CVE-2026 list

CVE-2026 records published in May 2026

Page three of seven: records 2,001 to 3,000 of the 6,293 published in May 2026, newest first. The first page carries the figures for May 2026.

CVE-2026 records published in May 2026, newest first: records 2,001 to 3,000 of 6,293
CVE Summary CVSS EPSS Published Signals
CVE-2026-45659Microsoft SharePoint Server deserialization of untrusted data8.8CNA v3.12.7%2026-05-22KEVEmerging ThreatsExploit codeFix
CVE-2026-44930Apache CXF: LDAP injection vulnerability in XKMS LDAP Repository9.8v3.10.7%2026-05-22Fix
CVE-2026-44618Apache CXF: XXE vulnerability in WS-Transfer functionality5.3CISA ADP v3.10.5%2026-05-22Fix
CVE-2026-44417Apache CXF: Incomplete fix for (Untrusted JMS configuration can lead to RCE)7.5CISA ADP v3.10.9%2026-05-22Fix
CVE-2026-44409Information disclosure vulnerability in ZTE MU52505.7CNA v3.10.4%2026-05-22Fix
CVE-2026-42901Microsoft Entra ID elevation of privilege10.0CNA v3.10.5%2026-05-22Fix
CVE-2026-42827M365 Copilot information disclosure6.5CNA v3.10.9%2026-05-22Fix
CVE-2026-42627ArmNN tensor shape size calculation integer overflow6.2CISA ADP v3.10.2%2026-05-22
CVE-2026-42626HP ENVY 5000 series printers JetDirect port 9100 service denial of service5.9CISA ADP v3.10.2%2026-05-22
CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/Crypto/ssh/knownhosts9.1CISA ADP v3.16.9%2026-05-22Fix
CVE-2026-42506Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-42502Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-41149Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection5.3CNA v4.00.5%2026-05-22Fix
CVE-2026-41148Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection5.3CNA v4.00.6%2026-05-22Fix
CVE-2026-41147NukeViet CMS: Stored cross-site scripting8.7CNA v3.10.6%2026-05-22Fix
CVE-2026-41104Microsoft Planetary Computer Pro information disclosure10.0CNA v3.11.7%2026-05-22Fix
CVE-2026-41090Microsoft Copilot tampering9.3CNA v3.10.8%2026-05-22Fix
CVE-2026-41076RT: LDAP authentication bypass via empty password8.1CNA v3.10.7%2026-05-22Fix
CVE-2026-41075RT: SQL injection via entry_aggregator parameter in JSON search8.8CNA v3.10.5%2026-05-22Fix
CVE-2026-41074RT has broken CSRF protection for authenticated users7.1CNA v3.10.2%2026-05-22Fix
CVE-2026-41073RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps4.6CNA v3.10.3%2026-05-22Fix
CVE-2026-41071Struktur libheif SampleAuxInfoReader HEIF sequence parser out-of-bounds read5.1CNA v4.00.4%2026-05-22Fix
CVE-2026-41069libheif allows Out-of-bounds vector access leading to invalid dereference (DoS)6.5CNA v3.10.4%2026-05-22Fix
CVE-2026-40864JupyterHub: Cross-origin form POSTs bypass XSRF5.4CNA v3.10.2%2026-05-22Exploit codeFix
CVE-2026-40610BentoML has information disclosure in `BentoML build` via symlink traversal in the build context5.5CNA v3.10.2%2026-05-22Fix
CVE-2026-40607MantisBT is vulnerable to stored XSS through its Saved-Filter Owner Column7.5CNA v4.00.5%2026-05-22Fix
CVE-2026-40598MantisBT has potential Referer-based reflected HTML injection / XSS in Tag Update page6.9CNA v4.00.5%2026-05-22Fix
CVE-2026-40597MantisBT has a content security policy bypass via attachments7.6CNA v4.00.6%2026-05-22Fix
CVE-2026-40596MantisBT is vulnerable to XSS and potential account takeover via user font family preference update7.2CNA v4.00.5%2026-05-22Fix
CVE-2026-40412Microsoft Azure Orbital Spatio remote code execution10.0CNA v3.11.0%2026-05-22Fix
CVE-2026-40411Microsoft Azure Virtual Network Gateway remote code execution9.9CNA v3.11.0%2026-05-22Fix
CVE-2026-40295Devise: Open redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout handler6.1CNA v3.10.3%2026-05-22Fix
CVE-2026-40172authentik user management API privilege escalation8.1CNA v3.10.7%2026-05-22Fix
CVE-2026-40166authentik OAuth2 access tokens API information disclosure7.1CNA v4.00.6%2026-05-22Fix
CVE-2026-39970baptisteArno typebot.io TypeBot: Stored cross-site scripting8.5CNA v4.00.4%2026-05-22Fix
CVE-2026-39969baptisteArno typebot.io TypeBot: WhatsApp Webhook endpoint missing signature verification6.5CNA v3.10.2%2026-05-22Fix
CVE-2026-39968baptisteArno typebot.io TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview endpoint7.1CNA v3.10.4%2026-05-22Fix
CVE-2026-39967baptisteArno typebot.io TypeBot: Cross-Typebot result Data Access via Missing typebotId Filter3.1CNA v3.10.3%2026-05-22Fix
CVE-2026-39966baptisteArno Typebot getLinkedTypebots API incorrect authorization6.5CNA v3.10.4%2026-05-22Fix
CVE-2026-39965baptisteArno typebot.io TypeBot: SSRF via open redirect Bypass in HTTP request and Code blocks7.7CNA v3.10.4%2026-05-22Fix
