CVE-2026 list

CVE-2026 records published in February 2026

Page two of four: records 1,001 to 2,000 of the 3,068 published in February 2026, newest first. The first page carries the figures for February 2026.

CVE-2026 records published in February 2026, newest first: records 1,001 to 2,000 of 3,068
CVE Summary CVSS EPSS Published Signals
CVE-2026-24953Simple File List WordPress plugin arbitrary file download6.5CNA v3.10.4%2026-02-20Fix
CVE-2026-24950Authorsy WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.3%2026-02-20Fix
CVE-2026-24949PhotoMe WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2026-24948Reflector WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2026-24946Print Invoice and Delivery Notes for WooCommerce WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2026-24944Subscribe2 WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2026-24943Grand Conference WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2026-24941WP Job Portal WordPress plugin broken access control7.5CNA v3.10.3%2026-02-20Fix
CVE-2026-24892openITCOCKPIT has unsafe deserialization in openITCOCKPIT Changelog Handling7.5CNA v3.10.8%2026-02-20Fix
CVE-2026-24891openITCOCKPIT has Unsafe PHP deserialization in Gearman Worker allowing Conditional object injection7.5CNA v3.10.4%2026-02-20Fix
CVE-2026-24790Welker OdorEyes EcoSystem Pulse Bypass System XL4 controller missing authentication8.2CNA v3.10.5%2026-02-20
CVE-2026-24455Jinan USR IOT Technology Limited (PUSR) USR-W610 cleartext transmission of sensitive information7.5CNA v3.10.2%2026-02-20
CVE-2026-22885EnOcean SmartServer IoT out-of-bounds read3.7CNA v3.10.4%2026-02-20Fix
CVE-2026-22384Applay - Shortcodes WordPress plugin PHP object injection9.8CNA v3.10.3%2026-02-20
CVE-2026-22383PawFriends - Pet Shop and Veterinary WordPress theme insecure direct object references (IDOR)7.5CNA v3.10.3%2026-02-20
CVE-2026-22381PawFriends - Pet Shop and Veterinary WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22380UnlimHost WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22379Netmix WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22378Blabber WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22377Saveo WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22376Parkivia WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22375Impacto Patronus WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22374Zio Alberto WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22373Fooddy WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22372Isida WordPress theme local file inclusion8.1CNA v3.10.3%2026-02-20
CVE-2026-22371Gustavo WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22370Marveland WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22369Ironfit WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22368Redy WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22367Coworking WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2026-22366Jude WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22365Soleng WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22364SevenTrees WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22363Rhodos WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22362Photolia WordPress theme local file inclusion8.1CNA v3.10.4%2026-02-20
CVE-2026-22361A-Mart WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22357Link Whisper Free WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2026-22356Jetpack CRM WordPress plugin local file inclusion7.5CNA v3.10.4%2026-02-20Exploit codeFix
CVE-2026-22354Woocommerce Category Banner Management WordPress plugin PHP object injection8.8CNA v3.10.5%2026-02-20
CVE-2026-22352Persian Woocommerce SMS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2026-22351WP FullCalendar WordPress plugin broken access control7.5CNA v3.10.3%2026-02-20Fix
CVE-2026-22350PDF for Elementor Forms + Drag And Drop Template Builder WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2026-22346Slider Responsive Slideshow Image slider, Gallery slideshow WordPress plugin PHP object injection8.8CNA v3.10.4%2026-02-20
CVE-2026-22345Image Gallery WordPress plugin WP Life deserialization of untrusted data8.8CNA v3.10.4%2026-02-20Fix
CVE-2026-22344FiveStar WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2026-22341Booked WordPress plugin account takeover6.7CNA v3.10.4%2026-02-20
CVE-2026-21627tassos.gr Tassos Framework com_ajax handling improper access control9.5CNA v4.01.6%2026-02-20Exploit code
CVE-2026-21620Erlang OTP TFTP path traversal2.3CNA v4.00.5%2026-02-20Fix
CVE-2026-20761EnOcean SmartServer IoT command injection8.1CNA v3.10.9%2026-02-20Fix
CVE-2026-2858wren-lang Wren Source file wren_compiler.c peekChar out-of-bounds7.1v3.10.2%2026-02-20
CVE-2026-2857D-Link DWR-M960 Port Forwarding Configuration endpoint formPortFw sub_423E00 stack-based overflow8.7CNA v4.01.2%2026-02-20
CVE-2026-2856D-Link DWR-M960 Filter Configuration endpoint formFilter sub_424AFC stack-based overflow8.7CNA v4.01.2%2026-02-20
CVE-2026-2855D-Link DWR-M960 DDNS settings formDdns sub_4648F0 stack-based overflow8.7CNA v4.01.2%2026-02-20
CVE-2026-2854D-Link DWR-M960 NTP Configuration endpoint formNtp sub_4611CC stack-based overflow8.7CNA v4.01.2%2026-02-20
CVE-2026-2853D-Link DWR-M960 System Log Configuration endpoint formSysLog sub_462E14 stack-based overflow8.7CNA v4.01.2%2026-02-20
CVE-2026-2852yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control5.3CNA v4.00.4%2026-02-20
CVE-2026-2851yeqifu warehouse Inport Endpoint InportController.java deleteInport access control5.3v3.10.4%2026-02-20
CVE-2026-2850yeqifu warehouse Customer Endpoint improper access control6.5v3.10.4%2026-02-20
CVE-2026-2849yeqifu warehouse Cache Sync CacheController.java syncCache access control6.3v3.10.4%2026-02-20
CVE-2026-2848SourceCodester Simple Responsive Tourism Website Registration Master.php SQL injection9.8v3.10.6%2026-02-20
CVE-2026-2847UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection8.6CNA v4.07.5%2026-02-20Emerging Threats
CVE-2026-2846UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection8.6CNA v4.07.5%2026-02-20Emerging Threats
CVE-2026-2832Certain Samsung MultiXpress Multifunction Printers firmware potential information disclosure5.3CNA v4.00.3%2026-02-20
CVE-2026-2825rachelos WeRSS we-mp-rss Article fix.py fix_html cross-site scripting5.1CNA v4.00.3%2026-02-20
CVE-2026-2824Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection8.8v3.112.8%2026-02-20Emerging Threats
CVE-2026-2823Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection8.8v3.112.8%2026-02-20Emerging Threats
CVE-2026-2822JeecgBoot Backend airag_app,1,create_by SQL injection8.8v3.10.5%2026-02-20
CVE-2026-2821Fujian Smart Integrated Management Platform System XCamera.ashx SQL injection6.9CNA v4.00.4%2026-02-20
CVE-2026-2820Fujian Smart Integrated Management Platform System XAccessPermissionPlus.ashx SQL injection6.9CNA v4.00.4%2026-02-20
CVE-2026-2819Dromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization5.3CNA v4.00.3%2026-02-20
CVE-2026-2818VMware Spring Data Geode Zip Slip path traversal in Snapshot Archive Extraction (Windows-Specific)8.2CNA v3.10.4%2026-02-20
CVE-2026-2739bn.js affected by an infinite loop6.9CNA v4.00.6%2026-02-20Fix
CVE-2026-2635MLflow use of default password authentication bypass9.8CNA v3.01.2%2026-02-20Fix
CVE-2026-2605Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS5.3CNA v3.10.3%2026-02-20Fix
CVE-2026-2492TensorFlow HDF5 library uncontrolled search path element local privilege escalation7.0CNA v3.00.3%2026-02-20Fix
CVE-2026-2490RustDesk Client for Windows Transfer file link following information disclosure5.5CNA v3.00.3%2026-02-20
CVE-2026-2486Master Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-20Fix
CVE-2026-2473Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft7.7CNA v4.00.5%2026-02-20Fix
CVE-2026-2472Stored cross-site scripting (XSS) in Vertex AI Python SDK Visualization8.6CNA v4.00.5%2026-02-20Exploit codeFix
CVE-2026-2435Tanium Asset Tanium addressed a SQL injection6.3CNA v3.10.3%2026-02-20Fix
CVE-2026-2408Tanium Cloud Workloads Tanium addressed a use-after-free4.7CNA v3.10.1%2026-02-20Fix
CVE-2026-2384Quiz Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2026-02-20Fix
CVE-2026-2350Tanium Interact Tanium addressed an sensitive information in log files6.5CNA v3.10.3%2026-02-20Fix
CVE-2026-2333Improper neutralization of special elements used in a command (command injection) in Owl opds9.8NVD v3.11.1%2026-02-20
CVE-2026-2048GIMP XWD File Parsing out-of-bounds write remote code execution7.8CNA v3.00.6%2026-02-20Fix
CVE-2026-2047GIMP ICNS File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.6%2026-02-20Fix
CVE-2026-2045GIMP XWD File Parsing out-of-bounds write remote code execution7.8CNA v3.04.7%2026-02-20Fix
CVE-2026-2044GIMP PGM File Parsing uninitialized memory remote code execution7.8CNA v3.01.0%2026-02-20Fix
CVE-2026-2043Nagios Host esensors_websensor_configwizard_func command injection remote code execution8.8v3.175.4%2026-02-20Fix
CVE-2026-2042Nagios Host monitoringwizard command injection remote code execution8.8v3.15.5%2026-02-20Fix
CVE-2026-2041Nagios Host zabbixagent_configwizard_func command injection remote code execution8.8v3.175.6%2026-02-20Fix
CVE-2026-2040PDF-XChange Editor TrackerUpdate uncontrolled search path element local privilege escalation7.3CNA v3.00.3%2026-02-20
CVE-2026-2039GFI Archiver MArc.Store missing authorization authentication bypass9.8v3.10.7%2026-02-20
CVE-2026-2038GFI Archiver MArc.Core missing authorization authentication bypass9.8v3.10.7%2026-02-20
CVE-2026-2037GFI Archiver MArc.Core deserialization of untrusted data remote code execution8.8CNA v3.01.2%2026-02-20
CVE-2026-2036GFI Archiver MArc.Store deserialization of untrusted data remote code execution8.8CNA v3.01.2%2026-02-20
CVE-2026-2035Deciso OPNsense diag_backup.php filename command injection remote code execution6.8CNA v3.01.6%2026-02-20
CVE-2026-2034Sante DICOM Viewer Pro DCM File Parsing buffer overflow remote code execution7.8CNA v3.00.3%2026-02-20
CVE-2026-2033MLflow Tracking Server Artifact handler directory traversal remote code execution8.1CNA v3.01.7%2026-02-20Fix
CVE-2026-1842SoftIron HyperCloud refresh token validation insufficient session expiration6.2CNA v4.00.2%2026-02-20Fix
CVE-2026-1292Tanium addressed an insertion of sensitive information into log file vulnerability in Trends6.5CNA v3.10.3%2026-02-20Fix
CVE-2026-0797GIMP ICO File Parsing heap-based buffer overflow remote code execution7.8CNA v3.01.2%2026-02-20Fix
CVE-2026-0777Xmind Attachment Insufficient UI Warning remote code execution7.8CNA v3.00.3%2026-02-20
CVE-2026-27476RustFly command injection via UDP Remote Control9.3CNA v4.03.0%2026-02-19
CVE-2026-27475SPIP insecure deserialization9.2CNA v4.00.9%2026-02-19Exploit codeFix
CVE-2026-27474SPIP cross-site scripting in Private Area (Incomplete Fix)6.1v3.10.4%2026-02-19Fix
CVE-2026-27473SPIP stored cross-site scripting via Syndicated Sites5.1CNA v4.00.3%2026-02-19Fix
CVE-2026-27472SPIP blind server-side request forgery via Syndicated Sites5.3CNA v4.00.3%2026-02-19Exploit codeFix
CVE-2026-27440myCred WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-27387DirectoryPress WordPress plugin broken access control5.4CNA v3.10.3%2026-02-19Fix
CVE-2026-27368SeedProd Coming Soon Page, Under Construction and Maintenance Mode missing authorization5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-27360Photo Gallery by 10Web WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2026-02-19Fix
CVE-2026-27343Airtifact WordPress theme local file inclusion7.5CNA v3.10.5%2026-02-19
CVE-2026-27328EduBlink WordPress theme broken access control5.3CNA v3.10.3%2026-02-19
CVE-2026-27327YayMail WooCommerce Email Customizer WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19Fix
CVE-2026-27114NanaZip has ROMFS Archive infinite loop5.1CNA v4.00.3%2026-02-19Fix
CVE-2026-27094CoBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-27092WPAdverts WordPress plugin broken access control6.5CNA v3.10.4%2026-02-19Fix
CVE-2026-27090Kenta Companion WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-02-19
CVE-2026-27074Shortcoder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-27069Soledad WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-27059Penci Recipe WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-27058Penci Podcast WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-27057Penci Filter Everything WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-27056iThemes Sync WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19Fix
CVE-2026-27055Penci AI SmartContent Creator WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19
