CVE-2026-86421 - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted

CVE-2026-86420 - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operatio

CVE-2026-86419 - Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations

CVE-2026-86418 - Affected versions of MISP expose organisation metadata through the dashboard organisation picker wit

CVE-2026-86417 - Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::

CVE-2026-86416 - ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGr

CVE-2026-86408 - Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys thr

CVE-2026-86306 - A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601

CVE-2026-86305 - A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf4

CVE-2026-86303 - A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Aff

CVE-2026-86302 - A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnera

CVE-2026-80238 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80178 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80135 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80134 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80133 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-80132 - ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.

CVE-2026-79678 - A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-

CVE-2026-76578 - A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does

CVE-2026-6431 - The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi

CVE-2026-6223 - Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality

CVE-2026-61410 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5

CVE-2026-61409 - Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Imprope

CVE-2026-4945 - The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is

CVE-2026-12853 - The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i

CVE-2022-51018 - PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count,

CVE-2022-51017 - PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submi

CVE-2022-51016 - PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the s

CVE-2022-51015 - PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK an

CVE-2022-51014 - PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePac

CVE-2022-51013 - PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item N

CVE-2022-51012 - PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization

CVE-2022-51011 - PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before

CVE-2022-51010 - PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in item

CVE-2026-86404 - EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObj

CVE-2026-86301 - A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unkn

CVE-2026-86300 - A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of t

CVE-2026-86299 - A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_ping

CVE-2026-78325 - Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android th

CVE-2026-2390 - The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load mod

CVE-2026-86351 - Affected versions of MISP validate the user-configurable homepage by checking only whether the suppl

CVE-2026-86298 - A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacte

CVE-2026-86297 - A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel

CVE-2026-86296 - A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function str

CVE-2026-86295 - A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the fil

CVE-2026-86294 - A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this

CVE-2026-85640 - Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escal

CVE-2026-85201 - In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a w

CVE-2026-82325 - A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows

CVE-2026-77699 - Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege

CVE-2026-77697 - Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escal

CVE-2026-19204 - A client may send a WebSocket frame with an unknown opcode and a very large declared payload length,

CVE-2025-52657 - HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without an

CVE-2025-52652 - HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulat

CVE-2025-52651 - HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpe

CVE-2026-86347 - Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() b

CVE-2026-86293 - A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerab

CVE-2026-86292 - A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unk

CVE-2026-86291 - A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impa

CVE-2026-84173 - In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incor

CVE-2026-77698 - Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privileg

CVE-2026-86342 - Affected versions of MISP contain improper authorization checks in the freetext feed preview functio

CVE-2026-86332 - A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/n

CVE-2026-86290 - A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown f

CVE-2026-86289 - A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String o

CVE-2026-86288 - A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unkno

CVE-2026-86285 - A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function Atta

CVE-2026-84732 - Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated at

CVE-2026-84186 - Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaSho

CVE-2026-18796 - Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that

CVE-2026-14297 - A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access C

CVE-2026-86284 - A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf0

CVE-2026-86282 - A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddf

CVE-2026-86281 - A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examina

CVE-2026-86280 - A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-84256 - An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows

CVE-2026-84226 - OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authentica

CVE-2026-82312 - OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated user

CVE-2026-81830 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to

CVE-2026-81738 - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an

CVE-2026-78254 - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can

CVE-2026-78221 - An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 throug

CVE-2026-78043 - The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users

CVE-2026-14296 - When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio

CVE-2026-86279 - A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-86278 - A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination Syste

CVE-2026-86277 - A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination

CVE-2026-79698 - A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB,

CVE-2026-79697 - A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB,

CVE-2026-86276 - A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.

CVE-2026-86275 - A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination Sy

CVE-2026-86274 - A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. Th

CVE-2026-86273 - A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the func

CVE-2026-86272 - A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.600

CVE-2026-86271 - A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the f

CVE-2026-86270 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element

CVE-2026-86315 - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 al

CVE-2026-86269 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unk

CVE-2026-86268 - A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown fu

CVE-2026-86267 - A security vulnerability has been detected in itsourcecode Information System Society Membership Sys

CVE-2026-86265 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vuln

CVE-2026-86314 - Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung wa

CVE-2026-86313 - Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue

CVE-2026-86264 - A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected i

CVE-2026-86263 - A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.

CVE-2026-86262 - A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d6

CVE-2026-86261 - A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8

CVE-2026-86260 - A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef

CVE-2026-86245 - A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulner

CVE-2026-86244 - A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the f

CVE-2026-86241 - A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of t

CVE-2026-86240 - A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchI

CVE-2026-86239 - A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function

CVE-2026-20518 - In geniezone, there is a possible information disclosure due to a missing bounds check. This could l

CVE-2026-20517 - In geniezone, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20516 - In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could

CVE-2026-20515 - In gpu, there is a possible system crash due to use after free. This could lead to local information

CVE-2026-20514 - In Audio HAL, there is a possible information disclosure due to a missing permission check. This cou

CVE-2026-20513 - In Audio HAL, there is a possible information disclosure due to improper input validation. This coul

CVE-2026-20512 - In Audio HAL, there is a possible escalation of privilege due to improper input validation. This cou

CVE-2026-20511 - In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to l

CVE-2026-20510 - In camera middleware, there is a possible escalation of privilege due to double free. This could lea

CVE-2026-20509 - In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead

CVE-2026-20508 - In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to

CVE-2026-20507 - In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20506 - In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to