CVE-2026-39964baptisteArno typebot.io TypeBot: Stored XSS5.4CNA v3.10.3%2026-05-22Fix
CVE-2026-39835Invoking server panic during CheckHostKey/Authenticate in golang.org/x/Crypto/ssh5.3CISA ADP v3.10.7%2026-05-22Fix
CVE-2026-39834Invoking infinite loop on large channel writes in golang.org/x/Crypto/ssh9.1CISA ADP v3.10.6%2026-05-22Fix
CVE-2026-39833Invoking key constraints not enforced in golang.org/x/Crypto/ssh/agent9.1CISA ADP v3.10.5%2026-05-22Fix
CVE-2026-39832Invoking agent constraints dropped when forwarding keys in golang.org/x/Crypto/ssh/agent9.1CISA ADP v3.10.7%2026-05-22Fix
CVE-2026-39831Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/Crypto/ssh9.1CISA ADP v3.10.5%2026-05-22Fix
CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/Crypto/ssh9.1CISA ADP v3.10.6%2026-05-22Fix
CVE-2026-39829Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/Crypto/ssh7.5CISA ADP v3.10.6%2026-05-22Fix
CVE-2026-39828Invoking bypass of certificate restrictions in golang.org/x/Crypto/ssh6.3CISA ADP v3.10.5%2026-05-22Fix
CVE-2026-39827Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/Crypto/ssh6.5CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-39824Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows3.3CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6CISA ADP v3.10.7%2026-05-22Fix
CVE-2026-37470ClipBucket login page clickjacking7.3CISA ADP v3.10.5%2026-05-22
CVE-2026-36228Easy Chat Server buffer overflow7.3CISA ADP v3.10.5%2026-05-22
CVE-2026-36227Easy Chat Server path traversal6.5CISA ADP v3.11.1%2026-05-22
CVE-2026-36226Advantech WebAccess/SCADA cross-site scripting6.1CISA ADP v3.10.3%2026-05-22
CVE-2026-35430Microsoft Azure Privileged Identity Management (PIM) elevation of privilege8.8CNA v3.10.8%2026-05-22Fix
CVE-2026-34911Ubiquiti UniFi OS Server path traversal7.7CNA v3.10.6%2026-05-22Fix
CVE-2026-34910Ubiquiti UniFi OS improper input validation10.0CNA v3.145.8%2026-05-22KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2026-34909Ubiquiti UniFi OS path traversal10.0CNA v3.11.8%2026-05-22KEVEmerging ThreatsKCVFix
CVE-2026-34908Ubiquiti UniFi OS improper access control10.0CNA v3.115.2%2026-05-22KEVNucleiEmerging ThreatsKCVFix
CVE-2026-34207baptisteArno typebot.io TypeBot: SSRF Protection Bypass7.6CNA v3.10.4%2026-05-22Exploit codeFix
CVE-2026-33843Microsoft Azure Active Directory B2C elevation of privilege9.1CNA v3.10.9%2026-05-22Fix
CVE-2026-33712baptisteArno typebot.io TypeBot: Unauthenticated SSRF10.0CNA v3.10.4%2026-05-22Exploit codeFix
CVE-2026-33000Ubiquiti UniFi OS Server improper input validation9.1CNA v3.11.4%2026-05-22Fix
CVE-2026-32253Sunshine: Authentication bypass via improper client certificate validation9.8CNA v3.10.4%2026-05-22Fix
CVE-2026-28735Mattermost GitHub OAuth Scope Validation5.4CNA v3.10.2%2026-05-22Fix
CVE-2026-28445baptisteArno typebot.io Typebot: Stored XSS8.7CNA v3.10.4%2026-05-22Fix
CVE-2026-28444baptisteArno typebot.io typebot: IDOR in result Logs endpoint allows Cross-Workspace data disclosure6.5CNA v3.10.5%2026-05-22Fix
CVE-2026-27136Invoking duplicate attributes can cause XSS in golang.org/x/net/html6.1CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-26147Microsoft Azure Stack HCI information disclosure7.7CNA v3.11.0%2026-05-22Fix
CVE-2026-25681Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-25680Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5CISA ADP v3.10.5%2026-05-22Fix
CVE-2026-25608STER cleartext transmission of sensitive information2.3CNA v4.00.3%2026-05-22Fix
CVE-2026-25607Weak password encoding in STER5.7CNA v4.00.1%2026-05-22Fix
CVE-2026-25606SQL injection in STER8.7CNA v4.00.4%2026-05-22Fix
CVE-2026-23663Microsoft Global Secure Access (GSA) information disclosure7.5CNA v3.10.6%2026-05-22Fix
CVE-2026-23652Microsoft Power Pages remote code execution10.0CNA v3.10.6%2026-05-22Fix
CVE-2026-9291Insecure deserialization in Amazon Braket SDK Job results Processing7.5CNA v4.00.6%2026-05-22Fix
CVE-2026-9277shell-quote `quote` does not validate object-token shapes, allowing command injection9.2CNA v4.00.8%2026-05-22Exploit codeFix
CVE-2026-9264Cross-site scripting in SketchUp Dynamic components9.3CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9256F5 NGINX ngx_http_rewrite_module heap-based buffer overflow9.2CNA v4.02.7%2026-05-22Exploit codeFix
CVE-2026-9255Tool Execution without Authorization via Piped Stdin in Kiro CLI8.4CNA v4.00.2%2026-05-22Fix
CVE-2026-9251Devolutions Server entry status management feature missing authorization5.4CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-9249Devolutions Server unverified password change3.1CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-9248Devolutions Server entry duplication feature authorization bypass2.6CISA ADP v3.10.2%2026-05-22Fix