CVE-2026-27052Sales Countdown Timer for WooCommerce and WordPress plugin local file inclusion7.5CNA v3.10.5%2026-02-19Fix
CVE-2026-27050RealPress WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-02-19Fix
CVE-2026-27042NotificationX WordPress plugin broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-27014M2Team NanaZip NanZip has ROMFS Archive infinite loop / stack overflow5.1CNA v4.00.1%2026-02-19Fix
CVE-2026-27013Fabric.js affected by stored XSS via SVG Export7.6CNA v3.10.4%2026-02-19Fix
CVE-2026-26958FiloSottile edwards25519 library MultiScalarMult function improper initialization1.7CNA v4.00.4%2026-02-19Fix
CVE-2026-26953Pi-hole Web Interface has stored HTML injection via X-Forwarded-For header in Active Sessions Table5.4CNA v3.10.4%2026-02-19Fix
CVE-2026-26952Pi-hole Web Interface has stored HTML injection5.4CNA v3.10.4%2026-02-19Fix
CVE-2026-26744Forma LMS response discrepancy5.3CISA ADP v3.10.4%2026-02-19Exploit code
CVE-2026-26362Dell Unisphere for PowerMax relative path traversal8.1CNA v3.10.5%2026-02-19Fix
CVE-2026-26361Dell Unisphere for PowerMax external control of a file path6.5CNA v3.10.4%2026-02-19Fix
CVE-2026-26360Dell Unisphere for PowerMax external control of a file path8.1CNA v3.10.5%2026-02-19Fix
CVE-2026-26359Dell Unisphere for PowerMax external control of a file path8.8CNA v3.10.5%2026-02-19Fix
CVE-2026-26358Dell Unisphere for PowerMax missing authorization8.8CNA v3.10.4%2026-02-19Fix
CVE-2026-26345SPIP cross-site scripting in Public Area8.6CNA v4.00.3%2026-02-19Fix
CVE-2026-26339Hyland Alfresco Transformation Service argument injection RCE9.3CNA v4.01.1%2026-02-19Fix
CVE-2026-26338Hyland Alfresco Transformation Service SSRF9.8v3.10.7%2026-02-19Fix
CVE-2026-26337Hyland Alfresco Transformation Service absolute path traversal arbitrary file read and SSRF8.8CNA v4.00.5%2026-02-19Fix
CVE-2026-26336Hyland Alfresco improper authorization arbitrary file read8.7CNA v4.00.7%2026-02-19Exploit codeFix
CVE-2026-26327OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning7.1CNA v4.00.1%2026-02-19Fix
CVE-2026-26326OpenClaw skills.status could leak secrets to operator.read clients5.3CNA v4.00.4%2026-02-19Fix
CVE-2026-26325OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals7.2CNA v3.10.7%2026-02-19Fix
CVE-2026-26324OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)7.5CNA v3.10.5%2026-02-19Fix
CVE-2026-26323OpenClaw has a command injection in maintainer clawtributors updater8.6CNA v4.02.1%2026-02-19Fix
CVE-2026-26322OpenClaw Gateway tool allowed unrestricted gatewayUrl override7.6CNA v3.10.4%2026-02-19Fix
CVE-2026-26321OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension7.5CNA v3.10.6%2026-02-19Fix
CVE-2026-26320OpenClaw macOS deep link confirmation truncation can conceal executed agent message7.1CNA v4.00.6%2026-02-19Fix
CVE-2026-26319OpenClaw has Missing Webhook Authentication in Telnyx Provider allowing Unauthenticated requests7.5CNA v3.10.5%2026-02-19Fix
CVE-2026-26318Systeminformation has command injection via Unsanitized `locate` Output in `versions`8.8CNA v3.11.3%2026-02-19Fix
CVE-2026-26317OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints7.1CNA v3.10.2%2026-02-19Fix
CVE-2026-26316OpenClaw has BlueBubbles webhook auth bypass via loopback proxy trust7.5CNA v3.10.6%2026-02-19Fix
CVE-2026-26315Go Ethereum improperly Validates the ECIES Public Key in RLPx Handshake6.9CNA v4.00.5%2026-02-19Fix
CVE-2026-26314Go Ethereum affected by DoS via malicious p2p message8.7CNA v4.00.8%2026-02-19Fix
CVE-2026-26313Go Ethereum affected by DoS via malicious p2p message6.9CNA v4.00.6%2026-02-19Fix
CVE-2026-26312Stalwart Mail Server has Out-of-memory denial of service via Malformed Nested MIME messages6.5CNA v3.10.5%2026-02-19Fix
CVE-2026-26286SillyTavern has server-side request forgery7.1CNA v4.00.3%2026-02-19Fix
CVE-2026-26282NanaZip has DotNet Single file OOB Heap Read5.2CNA v4.00.2%2026-02-19Fix
CVE-2026-26280Systeminformation has a command injection via unsanitized interface parameter in wifi.js retry path8.4CNA v3.11.5%2026-02-19Fix
CVE-2026-26278fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)7.5CNA v3.11.0%2026-02-19Fix
CVE-2026-26275Httpsig-hyper has Improper Digest Verification that may allow Message Integrity Bypass7.5CNA v3.10.2%2026-02-19Fix
CVE-2026-26267Stellar Soroban SDK contractimpl macro incorrect control flow7.5CNA v3.10.5%2026-02-19Fix
CVE-2026-26223SPIP cross-site scripting via Iframe Tags in Private Area6.1v3.10.4%2026-02-19Fix
CVE-2026-26205opa-envoy-plugin has an authorization bypass7.1CNA v4.00.9%2026-02-19Fix
CVE-2026-26203PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-26202Penpot has arbitrary file read via create-font-variant RPC endpoint7.5CNA v3.10.6%2026-02-19Fix
CVE-2026-26201emp3r0r affected by Concurrent Map Access DoS (panic/crash)7.0CNA v4.00.5%2026-02-19Fix
CVE-2026-26200HDF5 affected by H5T__conv_struct_opt heap buffer overflow7.8CNA v3.10.4%2026-02-19Fix
CVE-2026-26193open-webui open WebUI vulnerable to stored XSS via iFrame embeds in response messages7.3CNA v3.10.3%2026-02-19Fix
CVE-2026-26192open-webui open WebUI vulnerable to stored XSS via iFrame in citations model7.3CNA v3.10.3%2026-02-19Fix
CVE-2026-26189aquasecurity trivy-action trivy action has a script injection5.9CNA v3.12.1%2026-02-19Fix
CVE-2026-26063CediPay affected by improper input validation in Payment Processing8.8CNA v4.00.5%2026-02-19Fix
CVE-2026-26059ChurchCRM has stored cross-site scripting (XSS) in GroupEditor.php2.1CNA v4.00.3%2026-02-19Fix
CVE-2026-26057cisco-ai-defense skill-scanner Skill Scanner Unsecured Network Binding vulnerability6.5CNA v3.10.4%2026-02-19Fix
CVE-2026-26030Microsoft Semantic Kernel InMemoryVectorStore filter code injection10.0CNA v3.13.7%2026-02-19Exploit codeFix
CVE-2026-26016pterodactyl panel insecure direct object reference9.2CNA v4.00.5%2026-02-19Fix
CVE-2026-25998strongMan vulnerable to private credential recovery due to key and counter reuse8.7CNA v4.00.3%2026-02-19Fix
CVE-2026-25940JsPDF's PDF injection in AcroForm module allows Arbitrary JavaScript Execution8.1CNA v3.10.6%2026-02-19Fix
CVE-2026-25926Notepad++ has an untrusted search path7.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25766Echo has a Windows path traversal via backslash in middleware.Static default filesystem5.3CNA v3.10.4%2026-02-19Fix
CVE-2026-25755jsPDF has PDF object injection via Unsanitized Input in addJS method8.1CNA v3.10.8%2026-02-19Exploit codeFix
CVE-2026-25739Indico affected by cross-site-scripting via material uploads5.4CNA v3.10.3%2026-02-19Fix
CVE-2026-25738Indico has server-side request forgery (SSRF) in multiple places6.9CNA v4.00.3%2026-02-19Fix
CVE-2026-25535jsPDF affected by Client-Side/Server-Side denial of service via Malicious GIF Dimensions8.7CNA v4.00.9%2026-02-19Fix
CVE-2026-25527Changedetection.io vulnerable to unauthenticated static path traversal5.3CNA v3.10.9%2026-02-19NucleiFix
CVE-2026-25474OpenClaw has a Telegram webhook request forgery → auth bypass7.5CNA v3.10.3%2026-02-19Fix
CVE-2026-25473WZone WordPress plugin broken access control5.4CNA v3.10.3%2026-02-19
CVE-2026-25472Fusion Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25463Wpresidence Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-25459Sober WordPress theme broken access control4.3CNA v3.10.3%2026-02-19
CVE-2026-25453Advanced iFrame WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25451Bold Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25441LeadConnector WordPress plugin broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25432Omnipress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19
CVE-2026-25428TS Poll WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2026-02-19Fix
CVE-2026-25423Real 3D FlipBook WordPress plugin broken access control3.8CNA v3.10.2%2026-02-19Fix
CVE-2026-25422Popularis Extra WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-02-19
CVE-2026-25420MailerLite WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25419UpsellWP WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25418Bit Form WordPress plugin SQL injection7.6CNA v3.10.3%2026-02-19Fix
CVE-2026-25416News Kit Elementor Addons WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25415WPBookit Pro WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19
CVE-2026-25411Revision Manager TMC WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-02-19
CVE-2026-25410WP-CORS WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19
CVE-2026-25409JAMstack Deployments WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19
CVE-2026-25408Broken Link Notifier WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25407Cookiebot WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25404WP Job Manager WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25402Knowledge Base for Documentation, FAQs with AI Assistance WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25399Serious Slider WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25395Business Roy WordPress theme broken access control4.3CNA v3.10.3%2026-02-19
CVE-2026-25394Fitness FSE WordPress theme broken access control4.3CNA v3.10.2%2026-02-19
CVE-2026-25393Hello FSE WordPress theme broken access control4.3CNA v3.10.2%2026-02-19
CVE-2026-25392KaizenCoders Update URLs open redirect4.7CNA v3.10.2%2026-02-19
CVE-2026-25391WP Wand WordPress plugin broken access control5.4CNA v3.10.2%2026-02-19
CVE-2026-25389EventPrime WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25388Ads Pro WordPress plugin broken access control5.4CNA v3.10.2%2026-02-19Fix
CVE-2026-25387Image Optimizer by Elementor WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25386Ally WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25385URL Shortify WordPress plugin server side request forgery (SSRF)5.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25384WP-Lister Lite for eBay WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25378Nelio AB Testing WordPress plugin SQL injection7.6CNA v3.10.4%2026-02-19Fix
CVE-2026-25375Image Photo Gallery Final Tiles Grid WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25374Spa and Salon WordPress theme broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25372Academy LMS WordPress plugin broken access control6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25370WP Compress WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25368Calculated Fields Form WordPress plugin broken access control6.5CNA v3.10.3%2026-02-19Fix
CVE-2026-25367CitiLights WordPress theme broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25364Client Invoicing by Sprout Invoices WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25363FooGallery WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25362FooGallery WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-02-19Fix
CVE-2026-25348Download Alt Text AI WordPress plugin broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25343WP SMS WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-02-19Fix
CVE-2026-25338AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25337Coachify WordPress theme cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-02-19Fix
CVE-2026-25336Coachify WordPress theme broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25335Secure Copy Content Protection and Content Locking WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25333Shopwell WordPress theme broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25332Endless Posts Navigation WordPress plugin broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25331WP Activity Log WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25330PublishPress Authors WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25329Quiz And Survey Master WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25326CMSMasters Content Composer WordPress plugin local file inclusion7.5CNA v3.10.4%2026-02-19Fix
CVE-2026-25325rtMedia for WordPress, BuddyPress and bbPress plugin sensitive data exposure5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25324Quiz And Survey Master WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25323OSM WordPress plugin broken access control4.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25322PublishPress Revisions WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-02-19Fix
CVE-2026-25321SupportCandy WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25320Elementor Contact Form DB WordPress plugin broken access control5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25319Zita Elementor Site Library WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-02-19Fix
