CVE-2026-89465 - In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce

CVE-2026-89464 - In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger:

CVE-2026-89463 - In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use

CVE-2026-89462 - In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propag

CVE-2026-89461 - In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchr

CVE-2026-89460 - In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplu

CVE-2026-89459 - In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIY_PERCPU()

CVE-2026-89458 - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a fa

CVE-2026-89457 - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipli

CVE-2026-89456 - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial co

CVE-2026-89455 - In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free o

CVE-2026-89454 - In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks

CVE-2026-89453 - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after

CVE-2026-89452 - In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state o

CVE-2026-89451 - In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev befo

CVE-2026-89450 - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a

CVE-2026-89449 - In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory lea

CVE-2026-89448 - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting AC

CVE-2026-89447 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal

CVE-2026-89446 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS o

CVE-2026-89445 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IO

CVE-2026-89444 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman:

CVE-2026-89443 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate le

CVE-2026-89442 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate so

CVE-2026-89441 - In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-det

CVE-2026-89440 - In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detec

CVE-2026-89439 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL

CVE-2026-89438 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate lo

CVE-2026-89437 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix pote

CVE-2026-89436 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop:

CVE-2026-89332 - Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kir

CVE-2026-81916 - Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against

CVE-2026-81915 - Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was u

CVE-2026-81913 - Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. A

CVE-2026-81912 - Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups fe

CVE-2026-81911 - Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The cu

CVE-2026-81018 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free s

CVE-2026-81017 - In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bou

CVE-2026-81016 - In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate

CVE-2026-81015 - In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0

CVE-2026-81014 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix h

CVE-2026-81013 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix h

CVE-2026-81012 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix o

CVE-2026-81011 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass

CVE-2026-81010 - In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_wor

CVE-2026-81009 - In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size p

CVE-2026-81008 - In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after fre

CVE-2026-81007 - In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write mess

CVE-2026-81006 - In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on

CVE-2026-81005 - In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dere

CVE-2026-81004 - In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cl

CVE-2026-81003 - In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiu

CVE-2026-81002 - In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout

CVE-2026-81001 - In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_

CVE-2026-81000 - In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroo

CVE-2026-80999 - In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_se

CVE-2026-80998 - In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell wh

CVE-2026-80997 - In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX

CVE-2026-80996 - In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate mul

CVE-2026-80995 - In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to

CVE-2026-80994 - In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask

CVE-2026-80993 - In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validat

CVE-2026-80992 - In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing

CVE-2026-80991 - In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock

CVE-2026-80990 - In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the R

CVE-2026-80989 - In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the conn

CVE-2026-80988 - In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enq

CVE-2026-80987 - In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject over

CVE-2026-80986 - In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey co

CVE-2026-80985 - In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv

CVE-2026-80984 - In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an

CVE-2026-80983 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount le

CVE-2026-80982 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in

CVE-2026-80981 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of

CVE-2026-80980 - In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and

CVE-2026-80979 - In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connect

CVE-2026-80978 - In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel h

CVE-2026-80977 - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared

CVE-2026-80976 - In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 de

CVE-2026-80975 - In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply b

CVE-2026-80974 - In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memor

CVE-2026-80973 - In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI eve

CVE-2026-80972 - In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index v

CVE-2026-80971 - In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB po

CVE-2026-80970 - In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an u

CVE-2026-80969 - In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index

CVE-2026-80968 - In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index v

CVE-2026-80967 - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes

CVE-2026-80966 - In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card in

CVE-2026-80965 - In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card

CVE-2026-80964 - In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index

CVE-2026-80963 - In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if alloca

CVE-2026-80962 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fi

CVE-2026-80961 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_nu

CVE-2026-80960 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media se

CVE-2026-80959 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted

CVE-2026-80958 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset

CVE-2026-80957 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in th

CVE-2026-80956 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initia

CVE-2026-80955 - In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free a

CVE-2026-80954 - In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference o

CVE-2026-80953 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize th

CVE-2026-80952 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and

CVE-2026-80951 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI pay

CVE-2026-80950 - In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the tr

CVE-2026-80949 - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak

CVE-2026-80948 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory

CVE-2026-80947 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-f

CVE-2026-80946 - In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via

CVE-2026-80945 - In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before

CVE-2026-80944 - In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd

CVE-2026-80943 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check

CVE-2026-80942 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix p

CVE-2026-80941 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memo

CVE-2026-80940 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource

CVE-2026-80939 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown

CVE-2026-80938 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiti

CVE-2026-80937 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the d

CVE-2026-80936 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_

CVE-2026-80935 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the d

CVE-2026-80934 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA

CVE-2026-80933 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate de

CVE-2026-80932 - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in de

CVE-2026-80931 - In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize

CVE-2026-80930 - In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable I

CVE-2026-80929 - In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entr

CVE-2026-80928 - In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_fi

CVE-2026-80927 - In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return v

CVE-2026-80926 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in op

CVE-2026-79035 - A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing

CVE-2026-78547 - Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Ci

CVE-2026-78546 - Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace

CVE-2026-77490 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed

CVE-2026-68526 - Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog

CVE-2026-54135 - AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions pr

CVE-2026-53952 - GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of

CVE-2026-52630 - SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUser

CVE-2026-49463 - NL Portal Backend Libraries provide backend components for Dutch government portals that interact wi