CVE-2026-9247Devolutions Server entry export feature vulnerability2.4CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9246Devolutions Server entry documentation and attachment features improper access control4.3CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9245Devolutions Server external authentication provider flow improper input validation5.0CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9224Devolutions Server user profile update feature missing authorization4.3CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9223Devolutions Server vault import feature missing authorization4.3CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-9104Draft List WordPress plugin authenticated (Author+) stored cross-site scripting via Draft post Title6.4CNA v3.10.4%2026-05-22Fix
CVE-2026-90549front invalid IP packets cause a kernel panic9.2CNA v4.00.5%2026-05-22
CVE-2026-90539front unrestricted file upload6.9CNA v4.00.4%2026-05-22
CVE-2026-9047Devolutions Server authentication bypass7.6CISA ADP v3.10.4%2026-05-22Fix
CVE-2026-9018Easy Elements for Elementor WordPress plugin privilege escalation8.8CNA v3.10.8%2026-05-22Exploit codeFix
CVE-2026-9011Ditty WordPress plugin missing authorization unauthenticated sensitive information disclosure7.5CNA v3.10.6%2026-05-22Fix
CVE-2026-8997Heap buffer overflow in vifm4.8CNA v4.00.2%2026-05-22Fix
CVE-2026-8992Ivanti Secure Access Client improper certificate validation8.8CNA v3.11.2%2026-05-22Fix
CVE-2026-8692Vedrixa Forms WordPress plugin authorization bypass4.3CNA v3.10.4%2026-05-22Fix
CVE-2026-8684MotoPress Hotel Booking WordPress plugin authorization bypass5.3CNA v3.10.5%2026-05-22Fix
CVE-2026-8679AudioIgniter WordPress plugin insecure direct object reference7.5CNA v3.11.9%2026-05-22NucleiFix
CVE-2026-8673syslink software Avantra password re-initialization mechanism sends passwords in plain text9.1v3.10.2%2026-05-22Fix
CVE-2026-8672syslink software Avantra default credentials for internal DB5.1v3.10.1%2026-05-22Fix
CVE-2026-8671syslink software Avantra log files contain encrypted secrets7.5v3.10.2%2026-05-22Fix
CVE-2026-8670syslink software Avantra insecure session handling on metrics web server9.6CNA v3.10.4%2026-05-22Fix
CVE-2026-8477Devolutions Server improper workflow enforcement2.7CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-8381Broken access control in TeamViewer DEX Platform (on Premises)5.4CNA v3.10.2%2026-05-22Fix
CVE-2026-8353Concrete CMS to is vulnerable to stored XSS via page name in atomik theme2.1CNA v4.00.3%2026-05-22Fix
CVE-2026-8347Concrete CMS is vulnerable to IDOR + wrong-authorization-level in Express association Reorder dialog2.3CNA v4.00.3%2026-05-22Exploit codeFix
CVE-2026-8340Concrete CMS is vulnerable to CSRF via Backend\File::approveVersion2.3CNA v4.00.1%2026-05-22Fix
CVE-2026-7798FluentCRM WordPress plugin unauthenticated blind server-side request forgery5.4CNA v3.10.8%2026-05-22NucleiFix
CVE-2026-7636Slider by Soliloquy WordPress plugin information disclosure4.3CNA v3.10.4%2026-05-22Fix
CVE-2026-7615Widget Context WordPress plugin cross-site request forgery to settings update via wl parameter4.3CNA v3.10.2%2026-05-22Fix
CVE-2026-7509KIA Subtitle WordPress plugin [improper neutralization of input during web page generation]6.4CNA v3.10.3%2026-05-22Fix
CVE-2026-7325Devolutions Server Active Directory browsing feature improper authorization7.1CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-7249Location Weather WordPress plugin unauthorized access4.3CNA v3.10.4%2026-05-22Fix
CVE-2026-6864CBX 5 Star Rating and Review WordPress plugin reflected cross-site scripting via page parameter6.1CNA v3.10.4%2026-05-22Fix
CVE-2026-6406Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag8.8CNA v4.00.2%2026-05-22Fix
CVE-2026-5843Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading8.8CNA v4.00.2%2026-05-22Exploit codeFix
CVE-2026-5817Docker Model Runner container-to-host code execution8.8CNA v4.00.2%2026-05-22Exploit codeFix
CVE-2026-5755Mattermost denial of service via crafted TIFF file upload6.5CNA v3.10.4%2026-05-22Fix
CVE-2026-5740Unauthenticated WebSocket binary frame causes denial of service in Mattermost Server7.5CNA v3.10.6%2026-05-22Fix
CVE-2026-5308Mattermost missing request body size limits on Zoom plugin HTTP endpoints4.9CNA v3.10.4%2026-05-22Fix
CVE-2026-5171Devolutions Server entry activity log feature improper access control4.3CISA ADP v3.10.3%2026-05-22Fix
CVE-2026-5072zephyrproject-rtos Zephyr ptp: Potential denial of service via PTP Interval Shift6.5CISA ADP v3.10.3%2026-05-22