CVE-2026-20504 - In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote

CVE-2026-20503 - In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote

CVE-2026-20502 - In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to l

CVE-2026-20501 - In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to l

CVE-2026-20500 - In Modem, there is a possible system crash due to improper input validation. This could lead to loca

CVE-2026-16876 - An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user cou

CVE-2026-86238 - A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element

CVE-2026-86237 - A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the fu

CVE-2026-86236 - A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects so

CVE-2026-86235 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unk

CVE-2026-86234 - A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown

CVE-2026-86233 - A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected

CVE-2026-86304 - MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_

CVE-2026-86232 - A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vuln

CVE-2026-86231 - A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevoked

CVE-2026-86228 - A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the

CVE-2026-86227 - A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvst

CVE-2026-86226 - A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this i

CVE-2026-86225 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-86224 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is

CVE-2026-86223 - A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the

CVE-2026-86222 - A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects

CVE-2026-86221 - A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element

CVE-2026-86220 - A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected e

CVE-2026-86219 - Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication respon

CVE-2026-82209 - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when

CVE-2026-82208 - With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback repl

CVE-2026-80255 - A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) imm

CVE-2026-80231 - A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname eve

CVE-2026-80230 - When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verificati

CVE-2026-80229 - When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their or

CVE-2026-19931 - A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotia

CVE-2026-18924 - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share c

CVE-2026-13608 - A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequen

CVE-2026-82751 - Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote c

CVE-2026-82750 - Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote c

CVE-2026-83534 - PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function th

CVE-2026-19634 - PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can cre

CVE-2026-19633 - PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbi

CVE-2026-86283 - MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a second

CVE-2026-86217 - A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is

CVE-2026-86216 - A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0

CVE-2026-86215 - A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unk

CVE-2026-86259 - OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowin

CVE-2026-86258 - nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that u

CVE-2026-86214 - A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown functio

CVE-2026-86213 - A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mys

CVE-2026-86257 - wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpo

CVE-2026-86256 - wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_

CVE-2026-86255 - wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticate

CVE-2026-86254 - wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py w

CVE-2026-86253 - h3 (npm package) versions <= 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic(). On

CVE-2026-86252 - h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and commen

CVE-2026-86251 - h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A doubl

CVE-2026-86250 - h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie v

CVE-2026-86242 - Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL throu

CVE-2026-86212 - A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of th

CVE-2026-86205 - h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility

CVE-2022-51009 - PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment librar

CVE-2022-51008 - PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust p

CVE-2021-48007 - PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position

CVE-2021-48006 - PocketMine-MP before 4.0.3 does not perform case-insensitive matching when removing operator entries

CVE-2020-37277 - PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTrans

CVE-2026-86211 - A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown p

CVE-2026-86210 - A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.

CVE-2026-86209 - A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is

CVE-2026-86208 - A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This im

CVE-2026-80439 - The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortc

CVE-2026-80437 - The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-d

CVE-2026-19862 - The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from addre

CVE-2026-19859 - The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rend

CVE-2026-86183 - A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown

CVE-2026-86182 - A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCo

CVE-2026-86181 - A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is som

CVE-2026-86180 - A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this

CVE-2026-86179 - A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of

CVE-2026-86172 - A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the fi

CVE-2026-86171 - A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown func

CVE-2026-85038 - The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & Mo

CVE-2026-84219 - The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it d

CVE-2026-84028 - The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribu

CVE-2026-75793 - The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting be

CVE-2026-18480 - The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer

CVE-2026-13159 - The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one

CVE-2026-86170 - A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown funct

CVE-2026-86168 - A security flaw has been discovered in code-projects Content Management System 1.0. The affected ele

CVE-2026-86167 - A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the

CVE-2026-86166 - A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedir

CVE-2026-86165 - A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL o

CVE-2026-86164 - A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an u

CVE-2026-86163 - A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unkno

CVE-2026-86218 - N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 202

CVE-2026-86162 - A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown f

CVE-2026-86161 - A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unk

CVE-2026-86160 - A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is a

CVE-2026-86159 - A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of

CVE-2026-75816 - The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Acco

CVE-2026-18056 - The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the acc

CVE-2026-16310 - The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version

CVE-2026-86153 - A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::Set

CVE-2026-86152 - A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::T

CVE-2026-86151 - A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77

CVE-2026-86150 - A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function

CVE-2026-76161 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-76160 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-86149 - A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing

CVE-2026-86148 - A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the functio

CVE-2026-86206 - A vulnerability in the N-central internal API access control filter allows unauthorised access to in

CVE-2026-86060 - RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin wit

CVE-2026-67281 - RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a new

CVE-2026-67279 - RouterOS SSH enters the connection protocol after a client-requested rekey even though user authenti

CVE-2026-67278 - MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including

CVE-2026-67277 - RouterOS accepts a "related" btest connection before the corresponding primary session has completed

CVE-2026-67276 - RouterOS does not compare the complete RSA public key when matching an SSH authentication request to

CVE-2026-86207 - An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only

CVE-2026-6554 - libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to imple

CVE-2026-6244 - libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the im

CVE-2026-31912 - libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of

CVE-2026-31911 - libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode.

CVE-2026-18313 - rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ

CVE-2026-18238 - The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly

CVE-2026-0799 - In BPF instructions that load/store a value from/to a scratch memory register the register index is

CVE-2026-82752 - Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attack

CVE-2026-86197 - Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that all