CVE-2026-61726 - Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.

CVE-2026-111343 - pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allo

CVE-2026-63626 - Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2

CVE-2026-109961 - Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated cu

CVE-2026-85959 - Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consist

CVE-2026-109312 - Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), whic

CVE-2026-108891 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getU

CVE-2026-108886 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController quer

CVE-2026-108876 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler

CVE-2026-108875 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addS

CVE-2026-108872 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler

CVE-2026-108638 - JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged au

CVE-2026-8374 - Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attac

CVE-2026-107395 - Indico is an event management system that uses Flask-Multipass, a multi-backend authentication syste

CVE-2026-104054 - A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUse

CVE-2026-103097 - An API key is hardcoded and retrievable from the application package. Since Android applications can

CVE-2026-103096 - API key is hardcoded and retrievable from the application package. Since Android applications can be

CVE-2026-14983 - Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows

CVE-2026-100292 - In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through

CVE-2026-100798 - Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR

CVE-2026-88808 - A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to

CVE-2026-88805 - Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials

CVE-2026-88804 - An unauthenticated update of public UI settings could be used by remote attackers to execute a store

CVE-2026-93540 - A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations thr

CVE-2026-93539 - A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a

CVE-2026-93538 - A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated clus

CVE-2026-93537 - A user who can supply bundle content to a repository referenced by a GitRepo resource, for example t

CVE-2026-100878 - A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the

CVE-2026-97721 - A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the

CVE-2026-44940 - The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain con

CVE-2026-92600 - Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysU

CVE-2025-46808 - An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes

CVE-2026-80183 - In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can l

CVE-2026-74242 - A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a targe

CVE-2026-18631 - A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the functio

CVE-2026-16970 - The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which

CVE-2026-65603 - The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in

CVE-2026-56583 - HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthoriz

CVE-2026-56579 - HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misu