CVE-2026-4834WP ERP Pro WordPress plugin unauthenticated SQL injection via search_key parameter7.5CNA v3.10.5%2026-05-22
CVE-2026-4646Mattermost insufficient input validation in GitHub plugin API causes denial of service4.3CNA v3.10.4%2026-05-22Fix
CVE-2026-4635Mattermost persistent notification timing attack causing server denial of service6.5CNA v3.10.3%2026-05-22Fix
CVE-2026-4070Alfie WordPress plugin cross-site request forgery to Feed deletion via delete parameter4.3CNA v3.10.2%2026-05-22
CVE-2026-3636Mattermost sanitize team member data returned by API4.3CNA v3.10.3%2026-05-22Fix
CVE-2026-3481WP Blockade WordPress plugin reflected cross-site scripting via shortcode parameter6.1CNA v3.10.3%2026-05-22
CVE-2026-3473Mattermost improper file ownership validation in the Boards API allows unauthorised file access5.9CNA v3.10.2%2026-05-22Fix
CVE-2026-3294Authentication Logic vulnerability on multiple TP-Link Range Extenders8.7CNA v4.00.6%2026-05-22Fix
CVE-2026-2518FastX WordPress theme missing authorization authenticated limited plugin installation and activation4.3CNA v3.10.2%2026-05-22
CVE-2026-48249Open ISES Tickets Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php8.2CNA v4.00.3%2026-05-21Fix
CVE-2026-48248Open ISES Tickets Disabled TLS Certificate Verification in incs/login.inc.php8.2CNA v4.00.3%2026-05-21Fix
CVE-2026-48247Open ISES Tickets Disabled TLS Certificate Verification in incs/functions.inc.php8.2CNA v4.00.3%2026-05-21Fix
CVE-2026-48246Open ISES Tickets Disabled TLS Certificate Verification in ajax/reports.php8.2CNA v4.00.3%2026-05-21Fix
CVE-2026-48245Open ISES Tickets Hard-coded Google Maps API Key in tables.php6.9CNA v4.00.4%2026-05-21Fix
CVE-2026-48244Open ISES Tickets Hard-coded Google Maps API Key in settings.inc.php6.9CNA v4.00.4%2026-05-21Fix
CVE-2026-48243Open ISES Tickets Hard-coded WhitePages API Key in wp1.php6.9CNA v4.00.4%2026-05-21Fix
CVE-2026-48242Open ISES Tickets Hard-coded MySQL Database Credentials in import_mdb.php9.2CNA v4.00.5%2026-05-21Fix
CVE-2026-48241Open ISES Tickets Hard-coded MySQL Database Credentials in loader.php9.2CNA v4.00.5%2026-05-21Fix
CVE-2026-48240Open ISES Tickets SQL injection via ajax/statistics.php tick_id and f_tick_id parameters7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48239Open ISES Tickets SQL injection via ajax/reports.php tick_id parameter7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48238Open ISES Tickets SQL injection via ajax/mobile_main.php id parameter7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48237Open ISES Tickets SQL injection via message.php frm_ticket_id and frm_resp_id parameters7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48236Open ISES Tickets SQL injection via db_loader.php multiple parameters7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48235Open ISES Tickets SQL injection in incs/remotes.inc.php via External GPS Tracker Data8.8CNA v4.00.4%2026-05-21Fix
CVE-2026-48234Open ISES Tickets SQL injection via portal/ajax/list_requests.php sort and dir parameters7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48233Open ISES Tickets SQL injection via ajax/sit_incidents.php offset parameter7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48232Open ISES Tickets SQL injection via ajax/fullsit_incidents.php offset parameter7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48231Open ISES Tickets SQL injection via tables.php multiple parameters7.1CNA v4.00.4%2026-05-21Fix
CVE-2026-48230Open ISES Tickets reflected XSS via ticketsmdb_import.php multiple POST parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48229Open ISES Tickets reflected XSS via routes_i.php ticket_id parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48228Open ISES Tickets reflected XSS via patient_w.php id and ticket_id parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48227Open ISES Tickets reflected XSS via patient.php id and ticket_id parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48226Open ISES Tickets reflected XSS via os_watch.php ref and mode_orig parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48225Open ISES Tickets reflected XSS via landb.php _type parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48224Open ISES Tickets reflected XSS via ics214.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48223Open ISES Tickets reflected XSS via ics213rr.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48222Open ISES Tickets reflected XSS via ics213.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48221Open ISES Tickets reflected XSS via ics205a.