CVE-2026-61640 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, Admin

CVE-2026-61639 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST

CVE-2026-61638 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST

CVE-2026-54600 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpo

CVE-2026-54599 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login

CVE-2026-54598 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpo

CVE-2026-54179 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-50199 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpo

CVE-2026-50198 - Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an au

CVE-2026-38577 - Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to

CVE-2025-63607 - TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoe

CVE-2026-82905 - A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of

CVE-2026-82835 - A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unkno

CVE-2026-82834 - A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Pra

CVE-2026-82833 - A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practiti

CVE-2026-81267 - A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address

CVE-2026-52730 - Xibo is an open source digital signage platform with a web content management system and Windows dis

CVE-2026-51740 - Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows una

CVE-2026-51739 - Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-51738 - Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51737 - Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51736 - Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows una

CVE-2026-51735 - Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51734 - Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51733 - Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51732 - Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51731 - Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-14697 - net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitat

CVE-2026-13732 - A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/sta

CVE-2026-83497 - Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch

CVE-2026-82821 - A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the functio

CVE-2026-82820 - A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the fil

CVE-2026-82818 - A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the fi

CVE-2026-72001 - Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated a

CVE-2026-53553 - Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traver

CVE-2026-53552 - Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile

CVE-2026-53508 - oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs

CVE-2026-53507 - oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review o

CVE-2026-14696 - When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys

CVE-2026-14368 - The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a par

CVE-2026-14367 - The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes throu

CVE-2023-31308 - A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of

CVE-2023-20511 - Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker

CVE-2026-82817 - A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown func

CVE-2026-82816 - A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an u

CVE-2026-82815 - A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file

CVE-2026-82813 - A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. Thi

CVE-2026-82811 - A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects a

CVE-2026-79750 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79749 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79748 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79747 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79746 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79745 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79744 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79743 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-51730 - Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51729 - Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51728 - Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51727 - Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51726 - Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51725 - Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-19953 - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via miss

CVE-2026-82810 - A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The im

CVE-2026-82809 - A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The aff

CVE-2026-82808 - A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impac

CVE-2026-51724 - Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51723 - Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51722 - Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51721 - Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51720 - Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-17615 - A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker

CVE-2026-14366 - The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx

CVE-2026-83492 - Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affec

CVE-2026-82823 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason:

CVE-2026-82807 - A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown

CVE-2026-82805 - A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of

CVE-2026-82803 - A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_s

CVE-2026-82802 - A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSea

CVE-2026-77975 - The affected Ebyte product exports administrative credentials and other sensitive configuration i

CVE-2026-77966 - The affected Ebyte product does not provide separation between limited and administrative managem

CVE-2026-76133 - The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related oper

CVE-2026-75133 - Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulner

CVE-2026-75132 - WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns`

CVE-2026-73819 - The affected Ebyte product's vendor configuration utility permits access to administrative functi

CVE-2026-51719 - Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51718 - Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51717 - Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51716 - Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 al

CVE-2026-51715 - Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51714 - Incorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51713 - Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51712 - Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51711 - Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51710 - Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51709 - Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51708 - Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51706 - Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51705 - Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51704 - Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51703 - Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51702 - Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-51701 - Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51700 - Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51699 - Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51698 - Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51153 - Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 th

CVE-2026-51152 - Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetche

CVE-2026-21827 - HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to

CVE-2026-82970 - Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for

CVE-2026-82801 - A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the f

CVE-2026-82703 - A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function

CVE-2026-82702 - A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file

CVE-2026-82701 - A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue i

CVE-2026-78422 - Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit sub

CVE-2026-66047 - ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code

CVE-2026-63083 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-59111 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-51697 - Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51696 - Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 al

CVE-2026-51695 - Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51694 - Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51693 - Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51692 - Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51691 - Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51690 - Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51689 - Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51688 - Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51687 - Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51686 - Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51684 - Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51683 - Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-82700 - A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerabilit

CVE-2026-82699 - A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe53

CVE-2026-82698 - A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb

CVE-2026-82697 - A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e90

CVE-2026-82217 - In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change too

CVE-2026-78079 - Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.