CVE-2026-25318WiserReview Product Reviews for WooCommerce WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25316CartFlows WordPress plugin PHP object injection7.2CNA v3.10.4%2026-02-19Fix
CVE-2026-25315hCaptcha for WP WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25314TOP Table Of Contents WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25313FluentForm WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25311Autoshare for Twitter WordPress plugin broken access control5.4CNA v3.10.2%2026-02-19Fix
CVE-2026-25310Extend Link WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-02-19Fix
CVE-2026-25308Simple Membership WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25307XStore Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25305XStore WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-25242Gogs allows unauthenticated file uploads6.9CNA v4.00.6%2026-02-19Fix
CVE-2026-25232Gogs has a Protected Branch Deletion Bypass in Web interface7.1CNA v4.00.4%2026-02-19Exploit codeFix
CVE-2026-25229Gogs authorization bypass allows Cross-Repository Label Modification5.3CNA v4.00.3%2026-02-19Fix
CVE-2026-25120Gogs allows Cross-Repository Comment Deletion via DeleteComment5.1CNA v4.00.3%2026-02-19Fix
CVE-2026-25008Ninja Tables WordPress plugin sensitive data exposure4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25006XStore WordPress theme arbitrary shortcode execution vulnerability5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25005Frontend File Manager WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-25004CM Business Directory WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-02-19Fix
CVE-2026-25003Client Portal WordPress plugin broken access control4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-25000Wheel of Life WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-24999Alma WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-24834kata-containers kata Container to Guest micro VM privilege escalation9.4CNA v3.10.2%2026-02-19Fix
CVE-2026-24764OpenClaw has remote code execution via System prompt injection in Slack Channel Descriptions3.7CNA v3.10.2%2026-02-19Fix
CVE-2026-24392HurryTimer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-02-19Fix
CVE-2026-24375Ultimate Gift Cards For WooCommerce WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-24126Weblate has an argument injection in management console6.6CNA v3.10.5%2026-02-19Exploit codeFix
CVE-2026-24122Cosign Certificate Chain Expiry Validation issue allows Issuing Certificate Expiry to be Overlooked3.7CNA v3.10.2%2026-02-19Fix
CVE-2026-23805Media Search Enhanced WordPress plugin SQL injection7.6CNA v3.10.3%2026-02-19Fix
CVE-2026-23804Better Business Reviews WordPress plugin broken access control5.4CNA v3.10.3%2026-02-19Fix
CVE-2026-23803Smart Auto Upload Images WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-02-19Fix
CVE-2026-23621GFI MailEssentials AI ListServer.IsPathExist Absolute directory traversal to File Enumeration5.3CNA v4.00.3%2026-02-19Fix
CVE-2026-23620GFI MailEssentials AI ListServer.IsDBExist Absolute directory traversal to File Enumeration5.3CNA v4.00.2%2026-02-19Fix
CVE-2026-23619GFI MailEssentials AI General Settings Local Domains Domain Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23618GFI MailEssentials AI Anti-Spam Spam Keyword Checking Subject Condition stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23617GFI MailEssentials AI Anti-Spam Spam Keyword Checking Body Condition stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23616GFI MailEssentials AI Anti-Spam Anti-spoofing Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23615GFI MailEssentials AI Anti-Spam Sender Policy Framework Email Exceptions Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23614GFI MailEssentials AI Anti-Spam Sender Policy Framework IP Exceptions Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23613GFI MailEssentials AI Anti-Spam URI DNS Blocklist Domain stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23612GFI MailEssentials AI Anti-Spam IP DNS Blocklist Domain stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23611GFI MailEssentials AI Anti-Spam IP Blocklist Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23610GFI MailEssentials AI POP2Exchange POP3 server login stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23609GFI MailEssentials AI General Settings Perimeter SMTP Servers Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23608GFI MailEssentials AI Email Management Mail Monitoring Rule stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23607GFI MailEssentials AI Anti-Spam Whitelist Description stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23606GFI MailEssentials AI Advanced Content Filtering Rule stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23605GFI MailEssentials AI Attachment Filtering Rule stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23604GFI MailEssentials AI Keyword Filtering Rule stored XSS5.1CNA v4.00.2%2026-02-19Fix
CVE-2026-23549WpEvently WordPress plugin PHP object injection9.8CNA v3.10.4%2026-02-19Fix
CVE-2026-23548DirectoryPress WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-23547CMSMasters Content Composer WordPress plugin broken access control7.1CNA v3.10.2%2026-02-19Fix
CVE-2026-23545Aruba HiSpeed Cache WordPress plugin broken access control6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-23544Valenti WordPress theme PHP object injection8.8CNA v3.10.4%2026-02-19
CVE-2026-23543Essential Addons for Elementor WordPress plugin broken access control5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-23542Grand Restaurant WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-19Fix
CVE-2026-23541Mail Mint WordPress plugin broken access control7.5CNA v3.10.3%2026-02-19Fix
CVE-2026-22422Everest Forms WordPress plugin arbitrary shortcode execution vulnerability5.3CNA v3.10.2%2026-02-19Fix
CVE-2026-22333YITH WooCommerce Compare WordPress plugin deserialization of untrusted data7.2CNA v3.10.5%2026-02-19Fix
CVE-2026-22269Dell PowerProtect Data Manager improper verification of communication source4.7CNA v3.10.2%2026-02-19Fix
CVE-2026-22268Dell PowerProtect Data Manager incorrect privilege assignment6.3CNA v3.10.2%2026-02-19Fix
CVE-2026-22267Dell PowerProtect Data Manager incorrect privilege assignment8.1CNA v3.10.4%2026-02-19Fix
CVE-2026-22266Dell PowerProtect Data Manager improper verification of communication source4.7CNA v3.10.3%2026-02-19Fix
CVE-2026-21535Microsoft Teams information disclosure8.2CNA v3.10.6%2026-02-19Fix
CVE-2026-2817Spring Data Geode Insecure Temporary Directory Usage4.8CNA v4.00.1%2026-02-19
CVE-2026-2738OpenVPN ovpn-dco-win ovpn‑dco‑win version buffer overflow5.6CNA v4.00.1%2026-02-19Fix
CVE-2026-2736Reflected cross-site scripting (XSS) vulnerability in Alkacon's OpenCms6.1v3.10.3%2026-02-19Fix
CVE-2026-2735Stored cross-site scripting (XSS) vulnerability in Alkacon's OpenCms5.4v3.10.2%2026-02-19Fix
CVE-2026-2733Keycloak: Missing Check on Disabled client for Docker Registry protocol3.8CNA v3.10.4%2026-02-19Fix
CVE-2026-2731Unauthenticated RCE in DynamicWeb 9 and DynamicWeb 810.0CNA v4.00.7%2026-02-19Fix
CVE-2026-2718Dealia WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19
CVE-2026-2716Client Testimonial Slider WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-19
CVE-2026-2711zhutoutoutousan worldquant-miner URL ssrf_proxy.py server-side request forgery6.3CNA v4.00.4%2026-02-19
CVE-2026-2709busy Callback app.js redirect3.5CISA ADP v3.10.3%2026-02-19
CVE-2026-2706code-projects Patient Record Management System fecalysis_not.php SQL injection7.5v3.10.4%2026-02-19
CVE-2026-2705Open Babel MOL2 file atom.h SetFormalCharge out-of-bounds8.1v3.10.8%2026-02-19Fix
CVE-2026-2704Open Babel CIF file transform3d.cpp DescribeAsString out-of-bounds8.1v3.10.8%2026-02-19Fix
CVE-2026-2703xlnt-community xlnt Encrypted XLSX file base64.cpp decode_base64 off-by-one5.5v3.10.2%2026-02-19
CVE-2026-2702Beetel 777VR1 WPA2 PSK hard-coded credentials2.3CNA v4.00.3%2026-02-19
CVE-2026-2693CoCoTeaNet CyreneAdmin System Info endpoint getCount improper authorization6.5v3.10.5%2026-02-19
CVE-2026-2692CoCoTeaNet CyreneAdmin Image getAvatar path traversal6.5v3.10.6%2026-02-19
CVE-2026-2691itsourcecode Event Management System manage_register.php SQL injection9.8v3.10.6%2026-02-19
CVE-2026-2690itsourcecode Event Management System Admin Login ajax.php SQL injection9.8v3.10.6%2026-02-19
CVE-2026-2689itsourcecode Event Management System manage_booking.php SQL injection9.8v3.10.6%2026-02-19
CVE-2026-2686SECCN Dingcheng G10 session_login.cgi qq os command injection9.3CNA v4.03.4%2026-02-19
CVE-2026-2684Tsinghua Unigroup Electronic Archives System uploadFile.html unrestricted upload9.8v3.10.7%2026-02-19
CVE-2026-2681Github.com/supranational/blst: Blst cryptographic library: Denial of service5.3CNA v3.10.5%2026-02-19
CVE-2026-2504Dealia WordPress plugin unauthorized access4.3CNA v3.10.2%2026-02-19Fix
CVE-2026-2502xmlrpc attacks blocker WordPress plugin unauthenticated stored cross-site scripting6.1CNA v3.10.3%2026-02-19
CVE-2026-2409Delinea Cloud Suite SQL command improper neutralization9.3CNA v4.00.2%2026-02-19Fix
CVE-2026-2284News Element Elementor Blog Magazine WordPress plugin missing authorization authenticated data Loss5.4CNA v3.10.2%2026-02-19Fix
CVE-2026-2282Slidorion WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-19
CVE-2026-2274Arbitrary file read and SSRF in Google AppSheet8.5CNA v4.00.3%2026-02-19Fix
CVE-2026-2243QEMU VMDK compressed grain parsing out-of-bounds read5.1CNA v3.10.1%2026-02-19Fix
CVE-2026-2232Product Table and List Builder for WooCommerce Lite WordPress plugin SQL injection7.5CNA v3.10.4%2026-02-19Fix
CVE-2026-1994s2Member WordPress plugin unauthenticated privilege escalation via account takeover9.8CNA v3.10.4%2026-02-19Fix
CVE-2026-1658Content spoofing vulnerability discovered in OpenText™ Directory Services5.3CNA v4.00.3%2026-02-19Fix
CVE-2026-1646Advance Block Extend WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-19
CVE-2026-1581wpForo Forum WordPress plugin unauthenticated time-based SQL injection7.5CNA v3.12.6%2026-02-19NucleiExploit codeFix
CVE-2026-1461Simple Membership WordPress plugin unauthenticated improper Handling of missing Values6.5CNA v3.10.2%2026-02-19Fix
CVE-2026-1455Whatsiplus Scheduled Notification for Woocommerce WordPress plugin cross-site request forgery4.3CNA v3.10.1%2026-02-19
CVE-2026-1405Slider Future WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.13.5%2026-02-19Reported exploitedNucleiExploit code
CVE-2026-1373Easy Author Image WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-19
CVE-2026-1219MP3 Audio Player WordPress plugin insecure direct object reference5.3CNA v3.10.3%2026-02-19Fix
CVE-2026-1055TalkJS WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-19Fix
CVE-2026-1047salavat counter WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-19
CVE-2026-1044Tennis Court Bookings WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-19
CVE-2026-1043PostmarkApp Email Integrator WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-19Fix
CVE-2026-0974Orderable WordPress plugin missing authorization authenticated arbitrary plugin installation8.8CNA v3.10.6%2026-02-19Fix
CVE-2026-0926Prodigy Commerce WordPress plugin unauthenticated local file inclusion via parameters[template_name]9.8CNA v3.19.4%2026-02-19NucleiExploit codeFix
CVE-2026-0912Toret Manager WordPress plugin authenticated (Subscriber+) arbitrary options update via AJAX actions8.8CNA v3.10.3%2026-02-19Fix
CVE-2026-0722Shield Security WordPress plugin cross-site request forgery to SQL injection6.5CNA v3.10.4%2026-02-19Fix
CVE-2026-0561Shield Security WordPress plugin unauthenticated reflected cross-site scripting6.1CNA v3.10.6%2026-02-19NucleiFix
CVE-2026-0556XO Event Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19
CVE-2026-0549Groups WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2026-27182Saturn Remote Mouse Server UDP command injection RCE8.6CNA v4.01.5%2026-02-18
CVE-2026-27181MajorDoMo Unauthenticated Module Uninstall via Market endpoint8.7CNA v4.00.9%2026-02-18
CVE-2026-27180MajorDoMo Supply Chain remote code execution via Update URL Poisoning9.3CNA v4.01.1%2026-02-18MetasploitExploit code
CVE-2026-27179MajorDoMo unauthenticated SQL injection in commands module9.8v3.10.6%2026-02-18
CVE-2026-27178MajorDoMo stored cross-site scripting via method parameters to Shoutbox6.1NVD v3.10.4%2026-02-18
CVE-2026-27177MajorDoMo stored cross-site scripting via Property Set endpoint6.1NVD v3.10.4%2026-02-18
CVE-2026-27176MajorDoMo reflected cross-site scripting in command.php5.1CNA v4.00.6%2026-02-18Nuclei