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48220Open ISES Tickets reflected XSS via ics205.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48219Open ISES Tickets reflected XSS via ics202.php frm_add_str parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48218Open ISES Tickets reflected XSS via icons/buttons/landb.php frm_name and frm_id parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48217Open ISES Tickets reflected XSS via delete_module.php multiple POST parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48216Open ISES Tickets reflected XSS via db_loader.php multiple POST parameters5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48215Open ISES Tickets reflected XSS via circle.php frm_id parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48214Open ISES Tickets reflected XSS via add_nm.php ticket_id parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48213Open ISES Tickets reflected XSS via add.php ticket_id parameter5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-48207Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement9.8CISA ADP v3.10.8%2026-05-21Fix
CVE-2026-48172LiteSpeed cPanel plugin privilege escalation9.8NVD v3.11.0%2026-05-21KEVExploit codeFix
CVE-2026-47114IINA command execution via iina://open URL Scheme8.6CNA v4.01.1%2026-05-21Fix
CVE-2026-47102LiteLLM privilege escalation via User Update8.7CNA v4.00.8%2026-05-21Exploit codeKCVFix
CVE-2026-47101LiteLLM privilege escalation via API Key Generation8.7CNA v4.01.3%2026-05-21Exploit codeKCVFix
CVE-2026-46473Authen::TOTP versions for Perl generate secrets using rand7.5CISA ADP v3.10.5%2026-05-21Fix
CVE-2026-45760Apache Camel K: Camel K Cross-Namespace Build Deputy Attack8.1CISA ADP v3.10.4%2026-05-21Fix
CVE-2026-45255FreeBSD remote code execution via installer Wi-Fi access point scans7.5CISA ADP v3.10.3%2026-05-21Fix
CVE-2026-45254FreeBSD incorrect libcap_net limitation list manipulation6.5CISA ADP v3.10.3%2026-05-21Fix
CVE-2026-45253FreeBSD missing validation in ptrace(PT_SC_REMOTE)8.4CISA ADP v3.10.2%2026-05-21Fix
CVE-2026-45252FreeBSD heap overflow in FUSE_LISTXATTR5.5CISA ADP v3.10.4%2026-05-21Fix
CVE-2026-45251FreeBSD kernel use-after-free via file descriptor syscalls7.8CISA ADP v3.10.2%2026-05-21Fix
CVE-2026-45250FreeBSD stack buffer overflow via setcred(2)7.8CISA ADP v3.10.2%2026-05-21Exploit codeFix
CVE-2026-45208Trend Micro TrendAI Apex One time-of-check time-of-use race condition7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-45207Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-45206Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-44076Netatalk shell injection via volume path6.7CNA v3.10.2%2026-05-21Fix
CVE-2026-44075Netatalk missing break in DSI OpenSession3.7CNA v3.10.4%2026-05-21Fix
CVE-2026-44074Netatalk bitwise OR of errno values3.7CNA v3.10.4%2026-05-21Fix
CVE-2026-44073Netatalk seteuid failure ignored in auth modules4.0CNA v3.10.3%2026-05-21Fix
CVE-2026-44072Netatalk system after failed chdir2.5CNA v3.10.1%2026-05-21Fix
CVE-2026-44071Netatalk buffer overflow3.7CNA v3.10.4%2026-05-21Fix
CVE-2026-44070Netatalk unbounded realloc in charset conversion3.1CNA v3.10.3%2026-05-21Fix
CVE-2026-44069Netatalk integer underflow in volxlate3.4CNA v3.10.1%2026-05-21Fix
CVE-2026-44068Netatalk EA path traversal via incomplete sanitization7.6CNA v3.10.5%2026-05-21Fix
CVE-2026-44067Netatalk EA header parsing heap over-read3.7CNA v3.10.3%2026-05-21Fix
CVE-2026-44066Netatalk heap out-of-bounds reads in Spotlight RPC unmarshalling7.1CNA v3.10.5%2026-05-21Fix
CVE-2026-44065Netatalk off-by-two in papd lp_write3.7CNA v3.10.2%2026-05-21Fix
CVE-2026-44064Netatalk ASP session ID out-of-bounds access7.1CNA v3.10.3%2026-05-21Fix
CVE-2026-44063Netatalk LDAP filter injection4.2CNA v3.10.2%2026-05-21Fix
CVE-2026-44062Netatalk missing o_len bounds check in pull_charset_flags7.5CNA v3.10.6%2026-05-21Fix
CVE-2026-44061Netatalk DES-ECB auth with timing side channel5.9CNA v3.10.5%2026-05-21Fix
CVE-2026-44060Netatalk integer underflow in dsi_writeinit leads to denial of service7.5CNA v3.10.6%2026-05-21Fix
CVE-2026-44059Netatalk non-reentrant privilege toggle3.9CNA v3.10.1%2026-05-21Fix
CVE-2026-44058Netatalk authentication bypass via admin auth user6.4CNA v3.10.7%2026-05-21Fix
CVE-2026-44057Netatalk dead bounds check in Spotlight RPC unmarshaller3.1CNA v3.10.3%2026-05-21Fix
CVE-2026-44056Netatalk stack buffer overflow in desktop.c6.0CNA v3.10.3%2026-05-21Fix
CVE-2026-44055Netatalk bitwise OR logic bug enables shell injection7.5CNA v3.10.6%2026-05-21Fix
CVE-2026-44054Netatalk predictable afpd session token6.5CNA v3.10.5%2026-05-21Fix
