVE-2026-82672 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in el

CVE-2026-82560 - Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document w

CVE-2026-94001 - A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management so

CVE-2026-94000 - A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management so

CVE-2026-93999 - A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access

CVE-2026-93987 - rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve do

CVE-2026-93986 - rclone before 1.75.1 fails to confine names from server and third-party listing responses to the lis

CVE-2026-93985 - OpenPanel js-runtime through 2.3.0 contains a sandbox escape vulnerability in the JavaScript webhook

CVE-2026-93984 - OpenPanel tracking API through 2.3.0 fails to verify client secret cryptographic hash before authori

CVE-2026-93983 - OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authentica

CVE-2026-93982 - OpenPanel through 2.3.0 writes Model Context Protocol authentication tokens from URL query parameter

CVE-2026-93981 - hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of

CVE-2026-78030 - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm att

CVE-2026-9858 - The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in

CVE-2026-9766 - The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions

CVE-2026-9613 - The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization b

CVE-2026-9289 - The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information E

CVE-2026-93742 - A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the

CVE-2026-8354 - The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

CVE-2026-76579 - The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'es

CVE-2026-5410 - The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinne

CVE-2026-1256 - The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scri

CVE-2026-1255 - The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

CVE-2026-18346 - The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc

CVE-2026-9855 - The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_

CVE-2026-9832 - The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verific

CVE-2026-9615 - The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, a

CVE-2026-9232 - The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve

CVE-2026-87917 - The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Script

CVE-2026-85658 - The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict C

CVE-2026-7527 - The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Red

CVE-2026-75959 - The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_t

CVE-2026-6295 - The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all ve

CVE-2026-5400 - The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media

CVE-2026-4792 - The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including

CVE-2026-4327 - The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to

CVE-2026-2422 - The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site S

CVE-2026-2278 - The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a m

CVE-2026-1984 - The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta m

CVE-2026-1641 - The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forg

CVE-2026-1242 - The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in

CVE-2026-15947 - The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

CVE-2026-15946 - The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization p

CVE-2026-15664 - The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnera

CVE-2026-15463 - The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Refl

CVE-2026-15098 - The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '

CVE-2026-13770 - The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin

CVE-2026-13200 - The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in

CVE-2026-13191 - The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter

CVE-2026-12402 - The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripti

CVE-2026-11899 - The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vuln

CVE-2026-11608 - The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

CVE-2026-92435 - The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user

CVE-2026-92430 - The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 doe

CVE-2026-92425 - The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not

CVE-2026-92421 - The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not

CVE-2026-92420 - The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not

CVE-2026-92404 - The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST A

CVE-2026-92403 - The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end for

CVE-2026-92099 - The WPGraphQL Smart Cache WordPress plugin before 2.3.2 does not require authorisation or validate a

CVE-2026-91847 - The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify t

CVE-2026-88926 - The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise a

CVE-2026-88824 - The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST rout

CVE-2026-86814 - The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirm

CVE-2026-86591 - The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its

CVE-2026-85680 - The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user suppli

CVE-2026-85574 - The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check wh

CVE-2026-84750 - The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or ext

CVE-2026-76790 - The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several va

CVE-2026-76554 - The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an im

CVE-2026-19860 - The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficient

CVE-2026-16557 - The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when

CVE-2025-15698 - The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its se

CVE-2026-93741 - A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerab

CVE-2026-92967 - The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' p

CVE-2026-92807 - The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocati

CVE-2026-92229 - The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is

CVE-2026-89334 - The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress i

CVE-2026-89333 - The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure

CVE-2026-89274 - The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versi

CVE-2026-89093 - The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress i

CVE-2026-89081 - The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected

CVE-2026-88944 - The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authoriza

CVE-2026-87909 - The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions

CVE-2026-84434 - The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,

CVE-2026-15760 - The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions

CVE-2026-15660 - The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and i

CVE-2026-13354 - The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Script

CVE-2026-12042 - The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm

CVE-2026-77820 - The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortco

CVE-2026-93923 - SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark do

CVE-2026-93922 - SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without esca

CVE-2026-93921 - SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint,

CVE-2026-77875 - The application protects access through its calculator-style vault passcode, but the stored data is

CVE-2026-93740 - A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formW

CVE-2026-93739 - A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function form

CVE-2026-75885 - A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/d

CVE-2026-93894 - In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .

CVE-2026-93738 - A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSched

CVE-2026-93574 - A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulne

CVE-2026-93562 - A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding hea

CVE-2026-88097 - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile

CVE-2026-85272 - Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 u

CVE-2026-85271 - Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood u

CVE-2026-71855 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-71418 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-68928 - Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.r

CVE-2026-63452 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63451 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63450 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63449 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63448 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63447 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-63446 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-61670 - microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/li

CVE-2026-57229 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57228 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57227 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57225 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57223 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-93873 - Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, a

CVE-2026-93872 - Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restri

CVE-2026-93871 - Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, a

CVE-2026-93870 - Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowin

CVE-2026-93869 - Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that v

CVE-2026-93868 - Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.pas

CVE-2026-93841 - vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where

CVE-2026-93840 - vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logi

CVE-2026-93839 - LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket

CVE-2026-93838 - SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_stagin

CVE-2026-93031 - The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordP

CVE-2026-92708 - Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't

CVE-2026-91205 - A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during

CVE-2026-91203 - A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing is

CVE-2026-91202 - A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by cra

CVE-2026-84241 - IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due

CVE-2026-84239 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive in

CVE-2026-84108 - IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to imp

CVE-2026-84106 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-84105 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive in

CVE-2026-84089 - IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to im

CVE-2026-84086 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-84085 - IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due

CVE-2026-84084 - IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due