CVE-2026-27175MajorDoMo command injection in rc/index.php via race condition9.2CNA v4.07.0%2026-02-18MetasploitExploit code
CVE-2026-27174MajorDoMo unauthenticated remote code execution via Admin Console Eval9.3CNA v4.05.1%2026-02-18NucleiMetasploitExploit code
CVE-2026-27171zlib improper quantity validation5.5v3.10.2%2026-02-18Fix
CVE-2026-27100Jenkins has a build information disclosure vulnerability through Run parameter4.3CISA ADP v3.10.3%2026-02-18Fix
CVE-2026-27099Jenkins has a stored XSS vulnerability in node offline cause description8.0CISA ADP v3.10.6%2026-02-18Fix
CVE-2026-26281InvoicePlane has stored cross-site scripting (XSS) issue in Sumex Invoice view4.4CNA v3.10.2%2026-02-18
CVE-2026-26270InvoicePlane has stored cross-site scripting issue in Identifier Formatting5.4CNA v3.10.2%2026-02-18Fix
CVE-2026-25596InvoicePlane has stored XSS via Product Unit Name in Invoice Item List4.8CNA v3.10.3%2026-02-18
CVE-2026-25595InvoicePlane has stored XSS via Invoice Number in Invoice view and Dashboard4.8CNA v3.10.3%2026-02-18
CVE-2026-25594InvoicePlane has stored XSS via Family Name in Product form4.8CNA v3.10.3%2026-02-18
CVE-2026-25548InvoicePlane vulnerable to remote code execution via local file inclusion and Log Poisoning9.1CNA v3.10.9%2026-02-18Exploit code
CVE-2026-25500Rack's stored XSS in Rack::Directory via javascript: Filenames rendered into anchor href5.4CNA v3.10.3%2026-02-18Fix
CVE-2026-24746InvoicePlane has a stored cross-site scripting (XSS) issue5.7CNA v3.10.3%2026-02-18
CVE-2026-24745InvoicePlane has a stored cross-site scripting (XSS) issue5.7CNA v3.10.2%2026-02-18
CVE-2026-24744InvoicePlane has a stored cross-site scripting (XSS) issue5.7CNA v3.10.2%2026-02-18
CVE-2026-24743InvoicePlane has a stored cross-site scripting (XSS) issue5.7CNA v3.10.2%2026-02-18
CVE-2026-24708OpenStack Nova calls qemu-img without format restrictions for resize8.2CNA v3.10.4%2026-02-18Fix
CVE-2026-23599HPE Aruba Networking ClearPass Policy Manager OnGuard agent for Linux privilege escalation7.8CNA v3.10.1%2026-02-18
CVE-2026-23491InvoicePlane has unauthenticated path traversal in Guest controller9.3CNA v4.04.2%2026-02-18NucleiExploit codeFix
CVE-2026-23230Linux kernel SMB client cached file handle race condition8.8CNA v3.10.2%2026-02-18Fix
CVE-2026-23229Linux kernel virtio-crypto driver vulnerability5.5v3.10.1%2026-02-18Fix
CVE-2026-23228Linux kernel ksmbd TCP connection handling memory leak5.5v3.10.1%2026-02-18Fix
CVE-2026-23227Linux kernel Exynos Virtual Display driver use-after-free7.8CNA v3.10.2%2026-02-18Fix
CVE-2026-23226Linux kernel ksmbd multi-channel session handling use-after-free8.8CNA v3.10.5%2026-02-18Fix
CVE-2026-23225Linux kernel scheduler MM CID management vulnerability7.8CNA v3.10.1%2026-02-18Fix
CVE-2026-23224Linux kernel EROFS file-backed mounts use-after-free7.8CNA v3.10.1%2026-02-18Fix
CVE-2026-23223Linux kernel xfs use-after-free7.8v3.10.1%2026-02-18Fix
CVE-2026-23222Linux kernel OMAP crypto driver vulnerability7.8CNA v3.10.1%2026-02-18Fix
CVE-2026-23221Linux kernel fsl-mc bus driver use-after-free7.8v3.10.1%2026-02-18Fix
CVE-2026-23220Linux kernel ksmbd SMB2 request handling denial of service5.5v3.10.1%2026-02-18Fix
CVE-2026-23219Linux kernel slab allocator memory-tagging vulnerability5.5v3.10.1%2026-02-18Fix
CVE-2026-23218Linux kernel Loongson GPIO driver null pointer dereference5.5v3.10.1%2026-02-18Fix
CVE-2026-23217Linux kernel ftrace SBI ecall tracing deadlock5.5NVD v3.10.1%2026-02-18Fix
CVE-2026-23216Linux kernel iSCSI target driver use-after-free7.8NVD v3.10.1%2026-02-18Fix
CVE-2026-23215Linux kernel VMware hypercall interface vulnerability5.5v3.10.1%2026-02-18Fix
CVE-2026-23214Linux kernel btrfs transaction handling vulnerability5.5NVD v3.10.1%2026-02-18Fix
CVE-2026-23213In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from inter5.5NVD v3.10.1%2026-02-18Fix
CVE-2026-23212Linux kernel bonding driver race condition4.7NVD v3.10.1%2026-02-18Fix
CVE-2026-23211Linux kernel swap subsystem denial of service5.5v3.10.1%2026-02-18Fix
CVE-2026-22860Rack has a directory traversal via Rack:Directory7.5CNA v3.10.7%2026-02-18Fix
CVE-2026-22048NetApp StorageGRID server-side request forgery7.1CNA v3.10.3%2026-02-18Fix
CVE-2026-20144Sensitive information disclosure in ''_internal'' index in Splunk Enterprise6.8CNA v3.10.4%2026-02-18Fix
CVE-2026-20142Sensitive information disclosure in _internal index in Splunk Enterprise6.8CNA v3.10.3%2026-02-18Fix
CVE-2026-20141Improper access control in Splunk Monitoring Console App4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-20139Splunk Enterprise user authentication REST API endpoint denial of service4.3CNA v3.15.0%2026-02-18Emerging ThreatsFix
CVE-2026-20138Sensitive information disclosure in _internal index in Splunk Enterprise6.8CNA v3.10.3%2026-02-18Fix
CVE-2026-20137Splunk Enterprise and Cloud Platform Data Model SPL safeguards path traversal3.5CNA v3.10.2%2026-02-18Fix
CVE-2026-2683Tsinghua Unigroup Electronic Archives System downLoad.html path traversal5.3CNA v4.00.7%2026-02-18
CVE-2026-2682Tsinghua Unigroup Electronic Archives System prinReport.html SQL injection9.8v3.10.5%2026-02-18
CVE-2026-2676GoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization5.3CNA v4.00.4%2026-02-18
CVE-2026-2672Tsinghua Unigroup Electronic Archives System downLoad download path traversal5.3v3.10.8%2026-02-18
CVE-2026-2670Advantech WISE-6610-NB Background Management openvpn_apply os command injection8.6CNA v4.03.6%2026-02-18Fix
CVE-2026-2669Rongzhitong Visual Integrated Command and Dispatch Platform User delete access control6.9CNA v4.00.7%2026-02-18
CVE-2026-2668Rongzhitong Visual Integrated Command and Dispatch Platform User add access control6.9CNA v4.00.6%2026-02-18
CVE-2026-2667Rongzhitong Visual Integrated Command and Dispatch Platform API access control6.9CNA v4.00.6%2026-02-18
CVE-2026-2666MingSoft MCMS Template Archive uploadTemplate.do unrestricted upload7.2v3.10.6%2026-02-18
CVE-2026-2665huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload5.3CNA v4.00.4%2026-02-18
CVE-2026-2663Alixhan xh-admin-backend Database Query query SQL injection5.3CNA v4.00.3%2026-02-18
CVE-2026-2662FascinatedBox lily lily_emitter.c count_transforms out-of-bounds7.8v3.10.2%2026-02-18
CVE-2026-2661Squirrel sqobject.h operator heap-based overflow7.8v3.10.2%2026-02-18
CVE-2026-2660FascinatedBox lily lily_symtab.c shorthash_for_name use-after-free7.8v3.10.2%2026-02-18
CVE-2026-2659Squirrel sqfuncstate.cpp PopTarget out-of-bounds7.8v3.10.2%2026-02-18
CVE-2026-2658newbee-ltd newbee-mall Multiple endpoints cross-site request forgery5.3CNA v4.00.3%2026-02-18
CVE-2026-2657wren-lang Wren Error message wren_compiler.c printError stack-based overflow5.5v3.10.2%2026-02-18
CVE-2026-2656ChaiScript type_info.hpp bare_equal use-after-free2.0CNA v4.00.2%2026-02-18
CVE-2026-2655ChaiScript chaiscript_defines.hpp operator use-after-free2.0CNA v4.00.2%2026-02-18
CVE-2026-2654huggingface smolagents LocalPythonExecutor requests.post server-side request forgery9.8v3.10.6%2026-02-18
CVE-2026-2653ADMesh normals.c stl_check_normal_vector heap-based overflow7.8v3.10.2%2026-02-18Fix
CVE-2026-2650Google Chrome Media heap-based buffer overflow8.8CISA ADP v3.10.4%2026-02-18Fix
CVE-2026-2649Google Chrome V8 integer overflow8.8CISA ADP v3.10.4%2026-02-18Fix
CVE-2026-2648Google Chrome PDFium heap-based buffer overflow8.8CISA ADP v3.10.3%2026-02-18Fix
CVE-2026-2644niklasso Minisat DIMACS File SolverTypes.h value out-of-bounds7.8v3.10.2%2026-02-18
CVE-2026-2642ggreer the_silver_searcher search.c search_stream null pointer dereference4.8CNA v4.00.2%2026-02-18
CVE-2026-2641universal-ctags V Language v.c parseExprList recursion4.8CNA v4.00.2%2026-02-18
CVE-2026-2633Gutenberg Blocks with AI by Kadence WP WordPress plugin missing authorization4.3CNA v3.10.4%2026-02-18Fix
CVE-2026-2576Business Directory WordPress plugin unauthenticated SQL injection via payment parameter7.5CNA v3.10.5%2026-02-18Exploit codeFix
CVE-2026-2507F5 BIG-IP null pointer dereference8.7CNA v4.00.3%2026-02-18Fix
CVE-2026-2495WPNakama WordPress plugin unauthenticated SQL injection via order REST API parameter7.5CNA v3.10.4%2026-02-18Fix
CVE-2026-2464Directory traversal in AMR Printer Management by AMR8.7CNA v4.00.8%2026-02-18Fix
CVE-2026-2426WP-DownloadManager WordPress plugin path traversal to arbitrary file deletion6.5CNA v3.11.3%2026-02-18Fix
CVE-2026-2419WP-DownloadManager WordPress plugin path traversal to arbitrary file read2.7CNA v3.10.7%2026-02-18Fix
CVE-2026-2386The Plus Addons for Elementor WordPress plugin incorrect authorization4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-2329Grandstream GXP1600 VoIP Phones unauthenticated stack buffer overflow9.8NVD v3.141.3%2026-02-18MetasploitExploit codeFix
CVE-2026-2296Product Addons for Woocommerce Product Options with Custom Fields WordPress plugin code injection7.2CNA v3.10.6%2026-02-18Fix
CVE-2026-2281Private Comment WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-18Fix
CVE-2026-2230Booking Calendar WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-2127SiteOrigin Widgets Bundle missing authorization5.4CNA v3.10.3%2026-02-18Fix
CVE-2026-2126User Submitted Posts WordPress plugin incorrect authorization5.3CNA v3.10.4%2026-02-18Fix
CVE-2026-2112Dam Spam WordPress plugin cross-site request forgery to arbitrary Pending comment deletion4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-2023WP Plugin Info Card WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-2019Cart All In One For WooCommerce WordPress plugin code injection7.2CNA v3.10.5%2026-02-18Fix
CVE-2026-1999GitHub Enterprise Server auto-merge pull request feature incorrect authorization7.1CNA v4.00.3%2026-02-18Exploit codeFix
CVE-2026-1943YayMail WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-18Fix
CVE-2026-1942Blog2Social: Social Media Auto Post and Scheduler WordPress plugin unauthorized access6.5CNA v3.10.3%2026-02-18Fix
CVE-2026-1941WP Event Aggregator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-18Fix
CVE-2026-1938YayMail WordPress plugin missing authorization authenticated License Key deletion5.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1937YayMail WordPress plugin missing authorization authenticated arbitrary options update7.2CNA v3.10.4%2026-02-18Exploit codeFix
CVE-2026-1931Rent Fetch WordPress plugin unauthenticated stored cross-site scripting via keyword parameter7.2CNA v3.10.3%2026-02-18Fix
CVE-2026-1925EmailKit WordPress plugin unauthorized data modification4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1906PDF Invoices and Packing Slips for WooCommerce WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1860Kali Forms WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1857Gutenberg Blocks with AI by Kadence WP WordPress plugin server-side request forgery4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1831YayMail WordPress plugin missing authorization authenticated plugin installation and activation2.7CNA v3.10.3%2026-02-18Fix
CVE-2026-1807InteractiveCalculator for WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-18Fix
CVE-2026-1714ShopLentor price suggestion AJAX action CRLF injection8.6CNA v3.10.7%2026-02-18Fix
CVE-2026-1666Download Manager WordPress plugin reflected cross-site scripting via redirect_to parameter6.1CNA v3.10.3%2026-02-18Fix
CVE-2026-1656Business Directory WordPress plugin authorization bypass5.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1655EventPrime WordPress plugin missing authorization authenticated arbitrary Event modification4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1649Community Events WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-18Fix
CVE-2026-1640Taskbuilder WordPress plugin authorization bypass4.3CNA v3.10.3%2026-02-18Fix
CVE-2026-1639Taskbuilder WordPress plugin SQL injection6.5CNA v3.10.3%2026-02-18Fix
CVE-2026-1582WP All Export WordPress plugin unauthenticated sensitive information exposure via PHP type Juggling3.7CNA v3.10.3%2026-02-18Fix
CVE-2026-1441Reflected cross-site scripting (XSS) vulnerability in Graylog Web Interface6.1v3.10.2%2026-02-18Fix
CVE-2026-1440Reflected cross-site scripting (XSS) vulnerability in Graylog Web Interface6.1v3.10.2%2026-02-18Fix
CVE-2026-1439Reflected cross-site scripting (XSS) vulnerability in Graylog Web Interface6.1v3.10.2%2026-02-18Fix
CVE-2026-1438Reflected cross-site scripting (XSS) vulnerability in Graylog Web Interface6.1v3.10.2%2026-02-18Fix
CVE-2026-1437Reflected cross-site scripting (XSS) vulnerability in Graylog Web Interface6.1v3.10.2%2026-02-18Fix
CVE-2026-1436Improper access control (IDOR) vulnerability in Graylog Web Interface6.5NVD v3.10.2%2026-02-18Fix