CVE-2026-44053Netatalk weak cryptography in DHCAST128 UAM7.4CNA v3.10.3%2026-05-21Fix
CVE-2026-44052Netatalk LDAP simple-bind password exposure in log output7.5CNA v3.10.4%2026-05-21Fix
CVE-2026-44051Netatalk arbitrary file read via attacker-controlled symlink creation8.1CNA v3.10.6%2026-05-21Fix
CVE-2026-44050Netatalk heap buffer overflow in CNID daemon comm_rcv9.9CNA v3.10.7%2026-05-21Fix
CVE-2026-44049Netatalk out-of-bounds write in convert_charset null termination7.5CNA v3.10.6%2026-05-21Fix
CVE-2026-44048Netatalk stack buffer overflow via UCS-2 type confusion in convert_charset8.8CNA v3.10.7%2026-05-21Fix
CVE-2026-44047Netatalk SQL injection in MySQL CNID backend8.8CNA v3.10.5%2026-05-21Fix
CVE-2026-43502Linux kernel RDS zerocopy send memory leak7.8CNA v3.10.3%2026-05-21Fix
CVE-2026-43501Linux kernel IPv6 RPL source routing header handling out-of-bounds write9.8CNA v3.11.0%2026-05-21Exploit codeFix
CVE-2026-43499Linux kernel rtmutex subsystem use-after-free7.8CNA v3.10.8%2026-05-21Exploit codeKCVFix
CVE-2026-43498Linux kernel accel/ivpu out-of-bounds write7.8CNA v3.10.2%2026-05-21Fix
CVE-2026-43497Linux kernel udlfb framebuffer driver use-after-free7.3CNA v3.10.2%2026-05-21Fix
CVE-2026-43496Linux kernel RED queueing discipline null pointer dereference5.5NVD v3.10.2%2026-05-21Fix
CVE-2026-43495Linux kernel t7xx WWAN driver port enumeration out-of-bounds read8.8CNA v3.10.4%2026-05-21Fix
CVE-2026-43494Linux kernel RDS zerocopy send path vulnerability7.8CNA v3.10.2%2026-05-21Reported exploitedExploit codeFix
CVE-2026-42396PowerDNS Authoritative catalog zone transfer vulnerability4.9CNA v3.10.8%2026-05-21Fix
CVE-2026-42002PowerDNS Authoritative concurrency and locking defects in GSS-TSIG5.9CNA v3.10.6%2026-05-21Fix
CVE-2026-42001PowerDNS Authoritative Insufficient Validation of Autoprimary SOA Queries7.5CNA v3.10.8%2026-05-21Fix
CVE-2026-42000PowerDNS Authoritative Insufficient Validation of Names during AXFR6.8CNA v3.10.5%2026-05-21Fix
CVE-2026-41999PowerDNS Authoritative Incorrect Behaviour of Views with TCP PROXY requests4.8CNA v3.10.2%2026-05-21Fix
CVE-2026-40165authentik SAML assertion NameID parsing authentication bypass8.7CNA v3.10.7%2026-05-21Fix
CVE-2026-39593HAPPY WordPress plugin broken access control6.5CNA v3.10.3%2026-05-21Fix
CVE-2026-39531WP Directory Kit WordPress plugin SQL injection9.3CNA v3.10.4%2026-05-21Fix
CVE-2026-39461FreeBSD select(2) file descriptor set overflow causes stack overflow8.8CISA ADP v3.10.2%2026-05-21Fix
CVE-2026-36189Uncrustify tokenize_cleanup function buffer overflow6.2CISA ADP v3.10.2%2026-05-21
CVE-2026-34930Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-34929Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-34928Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-34927Trend Micro TrendAI Apex One origin validation error7.8CNA v3.10.1%2026-05-21Fix
CVE-2026-34926Trend Micro Apex One (On-Premise) directory traversal6.7CNA v3.10.5%2026-05-21KEVExploit codeFix
CVE-2026-28764MediaArea MediaInfoLib LXF element parsing functionality heap-based buffer overflow7.8CNA v3.10.2%2026-05-21
CVE-2026-27393CF7 WOW Styler WordPress plugin broken access control5.3CNA v3.10.3%2026-05-21Fix
CVE-2026-27349Mail Mint WordPress plugin sensitive data exposure4.3CNA v3.10.3%2026-05-21Fix
CVE-2026-22880Mobile SSO authentication flow allows credential theft via malicious server6.1CNA v3.10.1%2026-05-21Fix
CVE-2026-22678Webmin stored XSS via System and Server Status5.1CNA v4.00.2%2026-05-21Fix
CVE-2026-9157Remote code execution in Gmission Web FAX8.6CNA v4.00.2%2026-05-21Fix
CVE-2026-9152Altium 365 missing authentication10.0CNA v4.00.5%2026-05-21Fix
CVE-2026-9089ConnectWise Automate download without integrity check8.8CNA v3.10.2%2026-05-21Fix
CVE-2026-8435Concrete CMS file version approval cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8434Concrete CMS file rescan cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8433Concrete CMS is vulnerable to cross-site request forgery at concrete/controllers/backend/file rescan2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8432Concrete CMS 9 is vulnerable to cross-site request forgery at concrete/controllers/backend/file star2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8428CSRF token is not validated in the core CMS update controller for Concrete CMS7.5CNA v4.00.2%2026-05-21Fix
CVE-2026-8427Concrete CMS favorite file folder removal cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8426Concrete CMS is vulnerable to CSRF on prepare_remote_upgrade leading to one-request RCE7.5CNA v4.00.3%2026-05-21Fix