CVE-2026-49462 - NL Portal Backend Libraries provide backend components for Dutch government portals that interact wi

CVE-2026-89329 - A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control sock

CVE-2026-81910 - Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customi

CVE-2026-79396 - Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 an

CVE-2026-79395 - An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routin

CVE-2026-79394 - An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon

CVE-2026-79393 - A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in th

CVE-2026-79362 - Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WC

CVE-2026-71646 - An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef12345678

CVE-2026-62140 - Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 version

CVE-2026-62139 - Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.

CVE-2026-62138 - Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.

CVE-2026-62137 - Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.

CVE-2026-62136 - Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCom

CVE-2026-62135 - Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.

CVE-2026-62134 - Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.

CVE-2026-62133 - Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.

CVE-2026-62132 - Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.

CVE-2026-62114 - Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.

CVE-2026-62113 - Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.

CVE-2026-62112 - Editor SQL Injection in Amelia <= 2.4.9 versions.

CVE-2026-62111 - Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.

CVE-2026-62110 - Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.

CVE-2026-62109 - Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.

CVE-2026-62107 - Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.

CVE-2026-62106 - Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.

CVE-2026-62105 - Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

CVE-2026-62103 - Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.

CVE-2026-62102 - Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.

CVE-2026-62089 - Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse

CVE-2026-62088 - Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve

CVE-2026-54072 - Authorizer is an open-source, self-hostable authentication and authorization server. Prior to versio

CVE-2026-27378 - Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 vers

CVE-2025-69904 - Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read

CVE-2026-9160 - Improper neutralization of special elements used in a template engine vulnerability in Arma Digital

CVE-2026-89099 - A race condition in the document value layer of MongoDB Server can allow concurrent server threads t

CVE-2026-89090 - An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2

CVE-2026-87910 - When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a m

CVE-2026-82617 - The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEF

CVE-2026-82535 - Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allow

CVE-2026-81909 - Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route (Proces

CVE-2026-81908 - Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups lis

CVE-2026-7298 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-78807 - An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper netwo

CVE-2026-68528 - Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML

CVE-2026-67211 - OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versio

CVE-2026-18495 - A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility d

CVE-2026-18122 - Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Mi

CVE-2026-72710 - SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet action that allows u

CVE-2026-72709 - SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under

CVE-2026-72708 - SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping

CVE-2026-54047 - Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of

CVE-2026-18061 - Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced

CVE-2026-8304 - Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardu

CVE-2026-89265 - MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPict

CVE-2026-89264 - MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endp

CVE-2026-89263 - MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpo

CVE-2026-89262 - MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint

CVE-2026-89261 - MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search service wit

CVE-2026-89260 - MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback

CVE-2026-89066 - Improper neutralization of special elements used in an OS command in the task synthesis component in

CVE-2026-89065 - Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 m

CVE-2026-89013 - Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthentic

CVE-2026-89012 - Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilt

CVE-2026-87122 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-85984. Reason:

CVE-2026-81861 - CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authent

CVE-2026-7863 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-70341 - Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over

CVE-2026-68497 - jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGrego

CVE-2026-3869 - CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause

CVE-2026-15439 - The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via th

CVE-2026-8303 - Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Instit

CVE-2026-8301 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-89010 - WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticat

CVE-2026-89009 - WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticat

CVE-2026-87988 - An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restri

CVE-2026-87987 - An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permi

CVE-2026-87986 - An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permi

CVE-2026-87985 - An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permi

CVE-2026-87984 - An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attack

CVE-2026-87983 - An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacke

CVE-2026-87020 - An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds w

CVE-2026-85979 - Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated u

CVE-2026-85083 - The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attac

CVE-2026-82583 - NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute ar

CVE-2026-82578 - When XML batch processing is turned on and the XPath option is selected, the raw batch input goes th

CVE-2026-78224 - The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set,

CVE-2026-38058 - The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, i

CVE-2026-38056 - A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmwar

CVE-2026-89298 - A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and

CVE-2026-89212 - A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references we

CVE-2026-71644 - An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef12345678

CVE-2026-71641 - An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e2403

CVE-2026-71416 - Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, th

CVE-2026-57843 - NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows

CVE-2026-57842 - NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPA

CVE-2026-15710 - An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope

CVE-2026-11765 - Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in

CVE-2026-84390 - A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.

CVE-2026-80462 - A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthent

CVE-2026-89259 - Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission mod

CVE-2026-89258 - Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent

CVE-2026-89257 - AVideo through 29.0 contains an insecure direct object reference (IDOR) vulnerability in objects/cat

CVE-2026-89256 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scriptin

CVE-2026-89255 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scriptin

CVE-2026-89254 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scriptin

CVE-2026-89253 - WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scr

CVE-2026-89252 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveL

CVE-2026-89251 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in p

CVE-2026-89250 - WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file

CVE-2026-89249 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scriptin

CVE-2026-89248 - AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authoriz