CVE-2026-1435Incorrect management of session invalidation vulnerability in Graylog Web Interface9.8v3.10.4%2026-02-18Fix
CVE-2026-1426Advanced AJAX Product Filters WordPress plugin PHP object injection8.8CNA v3.10.5%2026-02-18Fix
CVE-2026-1404Ultimate Member WordPress plugin reflected cross-site scripting via Filter parameters6.1CNA v3.10.2%2026-02-18Fix
CVE-2026-1368Video Conferencing with Zoom API WordPress plugin unauthenticated SDK Signature Generation7.5CISA ADP v3.11.2%2026-02-18NucleiFix
CVE-2026-1355GitHub Enterprise Server repository migration upload endpoint missing authorization6.0CNA v4.00.4%2026-02-18Fix
CVE-2026-1344Insecure file permissions in Enforce Recovery Key Portal6.5CNA v3.10.1%2026-02-18Fix
CVE-2026-1317WP Import Ultimate CSV XML Importer for WordPress plugin SQL injection6.5CNA v3.10.3%2026-02-18Fix
CVE-2026-1304Membership Plugin Restrict Content WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-18Fix
CVE-2026-1296Frontend Post Submission Manager Lite WordPress plugin unauthenticated open redirect6.1CNA v3.10.5%2026-02-18NucleiFix
CVE-2026-1277URL Shortify WordPress plugin unauthenticated open redirect via redirect_to parameter4.7CNA v3.10.6%2026-02-18NucleiFix
CVE-2026-1200https://github.com/rgaufman/live555 rgaufman/live555 remote code execution6.3CNA v3.10.3%2026-02-18
CVE-2026-1072Keybase.io Verification WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-02-18Fix
CVE-2026-0875Autodesk Shared Components MODEL File Parsing out-of-bounds write7.8CNA v3.10.2%2026-02-18Fix
CVE-2026-0874Autodesk Shared Components CATPART File Parsing out-of-bounds write7.8CNA v3.10.2%2026-02-18Fix
CVE-2026-0665Red Hat Enterprise Linux 10 qemu-kvm: Heap off-by-one in kvm xen physdevop_map_pirq6.5CNA v3.10.2%2026-02-18Fix
CVE-2026-0573GitHub Enterprise Server repository pages API open redirect7.6CNA v4.00.7%2026-02-18Fix
CVE-2026-26736TOTOLINK A3002ru-v3 stack-based buffer overflow8.8v3.10.5%2026-02-17
CVE-2026-26732TOTOLINK A3002ru-v2 stack-based buffer overflow8.8v3.10.3%2026-02-17
CVE-2026-26731TOTOLINK A3002ru-v2 stack-based buffer overflow8.8v3.11.3%2026-02-17
CVE-2026-26357Dell Unisphere for PowerMax cross-site scripting5.4CNA v3.10.3%2026-02-17Fix
CVE-2026-26220LightLLM PD Mode unsafe deserialization RCE9.3CNA v4.01.6%2026-02-17
CVE-2026-26119Microsoft Windows Admin Center elevation of privilege8.8CNA v3.10.8%2026-02-17Emerging ThreatsExploit codeFix
CVE-2026-25903Apache NiFi: Missing authorization of Restricted Permissions for Component Updates8.7CNA v4.00.6%2026-02-17Fix
CVE-2026-25087Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering7.0CISA ADP v3.10.8%2026-02-17Fix
CVE-2026-24734Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5v3.10.5%2026-02-17Fix
CVE-2026-24733Apache Tomcat: Security constraint bypass with HTTP/3.7NVD v3.10.5%2026-02-17Exploit codeFix
CVE-2026-23861Dell Unisphere for PowerMax vApp cross-site scripting5.4CNA v3.10.2%2026-02-17Fix
CVE-2026-23648Glory RBG-100 Recycler System local privilege escalation via insecure file permissions8.5CNA v4.00.1%2026-02-17
CVE-2026-23647Glory RBG-100 Recycler System Hard-coded OS Credentials9.3CNA v4.00.6%2026-02-17
CVE-2026-23598HPE Aruba Networking Private 5G Core API error handling information disclosure6.5CNA v3.10.3%2026-02-17Fix
CVE-2026-23597HPE Aruba Networking Private 5G Core API error handling information disclosure6.5CNA v3.10.3%2026-02-17Fix
CVE-2026-23596HPE Aruba Networking Private 5G Core management API denial of service6.5CNA v3.10.3%2026-02-17Fix
CVE-2026-23595HPE Aruba Networking Private 5G Core application API authentication bypass8.8CNA v3.10.3%2026-02-17Fix
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs) use of hard-coded credentials10.0CNA v3.113.3%2026-02-17KEVFix
CVE-2026-22762Dell Avamar Server path traversal6.5CNA v3.10.3%2026-02-17Fix
CVE-2026-22284Dell SmartFabric OS10 Software command injection6.6CNA v3.11.0%2026-02-17Fix
CVE-2026-22208OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access9.4CNA v4.00.9%2026-02-17
CVE-2026-2630Stand-alone Security Patches Available for Tenable Security Center, and: SC- + SC7.4CNA v4.01.7%2026-02-17Fix
CVE-2026-2629jishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection6.9CNA v4.02.2%2026-02-17
CVE-2026-2627Softland FBackup Backup/Restore HID.dll link following8.5CNA v4.00.2%2026-02-17
CVE-2026-2623Blossom file upload BLOSManager.java put path traversal8.8v3.10.8%2026-02-17
CVE-2026-2622Blossom Article Title ArticleController.java content cross-site scripting5.4v3.10.4%2026-02-17
CVE-2026-2621Sciyon Koyuan Thermoelectricity Heat Network Management System AsyncTreeProxy.aspx SQL injection6.9CNA v4.00.4%2026-02-17
CVE-2026-2620Huace Monitoring and Early Warning System ProjectRole.aspx SQL injection6.9CNA v4.00.4%2026-02-17
CVE-2026-2618Beetel 777VR1 SSH service risky encryption7.4v3.10.4%2026-02-17
CVE-2026-2617Beetel 777VR1 Telnet Service/SSH service insecure default initialization of resource8.8v3.10.7%2026-02-17
CVE-2026-2616Beetel 777VR1 web management hard-coded credentials9.8v3.11.6%2026-02-17
CVE-2026-2615Wavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection8.6CNA v4.07.8%2026-02-17
CVE-2026-2608Gutenberg Blocks by Kadence Blocks WordPress plugin missing authorization4.3CNA v3.10.3%2026-02-17Fix
CVE-2026-2592Zarinpal Gateway for WooCommerce WordPress plugin improper access control to Payment Status update7.7CNA v3.10.5%2026-02-17Fix
CVE-2026-2247SQL injection in Clickedu's SaaS platform8.3CNA v4.00.3%2026-02-17
CVE-2026-2002Forminator Forms WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-17Exploit codeFix
CVE-2026-1670Honeywell CCTV Products missing authentication for critical function9.3CNA v4.00.8%2026-02-17Fix
CVE-2026-1657EventPrime WordPress plugin missing authorization unauthenticated Image upload5.3CNA v3.10.4%2026-02-17Exploit codeFix
CVE-2026-1216RSS Aggregator WordPress plugin reflected cross-site scripting via template parameter7.2CNA v3.10.2%2026-02-17Fix
CVE-2026-0829Frontend File Manager WordPress plugin unauthenticated arbitrary email Sending5.8CISA ADP v3.10.7%2026-02-17Nuclei
CVE-2026-0102Microsoft Edge autofill information disclosure3.1CNA v3.10.5%2026-02-17Fix
CVE-2026-26930SmarterTools SmarterMail cross-site scripting7.2CNA v3.10.4%2026-02-16Fix
CVE-2026-2577Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge10.0CNA v3.10.7%2026-02-16Fix
CVE-2026-2567Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow8.6CNA v4.01.1%2026-02-16
CVE-2026-2566Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow8.6CNA v4.00.9%2026-02-16
CVE-2026-2565Wavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflow7.5CNA v4.01.0%2026-02-16
CVE-2026-2564Intelbras VIP 3260 Z IA OutsideCmd password recovery9.2CNA v4.00.8%2026-02-16
CVE-2026-2563JingDong JD Cloud Box AX6600 jdcapp_rpc controlDevice get_status privileges management8.8v3.10.6%2026-02-16
CVE-2026-2562JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi cast_streen privileges management8.8v3.10.6%2026-02-16
CVE-2026-2561JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get_ddns_uptime privileges management8.8v3.10.6%2026-02-16
CVE-2026-2560kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection5.3CNA v4.02.5%2026-02-16
CVE-2026-2558GeekAI net_handler.go download server-side request forgery5.3CNA v4.00.4%2026-02-16
CVE-2026-2557Cskefu file upload MediaController.java upload cross-site scripting5.4v3.10.4%2026-02-16
CVE-2026-2556Cskefu Endpoint MediaController.java server-side request forgery5.3CNA v4.00.4%2026-02-16
CVE-2026-2555JeecgBoot knowledge document import insecure deserialization7.5v3.10.6%2026-02-16
CVE-2026-2553tushar-2223 Hotel-Management-System HTTP POST request home.php SQL injection5.3CNA v4.00.3%2026-02-16
CVE-2026-2552ZenTao Editor control.php delete path traversal5.1CNA v4.00.4%2026-02-16
CVE-2026-2551ZenTao Backup control.php delete path traversal5.3CNA v4.00.6%2026-02-16
CVE-2026-2550EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload9.3CNA v4.01.0%2026-02-16
CVE-2026-2549zhanghuanhao LibrarySystem 图书馆管理系统 BookController.java access control6.9CNA v4.00.5%2026-02-16
CVE-2026-2548WAYOS FBM-220G rc sub_40F820 command injection5.3CNA v4.02.5%2026-02-16
CVE-2026-2547LigeroSmart index.pl AgentDashboard cross-site scripting6.1v3.10.4%2026-02-16
CVE-2026-2546LigeroSmart index.pl cross-site scripting6.1v3.10.4%2026-02-16
CVE-2026-2545LigeroSmart index.pl cross-site scripting6.1v3.10.4%2026-02-16
CVE-2026-2544yued-fe LuLu UI run.js child_process.exec os command injection6.9CNA v4.03.4%2026-02-16
CVE-2026-2543vichan-devel vichan Password Change pages.php unverified password change5.1CNA v4.00.4%2026-02-16
CVE-2026-2542Total VPN win-service.exe unquoted search path7.3CNA v4.00.2%2026-02-16
CVE-2026-2538Flos Freeware Notepad2 Msimg32.dll uncontrolled search path7.3CNA v4.00.2%2026-02-16
CVE-2026-2537Comfast CF-E4 HTTP POST request mbox-config command injection7.2v3.128.0%2026-02-16Emerging Threats
CVE-2026-2536opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done XML external entity reference5.3CNA v4.00.3%2026-02-16
CVE-2026-2535Comfast CF-N1 V2 mbox-config sub_44AB9C command injection8.8v3.115.6%2026-02-16Emerging Threats
CVE-2026-2534Comfast CF-N1 V2 mbox-config sub_44AC4C command injection8.8v3.115.1%2026-02-16Emerging Threats
CVE-2026-2533Tosei Self-service Washing Machine tosei_datasend.php command injection6.9CNA v4.02.9%2026-02-16
CVE-2026-2532lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery9.8v3.10.3%2026-02-16Fix
CVE-2026-2531MindsDB file upload security.py clear_filename server-side request forgery7.3v3.10.2%2026-02-16Fix
CVE-2026-2530Wavlink WL-WN579A3 wireless.cgi AddMac command injection8.8v3.19.2%2026-02-16
CVE-2026-2529Wavlink WL-WN579A3 wireless.cgi DeleteMac command injection9.8v3.19.4%2026-02-16
CVE-2026-2528Wavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection9.8v3.19.2%2026-02-16
CVE-2026-2527Wavlink WL-WN579A3 login.cgi command injection9.8v3.19.4%2026-02-16
CVE-2026-2526Wavlink WL-WN579A3 wireless.cgi multi_ssid command injection8.8v3.19.2%2026-02-16
CVE-2026-2525Free5GC PFCP UDP endpoint denial of service7.5v3.10.5%2026-02-16
CVE-2026-2524Open5GS MME mme_s11_handle_create_session_response denial of service7.5v3.10.6%2026-02-16
CVE-2026-2523Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion7.5v3.10.5%2026-02-16
CVE-2026-2522Open5GS MME esm-build.c memory corruption9.8v3.10.6%2026-02-16
CVE-2026-2474DDICK Crypt::URandom heap-based buffer overflow7.5CISA ADP v3.10.3%2026-02-16Fix
CVE-2026-2452pretix-newsletter unsafe variable evaluation in email templates7.5CNA v4.00.3%2026-02-16Fix
CVE-2026-2451pretix-doistep unsafe variable evaluation in email templates7.5CNA v4.00.3%2026-02-16Fix
CVE-2026-2447Mozilla Firefox heap buffer overflow in libvpx8.8CISA ADP v3.10.6%2026-02-16Fix
CVE-2026-2439Concierge::Sessions versions from for Perl generate insecure session ids9.8CISA ADP v3.10.4%2026-02-16Fix
CVE-2026-2415pretix unsafe variable evaluation in email templates7.5CNA v4.00.3%2026-02-16Fix
CVE-2026-2101Dassault Systèmes ENOVIAvpm Web Access reflected cross-site scripting8.7CNA v3.10.3%2026-02-16
CVE-2026-2032Mozilla Firefox UI misrepresentation4.3CISA ADP v3.10.2%2026-02-16Fix
CVE-2026-2001wpxpo WowRevenue plugin installation function missing authorization8.8CNA v3.10.4%2026-02-16Fix
CVE-2026-1335Dassault Systèmes SOLIDWORKS eDrawings EPRT file reader out-of-bounds write7.8CNA v3.10.2%2026-02-16Fix
CVE-2026-1334Dassault Systèmes SOLIDWORKS eDrawings EPRT file reader out-of-bounds read7.8CNA v3.10.2%2026-02-16Fix
CVE-2026-1333Dassault Systèmes SOLIDWORKS eDrawings EPRT file reader uninitialized variable use7.8CNA v3.10.2%2026-02-16Fix
CVE-2026-1046Mattermost arbitrary application execution via unvalidated server-controlled URLs in Help menu7.6CNA v3.10.3%2026-02-16Fix
CVE-2026-0999Mattermost authentication bypass via userID login when email and username login are disabled5.4CNA v3.10.2%2026-02-16Fix
CVE-2026-0998Mattermost Zoom plugin meeting request endpoint missing authorization4.3CNA v3.10.2%2026-02-16Fix
CVE-2026-0997Mattermost Zoom plugin channel preference API lacks authorization checks4.3CNA v3.10.2%2026-02-16Fix
CVE-2026-0929RegistrationMagic WordPress plugin Subscriber+ form creation4.3CISA ADP v3.10.2%2026-02-16Fix
CVE-2026-26369JUNG eNet SMART HOME server/ privilege escalation via setUserGroup8.7CNA v4.00.5%2026-02-15
CVE-2026-26368JUNG eNet SMART HOME server/ account takeover via resetUserPassword8.7CNA v4.00.5%2026-02-15
CVE-2026-26367JUNG eNet SMART HOME server/ arbitrary User Deletion via deleteUserAccount8.1v3.10.5%2026-02-15
CVE-2026-26366JUNG eNet SMART HOME server/ use of default credentials9.3CNA v4.00.6%2026-02-15
CVE-2026-2541Micca KE700 brute-force vulnerability due to low entropy6.4CNA v4.00.2%2026-02-15