CVE-2026-78078 - Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ulti

CVE-2026-78077 - Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container

CVE-2026-78076 - Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settin

CVE-2026-78075 - Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Heli

CVE-2026-78074 - Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various

CVE-2026-76986 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-76985 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ext

CVE-2026-76763 - A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly va

CVE-2026-51681 - Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51680 - Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51679 - Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51678 - Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51677 - Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51676 - Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51675 - Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows una

CVE-2026-51674 - Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51673 - Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51672 - Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51671 - Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015

CVE-2026-51670 - Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51669 - Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51668 - Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-19702 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-19616 - Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionalit

CVE-2026-82696 - A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element

CVE-2026-82695 - A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of th

CVE-2026-82694 - A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSe

CVE-2026-82693 - A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function

CVE-2026-82692 - A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown par

CVE-2026-74010 - Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Confi

CVE-2026-5956 - Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i

CVE-2026-51667 - Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51666 - Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-12894 - A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content l

CVE-2026-82797 - Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nest

CVE-2026-82691 - A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Af

CVE-2026-82690 - A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability

CVE-2026-82689 - A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affe

CVE-2026-76984 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-76983 - Improper neutralization of input during web page generation in Apache Wicket. The <wicket:label> ta

CVE-2026-76982 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-75802 - AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writ

CVE-2026-71378 - ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forge

CVE-2026-71257 - Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multip

CVE-2026-70449 - Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote att

CVE-2026-82881 - Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitizatio

CVE-2026-82880 - YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, Fre

CVE-2026-82879 - DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets

CVE-2026-82878 - DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, d

CVE-2026-82877 - ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOA

CVE-2026-82876 - Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within

CVE-2026-82688 - A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1

CVE-2026-82680 - A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file

CVE-2026-82679 - A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unk

CVE-2026-82678 - A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the functio

CVE-2026-82677 - A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandle

CVE-2026-82671 - A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function Z

CVE-2026-82670 - A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTRO

CVE-2026-82669 - A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function

CVE-2026-49003 - Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing

CVE-2026-19873 - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count

CVE-2026-82875 - ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endp

CVE-2026-82874 - ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization speci

CVE-2026-82873 - ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/re

CVE-2026-82872 - ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated us

CVE-2026-82871 - ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing

CVE-2026-82870 - ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy ro

CVE-2026-82869 - ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_t

CVE-2026-82868 - @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin t

CVE-2026-82867 - @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugi

CVE-2026-82866 - @pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePd

CVE-2026-82865 - pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText p

CVE-2026-82864 - pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeS

CVE-2026-82863 - @hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, re

CVE-2026-82862 - Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing w

CVE-2026-82861 - @hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attac

CVE-2026-82860 - @hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence

CVE-2026-82859 - hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses f

CVE-2026-82858 - @hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient prov

CVE-2026-82857 - hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration

CVE-2026-82856 - @hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition ope

CVE-2026-82855 - @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudf

CVE-2026-82854 - Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.siz

CVE-2026-82853 - Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport na

CVE-2026-82668 - A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerab

CVE-2026-82667 - A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function Distribut

CVE-2026-82666 - A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of

CVE-2026-82665 - A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the funct

CVE-2026-82664 - A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknow

CVE-2026-82662 - Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUn

CVE-2026-82661 - Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment f

CVE-2026-82660 - Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during messa

CVE-2026-82659 - nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level

CVE-2026-81624 - Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how

CVE-2026-19410 - An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build pri

CVE-2024-58379 - nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsi

CVE-2026-82838 - The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could

CVE-2026-82631 - A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function

CVE-2026-82630 - A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager

CVE-2026-82629 - A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1d

CVE-2026-58301 - When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an

CVE-2026-82628 - A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function

CVE-2026-82625 - A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown

CVE-2026-82624 - A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some u

CVE-2026-82623 - A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the functio

CVE-2026-82622 - A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affe

CVE-2026-77013 - The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a req

CVE-2026-68951 - GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unau

CVE-2026-58574 - Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenti

CVE-2026-53620 - GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookm

CVE-2026-40465 - NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redi

CVE-2026-40464 - NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled inpu