CVE-2026-8421Concrete CMS is vulnerable to CSRF on install_package with conditional token bypass leading to RCE7.5CNA v4.00.3%2026-05-21Fix
CVE-2026-8417Concrete CMS is vulnerable to CSRF in do_update in the package update controller7.5CNA v4.00.2%2026-05-21Fix
CVE-2026-8416Concrete CMS favorite file folder cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8415Concrete CMS express association reorder cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8414Concrete CMS event duplication cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8413Concrete CMS bulk page design update cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8412Concrete CMS bulk page cache clearing cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8411Concrete CMS bulk page deletion cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8410Concrete CMS cross-site request forgery2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8409Concrete CMS is vulnerable to cross-site request forgery at concrete/controllers/dialog/logs/delete2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8350Concrete CMS is vulnerable to missing authorization in the bulk_user_assignment.php7.5CNA v4.00.5%2026-05-21Fix
CVE-2026-8337Concrete CMS is vulnerable to IDOR in surveys6.3CNA v4.00.3%2026-05-21Fix
CVE-2026-8327Concrete CMS is vulnerable to password change without reauthorization and session-hardening bypass5.3CNA v4.00.3%2026-05-21Fix
CVE-2026-8245Concrete CMS is vulnerable to reflected XSS in Legacy Pagination via HTML attribute injection6.0CNA v4.00.2%2026-05-21Fix
CVE-2026-8240Concrete CMS is vulnerable to unauthenticated page metadata disclosure in Backend\SummaryTemplate6.3CNA v4.00.3%2026-05-21Fix
CVE-2026-8239Concrete CMS is vulnerable to IDOR in /ccm/frontend/conversations/get_rating6.3CNA v4.00.3%2026-05-21Exploit codeFix
CVE-2026-8238Concrete CMS is vulnerable to IDOR6.3CNA v4.00.3%2026-05-21Fix
CVE-2026-8237Concrete CMS is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint6.3CNA v4.00.7%2026-05-21NucleiExploit codeFix
CVE-2026-8236Concrete CMS is vulnerable to IDOR combined with a missing authentication gate6.3CNA v4.00.9%2026-05-21NucleiFix
CVE-2026-8205Concrete CMS is vulnerable to authorization bypass in the Calendar block6.3CNA v4.00.4%2026-05-21Fix
CVE-2026-8204Concrete CMS is vulnerable to authorization bypass in the Calendar Event Frontend dialog6.3CNA v4.00.4%2026-05-21Fix
CVE-2026-8203Concrete CMS has stored XSS on the height parameter7.3CNA v4.00.2%2026-05-21Fix
CVE-2026-8197Concrete CMS is vulnerable to stored XSS via OAuth integration name7.3CNA v4.00.3%2026-05-21Fix
CVE-2026-8140Concrete CMS is vulnerable to CSRF on download in the package install controller7.5CNA v4.00.2%2026-05-21Fix
CVE-2026-8139Concrete CMS is vulnerable to stored XSS via external-link page cvName2.0CNA v4.00.3%2026-05-21Fix
CVE-2026-8135Concrete CMS vulnerable to deserialization of untrusted data8.9CNA v4.00.7%2026-05-21Fix
CVE-2026-8134Concrete CMS is vulnerable to authenticated RCE9.4CNA v4.01.1%2026-05-21Fix
CVE-2026-7890Concrete CMS is vulnerable to SSRF via RSS Displayer block2.1CNA v4.00.2%2026-05-21Fix
CVE-2026-7887For Concrete CMS, OAuth 2.0 Authorization-Code Handler Bypasses Account Status2.3CNA v4.00.3%2026-05-21Fix
CVE-2026-7886Concrete CMS is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter2.3CNA v4.00.5%2026-05-21Fix
CVE-2026-7882Concrete CMS is vulnerable to CSRF via the DeleteFile controller2.3CNA v4.00.2%2026-05-21Fix
CVE-2026-7881Concrete CMS is vulnerable to IDOR in the Express Entry Detail block6.3CNA v4.00.3%2026-05-21Fix
CVE-2026-7879Concrete CMS is vulnerable to file download authorization bypass in submit_password6.3CNA v4.00.3%2026-05-21Fix
CVE-2026-7837Netatalk TOCTOU with root privilege in ad_flush3.7CNA v3.10.3%2026-05-21Fix
CVE-2026-7836Netatalk hextoint macro uppercase bug3.1CNA v3.10.3%2026-05-21Fix
CVE-2026-7835Netatalk format string argument mismatch3.1CNA v3.10.3%2026-05-21Fix
CVE-2026-6960BookingPress Pro WordPress plugin unauthenticated arbitrary file upload via Signature Custom field9.8CNA v3.10.9%2026-05-21Exploit codeFix
CVE-2026-6841Reflected XSS in Request Tracker6.1v3.10.4%2026-05-21Fix
CVE-2026-6826Concrete has file usage disclosure via missing permission check in Usage controller6.9CNA v4.01.3%2026-05-21NucleiFix
CVE-2026-6279Avada (Fusion) Builder WordPress plugin unauthenticated remote code execution9.8CNA v3.17.2%2026-05-21NucleiExploit codeFix
CVE-2026-5434Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recen5.9CNA v3.10.3%2026-05-21
CVE-2026-5433Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE).  Honeywell recommends updating to the most recent version of this produc9.1CNA v3.11.6%2026-05-21
