CVE-2026 list

CVE-2026 records published in February 2026

Page four of four: records 3,001 to 3,068 of the 3,068 published in February 2026, newest first. The first page carries the figures for February 2026.

CVE-2026 records published in February 2026, newest first: records 3,001 to 3,068 of 3,068
CVE Summary CVSS EPSS Published Signals
CVE-2026-23476FacturaScripts Affected by reflected XSS5.4CNA v3.10.3%2026-02-02Fix
CVE-2026-22888Cybozu Garoon portal settings vulnerability7.5v3.10.5%2026-02-02Fix
CVE-2026-22881Cybozu Garoon message function cross-site scripting5.4v3.10.3%2026-02-02Fix
CVE-2026-22780Rizin has a heap overflow on mach0_chained_fixups.c4.4CNA v3.10.2%2026-02-02Fix
CVE-2026-22778vLLM leaks a heap address when PIL throws an error9.8CNA v3.116.7%2026-02-02NucleiMetasploitFix
CVE-2026-22229Command injection vulnerability on TP-Link Archer BE230 and Deco BE258.6CNA v4.02.1%2026-02-02Fix
CVE-2026-22227Command injection vulnerability on TP-Link Archer BE2308.5CNA v4.02.7%2026-02-02Fix
CVE-2026-22226Command injection vulnerability on TP-Link Archer BE230 and AX738.5CNA v4.02.5%2026-02-02Exploit codeFix
CVE-2026-22225Command injection vulnerability on TP-Link Archer BE230 and AXE758.5CNA v4.02.8%2026-02-02Fix
CVE-2026-22224Command injection vulnerability on TP-Link Archer BE2308.5CNA v4.02.7%2026-02-02Fix
CVE-2026-22223Command injection vulnerability on TP-Link Archer BE230 and BE3600 v18.5CNA v4.01.4%2026-02-02Fix
CVE-2026-22222Command injection vulnerability on TP-Link Archer BE230 and AXE75 v28.5CNA v4.01.6%2026-02-02Fix
CVE-2026-22221Command injection vulnerability on TP-Link Archer BE230 and BE3600 v18.5CNA v4.01.4%2026-02-02Fix
CVE-2026-20711Cybozu Garoon E-mail function cross-site scripting6.1v3.10.3%2026-02-02Fix
CVE-2026-20422MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20421MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20420MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20419MediaTek chipset wlan AP/STA firmware denial of service6.5CISA ADP v3.10.8%2026-02-02Fix
CVE-2026-20418MediaTek chipset Thread out-of-bounds write9.8CISA ADP v3.10.4%2026-02-02Fix
CVE-2026-20417MediaTek chipset pcie out-of-bounds write5.3CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20415MediaTek chipset imgsys memory corruption5.5CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20414MediaTek chipset imgsys privilege escalation6.7CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20413MediaTek chipset imgsys out-of-bounds write6.7CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20412MediaTek chipset cameraisp out-of-bounds write7.8CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20411MediaTek chipset cameraisp privilege escalation7.8CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20410MediaTek chipset imgsys out-of-bounds write6.7CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20409MediaTek chipset imgsys out-of-bounds write7.8CISA ADP v3.10.1%2026-02-02Fix
CVE-2026-20408MediaTek chipset wlan out-of-bounds write8.8CISA ADP v3.10.3%2026-02-02Fix
CVE-2026-20407MediaTek chipset wlan STA driver privilege escalation9.3CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20406MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20405MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20404MediaTek chipset Modem crash6.5CISA ADP v3.10.5%2026-02-02Exploit codeFix
CVE-2026-20403MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20402MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-20401MediaTek chipset Modem crash7.5v3.10.7%2026-02-02Fix