CVE-2026-2540Micca KE700 Acceptance of previously used rolling codes8.4CNA v4.00.2%2026-02-15
CVE-2026-2539Micca KE700 cleartext transmission of key fob ID5.7CNA v4.00.2%2026-02-15
CVE-2026-2521Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption9.8v3.10.7%2026-02-15
CVE-2026-2517Open5GS SMF types.c ogs_gtp2_parse_tft denial of service7.5v3.10.5%2026-02-15
CVE-2026-2516Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path7.3CNA v4.00.1%2026-02-15Fix
CVE-2026-1793Element Pack Addons for Elementor WordPress plugin authenticated (Contributor+) arbitrary file read6.5CNA v3.10.3%2026-02-15Fix
CVE-2026-1750Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin privilege escalation8.8CNA v3.10.3%2026-02-15Fix
CVE-2026-1490Spam protection, Honeypot, Anti-Spam by CleanTalk WordPress plugin authorization bypass9.8CNA v3.11.2%2026-02-15Fix
CVE-2026-23210Linux kernel ice Ethernet driver PTP support null pointer dereference4.7NVD v3.10.1%2026-02-14Fix
CVE-2026-23209Linux kernel macvlan driver use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23208Linux kernel USB audio driver out-of-bounds write7.8NVD v3.10.1%2026-02-14Fix
CVE-2026-23207Linux kernel Tegra210 QSPI driver race condition4.7NVD v3.10.1%2026-02-14Fix
CVE-2026-23206Linux kernel DPAA2 Ethernet switch driver null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23205Linux kernel SMB client memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23204Linux kernel cls_u32 out-of-bounds read7.1CNA v3.10.1%2026-02-14Fix
CVE-2026-23203In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Commit 1767bb2d47b7 ("ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP.") removed the RTNL lock for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP5.5v3.10.1%2026-02-14Fix
CVE-2026-23202Linux kernel Tegra210 QSPI driver race condition5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23201Linux kernel Ceph client null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23200Linux kernel IPv6 routing null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23199Linux kernel procfs PROCMAP_QUERY deadlock5.5v3.10.1%2026-02-14Fix
CVE-2026-23198Linux kernel KVM irqfd null pointer dereference7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23197Linux kernel i.MX I2C driver null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23196Linux kernel Intel-thc null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23195Linux kernel dmem cgroup controller use-after-free7.0CNA v3.10.1%2026-02-14Fix
CVE-2026-23194Linux kernel Rust Binder driver out-of-bounds write7.8v3.10.1%2026-02-14Fix
CVE-2026-23193Linux kernel iSCSI target driver use-after-free8.8CNA v3.10.4%2026-02-14Fix
CVE-2026-23192Linux kernel linkwatch use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23191Linux kernel ALSA aloop driver use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23190Linux kernel ASoC AMD ACP3x PDM DMA driver memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23189Linux kernel Ceph client null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23188Linux kernel r8152 deadlock5.5v3.10.1%2026-02-14Fix
CVE-2026-23187Linux kernel i.MX8M block controller power domain driver out-of-bounds read7.1v3.10.1%2026-02-14Fix
CVE-2026-23186Linux kernel ACPI power meter driver deadlock5.5v3.10.1%2026-02-14Fix
CVE-2026-23185Linux kernel iwlwifi Wi-Fi driver use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23184Linux kernel binder netlink reporting use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23183Linux kernel dmem cgroup controller null pointer dereference–0.2%2026-02-14Fix
CVE-2026-23182Linux kernel Tegra SPI driver memory leak–0.2%2026-02-14Fix
CVE-2026-23181Linux kernel btrfs superblock read vulnerability–0.2%2026-02-14Fix
CVE-2026-23180Linux kernel dpaa2-switch driver out-of-bounds read7.0CNA v3.10.1%2026-02-14Fix
CVE-2026-23179Linux kernel nvmet-tcp deadlock–0.2%2026-02-14Fix
CVE-2026-23178Linux kernel i2c-hid driver buffer overflow7.8CNA v3.10.2%2026-02-14Fix
CVE-2026-23177Linux kernel shmem truncate handling denial of service–0.2%2026-02-14Fix
CVE-2026-23176Linux kernel toshiba_haps driver memory leak–0.2%2026-02-14Fix
CVE-2026-23175Linux kernel CPSW ethernet driver vulnerability7.0CNA v3.10.1%2026-02-14Fix
CVE-2026-23174Linux kernel NVMe PCI driver null pointer dereference–0.2%2026-02-14Fix
CVE-2026-23173Linux kernel mlx5e TC offload null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23172Linux kernel t7xx WWAN driver buffer overflow8.4CNA v3.10.2%2026-02-14Fix
CVE-2026-23171Linux kernel bonding driver use-after-free7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23170Linux kernel imx TVE driver memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23169Linux kernel mptcp crash7.8CNA v3.10.1%2026-02-14Fix
CVE-2026-23168Linux kernel flexible proportions accounting deadlock5.5v3.10.1%2026-02-14Fix
CVE-2026-23167Linux kernel NFC NCI driver race condition4.7v3.10.1%2026-02-14Fix
CVE-2026-23166Linux kernel ice network driver null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23165Linux kernel sfc deadlock5.5v3.10.1%2026-02-14Fix
CVE-2026-23164Linux kernel rocker switch driver memory leak5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23163Linux kernel amdgpu GMC fault handling null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23162Linux kernel xe NVM auxiliary driver double free7.8v3.10.1%2026-02-14Fix
CVE-2026-23161Linux kernel shmem swap handling race condition7.3CNA v3.10.1%2026-02-14Fix
CVE-2026-23160Linux kernel octeon_ep driver memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23159Linux kernel perf user-space stack trace null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23158Linux kernel GPIO virtuser configfs interface use-after-free7.8v3.10.1%2026-02-14Fix
CVE-2026-23157Linux kernel Btrfs metadata writeback denial of service5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23156Linux kernel efivarfs file read vulnerability7.8v3.10.1%2026-02-14Fix
CVE-2026-23155Linux kernel gs_usb CAN driver null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23154Linux kernel fraglist GRO forwarding vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23153Linux kernel FireWire core transaction list race condition4.7v3.10.1%2026-02-14Fix
CVE-2026-23152Linux kernel mac80211 TTLM parsing vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23151Linux kernel Bluetooth management SSP handling memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23150Linux kernel NFC LLCP UI frame transmission memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23149Linux kernel GEM handle ioctl vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23148Linux kernel nvmet null pointer dereference7.5CNA v3.10.2%2026-02-14Fix
CVE-2026-23147Linux kernel Btrfs zlib S390 compression memory leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23146Linux kernel hci_uart driver null pointer dereference5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23145Linux kernel ext4 xattr handling memory leak5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23144Linux kernel DAMON sysfs context interface vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23143Linux kernel virtio-net driver vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23142Linux kernel DAMON sysfs scheme interface vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23141Linux kernel Btrfs send vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23140Linux kernel BPF XDP test run interface vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23139Linux kernel nf_conncount netfilter module vulnerability7.5CNA v3.10.3%2026-02-14Fix
CVE-2026-23138Linux kernel ftrace stack trace recording vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23137Linux kernel device tree unittest memory leak5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23136In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried. The OSD client tracks the progress of a sparse-read reply using a separate st7.5CNA v3.10.2%2026-02-14Fix
CVE-2026-23135Linux kernel ath12k Wi-Fi driver vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23134Linux kernel kmalloc_nolock allocator vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23133Linux kernel ath10k DMA buffer handling vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23132Linux kernel dw-dp resource leak5.5v3.10.1%2026-02-14Fix
CVE-2026-23131Linux kernel hp-bioscfg attribute registration vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23130Linux kernel ath12k management frame flush vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23129Linux kernel dpll pin registration vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23128Linux kernel arm64 hibernation resume vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23127Linux kernel perf event mmap use-after-free5.5v3.10.1%2026-02-14Fix
CVE-2026-23126Linux kernel netdevsim BPF program list race condition4.7NVD v3.10.1%2026-02-14Fix
CVE-2026-23125Linux kernel SCTP authentication key handling null pointer dereference5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23124Linux kernel IPv6 neighbor discovery race condition5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23123Linux kernel interconnect debugfs interface vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23122Linux kernel igc TSN transmit queue denial of service5.5v3.10.1%2026-02-14Fix
CVE-2026-23121Linux kernel mISDN timer device race condition5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23120Linux kernel l2tp tunnel teardown race condition5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23119Linux kernel bonding driver flow dissector vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-23118Linux kernel rxrpc keepalive timer race condition4.7v3.10.1%2026-02-14Fix
CVE-2026-23117Linux kernel ice driver devlink reinit path null pointer dereference5.5v3.10.1%2026-02-14Fix
CVE-2026-23116Linux kernel imx8m-blk-ctrl VPU power domain denial of service5.5v3.10.1%2026-02-14Fix
CVE-2026-23115Linux kernel tty port linking race condition4.7v3.10.1%2026-02-14Fix
CVE-2026-23114Linux kernel SVE ptrace register writes vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2026-23113Linux kernel io-wq work queue vulnerability5.5NVD v3.10.1%2026-02-14Fix
CVE-2026-2469ImapEngine affected by command injection via the ID command parameters7.2CNA v4.00.4%2026-02-14Fix
CVE-2026-2312Media Library Folders WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-02-14Fix
CVE-2026-2144Magic Login Mail or QR Code WordPress plugin unauthenticated privilege escalation8.1CNA v3.10.5%2026-02-14Fix
CVE-2026-2027AMP Enhancer WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-14
CVE-2026-2024PhotoStack Gallery WordPress plugin unauthenticated SQL injection via postid parameter7.5CNA v3.10.5%2026-02-14
CVE-2026-2022Smart Forms WordPress plugin missing authorization authenticated Campaign data exposure4.3CNA v3.10.3%2026-02-14Fix
CVE-2026-1988Flexi Product Slider and Grid for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.8%2026-02-14
CVE-2026-1987Scheduler Widget WordPress plugin insecure direct object reference5.4CNA v3.10.3%2026-02-14
CVE-2026-1985Press3D WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14Fix
CVE-2026-1983SEATT: Simple Event Attendance WordPress plugin cross-site request forgery4.3CNA v3.10.1%2026-02-14
CVE-2026-1944CallbackKiller service widget WordPress plugin unauthorized access5.3CNA v3.10.4%2026-02-14
CVE-2026-1939Percent to Infograph WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-1932Appointment Booking Calendar Plugin WordPress plugin unauthorized access5.3CNA v3.10.3%2026-02-14
CVE-2026-1915Simple Plyr WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-14
CVE-2026-1912Citations tools WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-14
CVE-2026-1910UpMenu WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14Fix
CVE-2026-1905Sphere Manager WordPress plugin cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-1904Simple Wp colorfull Accordion WordPress plugin cross-site scripting6.4CNA v3.10.2%2026-02-14
CVE-2026-1903Ravelry Designs Widget WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-1901QuestionPro Surveys WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-1843Super Page Cache WordPress plugin unauthenticated stored cross-site scripting via Activity Log7.2CNA v3.10.2%2026-02-14Fix
CVE-2026-1796StyleBidet WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-02-14
CVE-2026-1795Address Bar Ads WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2026-02-14
CVE-2026-1792Geo Widet WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-02-14
