CVE-2026-19846 - A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function s

CVE-2026-46415 - The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate request

CVE-2026-61718 - bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6

CVE-2026-54728 - bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1

CVE-2026-62314 - Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream

CVE-2026-48489 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr

CVE-2026-57691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-52761 - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS

CVE-2026-52747 - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS

CVE-2026-57031 - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin

CVE-2026-57021 - An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS o

CVE-2026-0287 - Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthent

CVE-2026-0286 - A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software ena

CVE-2026-0285 - A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an

CVE-2026-0282 - A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated atta

CVE-2026-0281 - An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenti

CVE-2026-0280 - An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enab

CVE-2026-0279 - Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Por

CVE-2026-45796 - Coder allows organizations to provision remote development environments via Terraform. Versions prio

CVE-2026-4770 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-8482 - A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to

CVE-2016-20091 - Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local a

CVE-2026-39478 - Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versio

CVE-2026-50008 - Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.

CVE-2026-0273 - A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated ad

CVE-2026-0272 - A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated

CVE-2026-0269 - A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS®

CVE-2026-0266 - A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a maliciou

CVE-2026-49494 - Xcitium Client Security (XCS) before 13.8.2.10019 and Comodo Internet Security (CIS) through 12.3.4.

CVE-2026-8438 - The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored

CVE-2026-25624 - An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboar

CVE-2026-25623 - An input validation command execution vulnerability exists in the browser management pipeline of Ari

CVE-2026-25622 - A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Managem

CVE-2026-25621 - A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista

CVE-2026-25620 - An encrypted password command injection vulnerability exists in the Captive Portal application frame

CVE-2026-50224 - The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 withou

CVE-2026-46244 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6

CVE-2026-10293 - A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of th

CVE-2026-10120 - A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function fo

CVE-2026-8903 - The Two-factor authentication (formerly IP Vault) plugin for WordPress is vulnerable to Cross-Site R

CVE-2026-48694 - FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the J

CVE-2026-9407 - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this