CVE-2026-1778TLS disabled by default in select AWS/sagemaker-python-sdk configurations8.2CNA v4.00.3%2026-02-02Fix
CVE-2026-1777Cleartext transmission of sensitive materials in AWS/sagemaker-python-sdk8.5CNA v4.00.5%2026-02-02Fix
CVE-2026-1770CrafterCMS improper control of dynamically-managed code resources in Crafter Studio4.5CNA v4.00.5%2026-02-02Fix
CVE-2026-1761libsoup multipart HTTP response parser stack-based buffer overflow8.6CNA v3.11.1%2026-02-02Fix
CVE-2026-1760Red Hat Enterprise Linux 10 libsoup: Soupserver: Denial of service via HTTP request smuggling5.3CNA v3.10.5%2026-02-02Fix
CVE-2026-1757libxml2 xmllint interactive shell memory leak6.2CNA v3.10.2%2026-02-02Fix
CVE-2026-1751Missing authorization in GitLab3.1CNA v3.10.2%2026-02-02Fix
CVE-2026-1746JeecgBoot Online Report API loadDictItemByKeyword SQL injection8.8v3.10.5%2026-02-02
CVE-2026-1745SourceCodester Medical Certificate Generator App cross-site request forgery5.3CNA v4.00.2%2026-02-02
CVE-2026-1744D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross-site scripting4.8v3.10.5%2026-02-02
CVE-2026-1743DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay2.3CNA v4.00.4%2026-02-02
CVE-2026-1742EFM ipTIME A8004T VPN service timepro.cgi commit_vpncli_file_upload unrestricted upload7.2v3.10.4%2026-02-02
CVE-2026-1741EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor7.5CNA v4.00.8%2026-02-02Emerging Threats
CVE-2026-1740EFM ipTIME A8004T timepro.cgi login interface improper authentication9.8v3.10.6%2026-02-02
CVE-2026-1739Free5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereference7.5v3.10.8%2026-02-02
CVE-2026-1738Open5GS SGWC context.c sgwc_tunnel_add assertion6.9CNA v4.00.7%2026-02-02
CVE-2026-1737Open5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertion6.9CNA v4.00.6%2026-02-02
CVE-2026-1736Open5GS SGWC s11-handler.c assertion6.9CNA v4.00.7%2026-02-02
CVE-2026-1735Yealink MeetingBar A30 Diagnostic command injection2.4CNA v4.01.4%2026-02-02
CVE-2026-1734Zhong Bang CRMEB crontab Endpoint CrontabController.php authorization6.9CNA v4.00.5%2026-02-02
CVE-2026-1703Python Packaging Authority pip limited path traversal when installing wheel archives2.0CNA v4.00.4%2026-02-02Fix
CVE-2026-1531Red Hat Satellite foreman-kubevirt SSL verification improper certificate validation8.1CNA v3.10.3%2026-02-02Fix
CVE-2026-1530Red Hat Satellite fog-kubevirt improper certificate validation8.1CNA v3.10.3%2026-02-02Fix
CVE-2026-1232Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows6.8CNA v4.00.1%2026-02-02Exploit code
CVE-2026-1186Path traversal in EAP Legislator8.6CNA v4.00.4%2026-02-02Fix
CVE-2026-1117Improper access control in parisneo/lollms8.2CNA v3.00.6%2026-02-02Fix
CVE-2026-0924BuhoCleaner local privilege escalation via PID reuse attack7.0v3.10.2%2026-02-02Fix
CVE-2026-0658Five Star Restaurant Reservations for WordPress arbitrary Bookings deletion via CSRF4.3CISA ADP v3.10.2%2026-02-02Fix
CVE-2026-0631TP-Link Systems Archer BE230 Surfshark VPN login functionality OS command injection8.5CNA v4.01.6%2026-02-02Fix
CVE-2026-0630Command injection vulnerability on TP-Link Archer BE230 and AXE758.5CNA v4.01.4%2026-02-02Fix
CVE-2026-0599Hugging Face Text Generation Inference image input validation resource exhaustion7.5CNA v3.029.9%2026-02-02Fix
CVE-2026-25253OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration from gatewayUrl8.8CNA v3.124.4%2026-02-01Exploit codeFix
CVE-2026-1733Zhong Bang CRMEB :uni tidyOrder improper authorization5.3CNA v4.00.4%2026-02-01