CVE-2026-1754personal-authors-category WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-02-14
CVE-2026-1512Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14Fix
CVE-2026-1394WP Quick Contact Us WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-02-14
CVE-2026-1306midi-Synth WordPress plugin unauthenticated arbitrary file upload via export AJAX action9.8CNA v3.14.6%2026-02-14NucleiExploit codeFix
CVE-2026-1303MailChimp Campaigns WordPress plugin missing authorization authenticated MailChimp App Disconnection5.3CNA v3.10.3%2026-02-14
CVE-2026-1258Mail Mint WordPress plugin authenticated (Administrator+) SQL injection via Multiple API Endpoints4.9CNA v3.10.4%2026-02-14Fix
CVE-2026-1254Modula Image Gallery WordPress plugin authorization bypass4.3CNA v3.10.2%2026-02-14Fix
CVE-2026-1249MP3 Audio Player WordPress plugin server-side request forgery5.0CNA v3.10.2%2026-02-14Fix
CVE-2026-1187ZoomifyWP Free WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-1164Easy Voice Mail WordPress plugin unauthenticated stored cross-site scripting via message6.1CNA v3.10.2%2026-02-14Fix
CVE-2026-1096Best-wp-google-map WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14
CVE-2026-0753Super Simple Contact Form WordPress plugin reflected cross-site scripting via sscf_name parameter7.2CNA v3.10.4%2026-02-14
CVE-2026-0751Payment Page Payment Form for Stripe WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14Fix
CVE-2026-0745User Language Switch WordPress plugin server-side request forgery5.5CNA v3.10.4%2026-02-14Exploit code
CVE-2026-0736Chatbot for WordPress by Collect.chat ⚡️ plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-14Fix
CVE-2026-0735User Language Switch WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-14
CVE-2026-0727Accordion and Accordion Slider WordPress plugin authorization bypass5.4CNA v3.10.3%2026-02-14Fix
CVE-2026-0693Allow HTML in Category Descriptions WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-14Fix
CVE-2026-0692BlueSnap Payment Gateway for WooCommerce WordPress plugin missing authorization7.5CNA v3.10.3%2026-02-14NucleiFix
CVE-2026-0559MasterStudy LMS WordPress Plugin for Online Courses and Education stored cross-site scripting6.4CNA v3.10.2%2026-02-14Fix
CVE-2026-0557WP Data Access WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-14Fix
CVE-2026-0550myCred WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-14Fix
CVE-2026-26335Calero VeraSMART R1 Static IIS Machine Keys Enable ViewState RCE9.8v3.12.7%2026-02-13Exploit codeFix
CVE-2026-26334Calero VeraSMART R1 Hard-coded Static AES Keys allow Decryption of Service Credentials7.8v3.10.1%2026-02-13Fix
CVE-2026-26333Calero VeraSMART R1 .NET Remoting arbitrary file read leading to ViewState RCE9.8v3.11.3%2026-02-13Fix
CVE-2026-26273Known affected by account takeover via password reset token leakage9.8CNA v3.01.2%2026-02-13Fix
CVE-2026-26269Vim has a Netbeans specialKeys stack buffer overflow5.4CNA v3.10.5%2026-02-13Fix
CVE-2026-26268Cursor sandbox escape via Git hooks8.1CNA v3.10.5%2026-02-13Fix
CVE-2026-26264bacnet-stack BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash7.8CNA v4.00.6%2026-02-13Fix
CVE-2026-26226beautiful-mermaid SVG attribute injection5.3CNA v4.00.8%2026-02-13Fix
CVE-2026-26221Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE9.3CNA v4.01.4%2026-02-13Fix
CVE-2026-26208Alex4SSB ADB-Explorer ADB Explorer vulnerable to remote code execution via insecure deserialization7.8CNA v3.10.7%2026-02-13
CVE-2026-26190Milvus: Unauthenticated access to Restful API on Metrics Port leads to Critical System Compromise9.8CNA v3.14.6%2026-02-13NucleiFix
CVE-2026-26187lakeFS local block adapter path traversal8.1CNA v3.10.5%2026-02-13Fix
CVE-2026-25991Tandoor Recipes affected by blind SSRF with Internal Network Access via Recipe Import7.7CNA v3.10.4%2026-02-13Exploit codeFix
CVE-2026-25964Tandoor Recipes recipe import path traversal4.9CNA v3.10.6%2026-02-13Exploit codeFix
CVE-2026-25531Kanboard task duplication endpoint missing authorization4.3CNA v3.10.4%2026-02-13Fix
CVE-2026-25108Soliton Systems K.K FileZen OS command injection8.8v3.15.2%2026-02-13KEVFix
CVE-2026-24853Caido has an insufficient patch for DNS rebind leading to RCE8.1CNA v3.10.3%2026-02-13Fix
CVE-2026-23112Linux kernel nvmet-tcp PDU builder out-of-bounds write9.8CNA v3.10.5%2026-02-13Fix
CVE-2026-23111Linux kernel netfilter nf_tables catchall maps use-after-free7.8CNA v3.10.5%2026-02-13Exploit codeFix
CVE-2026-22892Insufficient authorization in Mattermost Jira plugin allows unauthorized access to Post Attachments4.3CNA v3.10.3%2026-02-13Fix
CVE-2026-21878bacnet-stack BACnet Stack improperly Limits Pathnames to a Restricted Directory7.5CNA v3.10.4%2026-02-13Fix
CVE-2026-21870BACnet Stack ubasic interpreter tokenizer stack-based buffer overflow5.5CNA v3.10.3%2026-02-13
CVE-2026-20796Mattermost time-of-check time-of-use vulnerability in common teams API3.1CNA v3.10.2%2026-02-13Fix
CVE-2026-2443Libsoup: Out-of-bounds read in libsoup handle_partial_get leading to heap information disclosure5.3NVD v3.10.5%2026-02-13Fix
CVE-2026-2441Google Chromium CSS use-after-free8.8v3.155.1%2026-02-13KEVExploit codeFix
CVE-2026-2026Tenable Agent improper access control allows denial of service5.4CNA v4.00.1%2026-02-13Fix
CVE-2026-1844PixelYourSite PRO WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-02-13Fix
CVE-2026-1841PixelYourSite WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-02-13Fix
CVE-2026-1721Reflected cross-site scripting (XSS) vulnerability in AI Playground site6.2CNA v4.00.4%2026-02-13Fix
CVE-2026-1619IDOR in Universal Sotware's FlexCity/Kiosk8.3CNA v3.10.3%2026-02-13Fix
CVE-2026-1618Admin account takeover in Universal Sotware's FlexCity/Kiosk8.8CNA v3.10.4%2026-02-13Fix
CVE-2026-1578HP App potential cross-site scripting5.1CNA v4.00.1%2026-02-13Fix
CVE-2026-0872Improper certificate validation vulnerability in Thales SafeNet Agent for Windows Logon2.5CNA v4.00.2%2026-02-13Fix
CVE-2026-26235JUNG Smart Visu Server JUNG Smart Visu Server missing authentication8.7CNA v4.02.0%2026-02-12Exploit code
CVE-2026-26234JUNG Smart Visu Server improper neutralization of HTTP headers for scripting syntax8.7CNA v4.00.5%2026-02-12
CVE-2026-26225Intego Personal Backup Task file privilege escalation8.5CNA v4.00.2%2026-02-12Fix
CVE-2026-26224Intego Log Reporter TOCTOU local privilege escalation8.5CNA v4.00.1%2026-02-12
CVE-2026-26219newbee-mall Unsalted MD5 Password Hashing enables Offline Credential Cracking9.3CNA v4.00.3%2026-02-12
CVE-2026-26218newbee-mall Default Seeded Administrator Credentials allow account takeover9.3CNA v4.00.6%2026-02-12
CVE-2026-26217Crawl4AI Docker API local file inclusion via file URL Handling7.5NVD v3.12.3%2026-02-12NucleiFix
CVE-2026-26216Crawl4AI Docker API unauthenticated remote code execution via Hooks parameter10.0CNA v4.06.0%2026-02-12Reported exploitedNucleiFix
CVE-2026-26214Xiaomi Galaxy FDS Android SDK TLS Hostname Verification Disabled enables MITM9.1CNA v4.00.3%2026-02-12
CVE-2026-26188Solspace Freeform plugin affected by stored cross-site scripting in Freeform Craft Plugin CP UI5.1CNA v4.00.3%2026-02-12Fix
CVE-2026-26185Directus affected by User Enumeration via Password Reset Timing Attack5.3CNA v3.10.4%2026-02-12Fix
CVE-2026-26076ntpd-rs affected by excessive CPU load from malformed packets6.9CNA v4.00.6%2026-02-12Fix
CVE-2026-26075Cross-site request forgery (CSRF) in FastGPT6.9CNA v4.00.1%2026-02-12Fix
CVE-2026-26069Scraparr Readarr Integration exposes sensitive values as metric labels9.1CNA v4.00.5%2026-02-12Fix
CVE-2026-26068emp3r0r Agent-Controlled Metadata to Operator RCE (tmux command injection)9.3CNA v4.03.8%2026-02-12Fix
CVE-2026-26056Arbitrary WASM code execution via AnnotationOverrideFlight injection in Yoke ATC8.8CNA v3.10.6%2026-02-12Fix
CVE-2026-26055Unauthenticated Admission Webhook endpoints in Yoke ATC7.5CNA v3.10.6%2026-02-12
CVE-2026-26020AutoGPT affected by remote code execution via Dynamic Module Import in Block Loading (__import__)9.4CNA v4.00.9%2026-02-12Fix
CVE-2026-26011ros-navigation navigation2 critical heap out-of-bounds access in `pf_cluster_stats`9.3CNA v4.00.8%2026-02-12
CVE-2026-26005ClipBucket v5 enables internal network scans via an SSRF5.0CNA v3.10.3%2026-02-12Fix
CVE-2026-26000XWiki Platform affected by click-jacking through CSS injection in comments5.3CNA v4.00.4%2026-02-12Fix
CVE-2026-25996inspektor-gadget Inspektor Gadget uses unsanitized ANSI Escape Sequences in `columns` Output Mode6.9CNA v4.00.7%2026-02-12Fix
CVE-2026-25949Traefik: TCP readTimeout bypass via STARTTLS on Postgres7.5CNA v3.10.8%2026-02-12Fix
CVE-2026-25933Arduino App Lab has Improper Data Validation in Internal Terminal interface6.9CNA v3.10.2%2026-02-12Fix
CVE-2026-25922authentik has a signature verification Bypass via SAML Assertion Wrapping8.8CNA v3.10.3%2026-02-12Fix
CVE-2026-25828grub-btrfs resolve_device initramfs script OS command injection5.4CISA ADP v3.11.4%2026-02-12
CVE-2026-25768LavinMQ is missing vhost access control7.1CNA v4.00.4%2026-02-12Fix
CVE-2026-25767LavinMQ has incomplete shovel configuration validation8.6CNA v4.00.4%2026-02-12Fix
CVE-2026-25748authentik has a forward authentication bypass with broken cookie8.6CNA v3.10.8%2026-02-12Fix
CVE-2026-25676M-Audio M-Track Duo HD uncontrolled search path7.1CNA v4.00.2%2026-02-12Exploit code
CVE-2026-25227authentik affected by remote code execution9.1CNA v3.10.8%2026-02-12Fix
CVE-2026-24895FrankenPHP's unicode case-folding length expansion causes incorrect split_path index in FrankenPHP8.9CNA v4.00.6%2026-02-12Fix
CVE-2026-24894FrankenPHP leaks session data between requests in worker mode8.7CNA v4.00.4%2026-02-12Fix
CVE-2026-24044element-hq matrix-tools ESS Community Helm Chart has a weak server key generation method9.2CNA v4.00.3%2026-02-12Fix
CVE-2026-23857Dell Update Package improper handling of insufficient permissions8.2CNA v3.10.1%2026-02-12Fix
CVE-2026-23856Dell iDRAC Service Module improper access control7.8CNA v3.10.1%2026-02-12Fix
CVE-2026-22821mreporting affected by a SQLI on date change4.9CNA v3.10.3%2026-02-12Fix
CVE-2026-21722grafana/grafana public Dashboards time range restriction on annotations can be bypassed5.3CNA v3.10.3%2026-02-12Fix
CVE-2026-21438webtransport-go affected by a memory exhaustion Attack due to Missing Cleanup of Streams Map5.3CNA v3.10.4%2026-02-12Fix
CVE-2026-21435webtransport-go CloseWithError can block indefinitely5.3CNA v3.10.4%2026-02-12Fix
CVE-2026-21434quic-go webtransport-go WT_CLOSE_SESSION capsule handling resource exhaustion5.3CNA v3.10.4%2026-02-12Fix
CVE-2026-2391Qs's arrayLimit bypass in comma parsing allows denial of service6.3CNA v4.00.5%2026-02-12Fix
CVE-2026-2327markdown-it is has a regular expression denial of service (ReDoS)7.5v3.10.7%2026-02-12Fix
CVE-2026-2276Reflected cross-site scripting in the Wix web application5.3CNA v4.00.4%2026-02-12
CVE-2026-2007PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory8.2CNA v3.10.5%2026-02-12Fix
CVE-2026-2006PostgreSQL missing validation of multibyte character length executes arbitrary code8.8CNA v3.11.1%2026-02-12Fix
CVE-2026-2005PostgreSQL pgcrypto heap buffer overflow executes arbitrary code8.8CNA v3.11.4%2026-02-12Exploit codeFix
CVE-2026-2004PostgreSQL intarray extension vulnerability8.8CNA v3.11.3%2026-02-12Fix
CVE-2026-2003PostgreSQL oidvector discloses a few bytes of memory4.3CNA v3.10.3%2026-02-12Fix
CVE-2026-1729AdForest WordPress theme authentication bypass9.8CNA v3.10.6%2026-02-12Exploit codeFix
CVE-2026-1671Activity Log for WordPress plugin missing authorization sensitive information exposure6.5CNA v3.10.3%2026-02-12Fix
CVE-2026-1537LatePoint WordPress plugin unauthorized access5.3CNA v3.10.3%2026-02-12Fix
CVE-2026-1358Airleader Master unrestricted upload of file with dangerous type9.3CNA v4.01.3%2026-02-12Fix
CVE-2026-1356Converter for Media WordPress plugin server-side request forgery4.8CNA v3.10.2%2026-02-12Fix
CVE-2026-1320Secure Copy Content Protection and Content Locking WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2026-02-12Fix
CVE-2026-1316Customer Reviews for WooCommerce WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-02-12Fix
CVE-2026-1104ninjateam FastDup REST API backup endpoints missing authorization8.8CNA v3.10.3%2026-02-12Fix
CVE-2026-0969HashiCorp Shared library code injection8.8CNA v3.10.6%2026-02-12Fix
CVE-2026-0619Integer wraparound DoS in Silicon Labs Matter Implementation6.0CNA v4.00.3%2026-02-12Fix
CVE-2026-26215manga-image-translator Shared API unsafe deserialization RCE9.3CNA v4.01.1%2026-02-11
CVE-2026-26158Red Hat Hardened Images busybox: Busybox: Arbitrary file modification and privilege escalation7.0CNA v3.10.2%2026-02-11Fix
CVE-2026-26157Red Hat Hardened Images busybox: Busybox: Arbitrary file overwrite and potential code execution7.0CNA v3.10.6%2026-02-11Exploit codeFix
CVE-2026-26079Roundcube Webmail inclusion of untrusted functionality4.7CNA v3.10.5%2026-02-11Fix
CVE-2026-26031Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students1.3CNA v4.00.3%2026-02-11Fix
CVE-2026-26029sf-mcp-server has a command injection in query_records tool due to unsafe use of child_process.exec7.5CNA v3.11.4%2026-02-11Fix
CVE-2026-26023Client‑side DOM XSS in the web chat app of Dify when using echarts5.3CNA v4.00.4%2026-02-11Fix
CVE-2026-26021Prototype pollution in set-in9.4CNA v4.00.5%2026-02-11Fix
CVE-2026-26019@langchain/community affected by SSRF Bypass in RecursiveUrlLoader4.1CNA v3.10.4%2026-02-11Fix
CVE-2026-26014Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key5.9CNA v3.10.7%2026-02-11Fix
CVE-2026-26012vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions6.5CNA v3.10.4%2026-02-11Emerging ThreatsExploit codeFix
CVE-2026-26010Leaky JWTs in OpenMetadata exposing highly-privileged bot users7.6CNA v3.00.4%2026-02-11Fix
CVE-2026-25999Klaw has an improper authorisation check on /resetMemoryCache7.1CNA v3.10.4%2026-02-11Fix
CVE-2026-25994PJSIP has a heap buffer overflow in ICE with long username8.1CNA v4.02.1%2026-02-11Exploit codeFix
CVE-2026-25990Pillow has an out-of-bounds write when loading PSD images8.6CNA v4.00.4%2026-02-11Fix
CVE-2026-25935Vikunja affected by XSS via Task Preview8.6CNA v4.00.3%2026-02-11Fix
CVE-2026-25924Kanboard is missing access control on Plugin Installation leading to Administrative RCE8.5CNA v3.10.8%2026-02-11Exploit codeFix
CVE-2026-25869MiniGal Nano path traversal via dir parameter7.5v3.10.8%2026-02-11
CVE-2026-25868MiniGal Nano reflected XSS via dir parameter6.1v3.10.4%2026-02-11
CVE-2026-25759statamic cms statmatic affected by privilege escalation via stored cross-site scripting8.7CNA v3.10.5%2026-02-11Fix
CVE-2026-25633Statamic's missing authorization allows access to assets4.3CNA v3.10.4%2026-02-11Fix
CVE-2026-25084ZLAN Information Technology ZLAN5143D missing authentication for critical function9.3CNA v4.00.8%2026-02-11Fix
CVE-2026-25062Outline affected an arbitrary file read via path traversal in JSON Import5.5CNA v3.10.4%2026-02-11Fix
CVE-2026-24789ZLAN Information Technology ZLAN5143D missing authentication for critical function9.3CNA v4.00.7%2026-02-11Fix
CVE-2026-22894QNAP File Station 5 path traversal1.3CNA v4.00.6%2026-02-11Fix
CVE-2026-20700Apple Multiple buffer overflow7.8CISA ADP v3.11.4%2026-02-11KEVExploit codeKCVFix
CVE-2026-20682Apple iOS and iPadOS logic flaw5.3v3.10.2%2026-02-11Fix
CVE-2026-20681Apple macOS information disclosure3.3v3.10.1%2026-02-11Fix
CVE-2026-20680Apple macOS information disclosure6.5v3.10.1%2026-02-11Fix
CVE-2026-20678Apple iOS and iPadOS information disclosure5.5v3.10.1%2026-02-11Fix
CVE-2026-20677Apple macOS race condition9.0v3.10.3%2026-02-11Fix
CVE-2026-20676Apple Safari resource exhaustion5.3v3.10.2%2026-02-11Fix
CVE-2026-20675Apple macOS out-of-bounds read5.5NVD v3.10.3%2026-02-11Fix
CVE-2026-20674Apple iOS and iPadOS information disclosure4.6v3.10.1%2026-02-11Fix
CVE-2026-20673Apple macOS logic flaw5.3v3.10.3%2026-02-11Fix
CVE-2026-20671Apple macOS command injection3.1CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20669Apple macOS path traversal5.5v3.10.1%2026-02-11Fix
CVE-2026-20667Apple macOS logic flaw8.8v3.10.1%2026-02-11Fix
CVE-2026-20666Apple macOS improper authorization5.5v3.10.1%2026-02-11Fix
CVE-2026-20663Apple iOS and iPadOS sensitive information in log files3.3v3.10.1%2026-02-11Fix
CVE-2026-20662Apple macOS information disclosure4.6v3.10.2%2026-02-11Fix
CVE-2026-20661Apple iOS and iPadOS improper authorization4.6v3.10.2%2026-02-11Fix
CVE-2026-20660Apple Safari path traversal7.5v3.10.8%2026-02-11Fix
CVE-2026-20658Apple macOS privilege escalation7.8v3.10.1%2026-02-11Fix
CVE-2026-20656Apple Safari improper authorization3.3v3.10.1%2026-02-11Fix
CVE-2026-20655Apple iOS and iPadOS improper authentication5.5v3.10.1%2026-02-11Fix
CVE-2026-20654Apple macOS denial of service5.5v3.10.1%2026-02-11Fix
CVE-2026-20653Apple macOS path traversal5.5v3.10.2%2026-02-11Fix
CVE-2026-20652Apple Safari buffer overflow7.5v3.10.6%2026-02-11Fix
CVE-2026-20650Apple macOS denial of service7.5v3.10.5%2026-02-11Fix
CVE-2026-20649Apple macOS insecure temporary file7.5v3.10.2%2026-02-11Fix
CVE-2026-20648Apple macOS information disclosure5.5v3.10.1%2026-02-11Fix
CVE-2026-20647Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20646Apple macOS sensitive information in log files3.3v3.10.1%2026-02-11Fix
CVE-2026-20645Apple iOS and iPadOS clickjacking4.6v3.10.2%2026-02-11Fix
CVE-2026-20644Apple Safari buffer overflow6.5CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20642Apple iOS and iPadOS improper input validation2.4v3.10.1%2026-02-11Fix
CVE-2026-20641Apple macOS information disclosure7.1CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20640Apple iOS and iPadOS improper exception handling4.6CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20638Apple iOS and iPadOS logic flaw5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20636Apple Safari buffer overflow6.5CISA ADP v3.10.4%2026-02-11Fix
CVE-2026-20635Apple Safari buffer overflow4.3CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20634Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS information disclosure5.5CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20630Apple macOS insecure inherited permissions5.5CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20629Apple macOS insecure storage of sensitive information5.5v3.10.1%2026-02-11Fix
CVE-2026-20628Apple macOS insecure permissions7.1CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20627Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20626Apple macOS missing authorization7.8CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20625Apple macOS path traversal5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20624Apple macOS incorrect authorization5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20623Apple macOS insecure permissions5.5CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20621Apple macOS denial of service5.5v3.10.1%2026-02-11Fix
CVE-2026-20620Apple macOS out-of-bounds read7.7CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20619Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20618Apple macOS insecure temporary file5.5v3.10.1%2026-02-11Fix
CVE-2026-20617Apple macOS race condition7.0v3.10.1%2026-02-11Fix
CVE-2026-20616Apple macOS out-of-bounds write8.8CISA ADP v3.10.6%2026-02-11Fix
CVE-2026-20615Apple macOS path traversal7.8v3.10.2%2026-02-11Fix
CVE-2026-20614Apple macOS path traversal7.8v3.10.2%2026-02-11Fix
CVE-2026-20612Apple macOS information disclosure5.5CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20611Apple macOS out-of-bounds read7.8CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20610Apple macOS link following7.8CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20609Apple macOS out-of-bounds read4.4CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20608Apple Safari buffer overflow5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-20606Apple macOS information disclosure7.1CISA ADP v3.10.1%2026-02-11Fix
CVE-2026-20605Apple iOS, iPadOS and macOS memory corruption4.6CISA ADP v3.10.3%2026-02-11Fix
CVE-2026-20603Apple macOS improper access control4.4v3.10.1%2026-02-11Fix
CVE-2026-20602Apple macOS denial of service5.5v3.10.1%2026-02-11Fix
CVE-2026-20601Apple macOS insecure permissions3.3v3.10.1%2026-02-11Fix
CVE-2026-2361DALIBO PostgreSQL Anonymizer get_tablesample_ratio function privilege escalation8.0CNA v3.10.3%2026-02-11Fix
CVE-2026-2360DALIBO PostgreSQL Anonymizer privilege escalation8.0CNA v3.10.4%2026-02-11Fix
CVE-2026-2345Insufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers3.6CNA v3.10.1%2026-02-11
CVE-2026-2344Stored XSS on Plunet BusinessManager8.6CNA v4.00.2%2026-02-11
CVE-2026-2337Refleccted XSS on Plunet BusinessManager8.7CNA v4.00.4%2026-02-11
CVE-2026-2323Google Chrome Downloads inappropriate implementation4.3CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2322Google Chrome file input inappropriate implementation5.4CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2321Google Chrome Ozone use-after-free8.8v3.10.2%2026-02-11Fix
CVE-2026-2320Google Chrome file input inappropriate implementation6.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2319Google Chrome race condition7.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2318Google Chrome PictureInPicture inappropriate implementation6.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2317Google Chrome Animation inappropriate implementation6.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2316Google Chrome Frames insufficient policy enforcement6.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2026-2315Google Chrome WebGPU inappropriate implementation8.8CISA ADP v3.18.6%2026-02-11Fix
CVE-2026-2314Google Chrome Codecs heap-based buffer overflow8.8CISA ADP v3.14.4%2026-02-11Fix
CVE-2026-2313Google Chrome CSS use-after-free8.8CISA ADP v3.14.3%2026-02-11Fix
CVE-2026-2295WPZOOM Addons for Elementor WordPress plugin unauthorized access5.3CNA v3.10.3%2026-02-11Fix
CVE-2026-2250Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC7.5CNA v3.10.4%2026-02-11
CVE-2026-2249Unauthenticated remote command execution via Web console in METIS DFS9.8CNA v3.10.5%2026-02-11
CVE-2026-2248Unauthenticated Remote Root Shell Access via Web console in METIS WIC9.8CNA v3.10.5%2026-02-11
CVE-2026-1893Orbisius Random Name Generator WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-11Fix
CVE-2026-1885Slideshow Wp WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11
CVE-2026-1853BuddyHolis ListSearch WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11
CVE-2026-1837Google libjxl: Out-of-bounds write in grayscale color transformation when using LCMS28.7CNA v4.00.3%2026-02-11Fix
CVE-2026-1833WaMate Confirm WordPress plugin unauthorized access5.3CNA v3.10.3%2026-02-11Fix
CVE-2026-1827IDE Micro code-editor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-11
CVE-2026-1826OpenPOS Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11Fix
CVE-2026-1821Microtango WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11Fix
CVE-2026-1809HTML Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11
CVE-2026-1804WDES Responsive Popup WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-11
CVE-2026-1786Twitter posts to Blog WordPress plugin missing authorization unauthenticated plugin settings update6.5CNA v3.10.3%2026-02-11
CVE-2026-1748Invoct WordPress plugin unauthorized access4.3CNA v3.10.3%2026-02-11Fix
CVE-2026-1669Google arbitrary file read in Keras via HDF5 External Datasets7.1CNA v4.00.3%2026-02-11Fix
CVE-2026-1571Reflected XSS vulnerability on TP-Link Archer C605.3CNA v4.00.3%2026-02-11Fix
CVE-2026-1560Custom Block Builder Lazy Blocks WordPress plugin authenticated (Contributor+) remote code execution8.8CNA v3.18.9%2026-02-11Exploit codeFix
CVE-2026-1458Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-02-11Fix
CVE-2026-1456Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-02-11Fix
CVE-2026-1387Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.3%2026-02-11Fix
CVE-2026-1357Migration WordPress plugin arbitrary file upload9.8CNA v3.135.1%2026-02-11NucleiExploit codeFix
CVE-2026-1282Improper neutralization of script-related HTML tags in a web page (basic XSS) in GitLab3.5CNA v3.10.2%2026-02-11Fix
CVE-2026-1235WP eCommerce WordPress plugin unauthenticated PHP object injection6.5CISA ADP v3.10.3%2026-02-11
CVE-2026-1231Beaver Builder Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-11Fix
CVE-2026-1227Schneider Electric EcoStruxure Building Operation Workstation XML external entity injection7.0CNA v4.00.1%2026-02-11Fix
CVE-2026-1226Schneider Electric EcoStruxure Building Operation Workstation code injection7.0CNA v4.00.1%2026-02-11Fix
CVE-2026-1215MMA Call Tracking WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.2%2026-02-11
CVE-2026-1094Improper validation of unsafe equivalence in input in GitLab4.6CNA v3.10.2%2026-02-11Fix
CVE-2026-1080Authorization bypass through user-controlled key in GitLab4.3CNA v3.10.2%2026-02-11Fix
CVE-2026-0958Interpretation conflict in GitLab7.5CNA v3.10.4%2026-02-11Fix
CVE-2026-0910wpForo Forum WordPress plugin authenticated (Subscriber+) PHP object injection8.8CNA v3.10.5%2026-02-11Fix
CVE-2026-0815Category Image WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-11
CVE-2026-0724WPlyr Media Block WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-11