CVE-2026-5118Divi Form Builder WordPress plugin unauthenticated privilege escalation via role9.8CNA v3.10.5%2026-05-21Exploit codeFix
CVE-2026-5091Catalyst::Plugin::Authentication versions for Perl is susceptible to timing attacks5.1CISA ADP v3.10.2%2026-05-21Fix
CVE-2026-4929Simple Hierarchical SELECT (Drupal 7) XSS in term-derived output5.1CNA v4.00.3%2026-05-21Fix
CVE-2026-4858Mattermost path traversal in integration action URL leading to arbitrary API execution8.0CNA v3.10.4%2026-05-21Fix
CVE-2026-4843GSheet For Woo Importer WordPress plugin missing authorization authenticated plugin settings reset4.3CNA v3.10.3%2026-05-21Fix
CVE-2026-4811WPB Floating Menu and Categories for WordPress WordPress plugin stored cross-site scripting4.9CNA v3.10.4%2026-05-21Fix
CVE-2026-4093Stored XSS in Drupal 7 Term Reference Tree module (token display templates and term labels)5.1CNA v4.00.3%2026-05-21
CVE-2026-4055Mattermost insufficient permission validation on cross-team playbook run creation4.3CNA v3.10.3%2026-05-21Fix
CVE-2026-2740Zoho ManageEngine ADSelfService Plus remote code execution8.4CNA v3.14.0%2026-05-21Fix
CVE-2026-2734Authorization bypass in SearchModelVersions in MLflow/MLflow6.5CNA v3.00.5%2026-05-21Fix
CVE-2026-1881Broadstreet WordPress plugin Private post Meta disclosure via get_sponsored_meta4.3CNA v3.10.2%2026-05-21Fix
CVE-2026-1816OTP Bypass in TEİAŞ's Mobile Application6.3CNA v3.10.2%2026-05-21Fix
CVE-2026-1815Session hijacking in TEİAŞ's Mobile Application5.7CNA v3.10.2%2026-05-21Fix
CVE-2026-1543Avada (Fusion) Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-21Fix
CVE-2026-0393CODESYS Visualization insufficiently protected credentials6.5v3.10.2%2026-05-21Fix
CVE-2026-47784Memcached timing side channel8.1CNA v3.10.6%2026-05-20Fix
CVE-2026-47783Memcached timing side channel8.1CNA v3.11.3%2026-05-20Fix
CVE-2026-47782Siber Systems RoboForm Password Manager Android intent handling vulnerability4.6CNA v4.00.2%2026-05-20
CVE-2026-47373Crypt::SaltedHash versions for Perl is susceptible to timing attacks7.5CISA ADP v3.10.5%2026-05-20Fix
CVE-2026-47372Crypt::SaltedHash versions for Perl generate insecure random values for salts9.1CISA ADP v3.10.5%2026-05-20Fix
CVE-2026-47099TeleJSON DOM-based XSS via parse function2.1CNA v4.00.4%2026-05-20Fix
CVE-2026-47068Cross-session PubSub topic injection via URL parameter in phoenix_storybook2.3CNA v4.00.5%2026-05-20Fix
CVE-2026-45584Microsoft Defender remote code execution8.1CNA v3.10.7%2026-05-20Fix
CVE-2026-45498Microsoft Defender denial of service4.0CNA v3.11.3%2026-05-20KEVFix
CVE-2026-45444Gift Cards For WooCommerce Pro WordPress plugin arbitrary file upload10.0CNA v3.10.5%2026-05-20Fix
CVE-2026-45443PDF for Elementor Forms + Drag And Drop Template Builder WordPress plugin broken access control5.0CNA v3.10.3%2026-05-20Fix
CVE-2026-45232Rsync off-by-one Stack Write via HTTP Proxy3.7v3.10.3%2026-05-20Fix
CVE-2026-44933SUSE Linux Enterprise path traversal in Plugin Loading in libzypp8.5CNA v4.00.2%2026-05-20Fix
CVE-2026-44926InfoScale CmdServer improper access control8.8CISA ADP v3.10.4%2026-05-20
CVE-2026-44925Veritas Infoscale Operations Manager InfoScale v.9.1.3 Operations Manager cross-site request forgery8.8CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-44924Veritas Infoscale Operations Manager cross-site scripting5.4CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-44923Veritas Infoscale Operations Manager InfoScale VIOM SQL injection6.5CISA ADP v3.10.4%2026-05-20Fix
CVE-2026-44608NLnet Labs Unbound use-after-free and crash under special conditions in RPZ code4.6CNA v4.00.3%2026-05-20Fix
CVE-2026-44392Six Apart Movable Type missing authorization5.3CNA v4.00.3%2026-05-20
CVE-2026-44390NLnet Labs Unbound unbounded name compression in certain cases causes degradation of service6.9CNA v4.00.7%2026-05-20Fix
CVE-2026-43620Rsync Out-of-Bounds Array Read via recv_files5.5v3.10.5%2026-05-20Fix
CVE-2026-43619Rsync Symlink race condition via Path-Based Syscalls7.2CNA v4.00.1%2026-05-20Fix
CVE-2026-43618Rsync integer overflow information disclosure6.1CNA v4.00.8%2026-05-20Fix
CVE-2026-43617Rsync authorization bypass via Hostname Resolution6.3CNA v4.00.3%2026-05-20Fix
CVE-2026-42960NLnet Labs Unbound possible cache poisoning via promiscuous records for the authority section5.7CNA v4.00.3%2026-05-20Fix
CVE-2026-42959NLnet Labs Unbound crash during DNSSEC validation of malicious content8.7CNA v4.00.7%2026-05-20Fix
CVE-2026-42944NLnet Labs Unbound heap overflow with multiple NSID, COOKIE, PADDING EDNS options8.7CNA v4.00.8%2026-05-20Fix
CVE-2026-42923NLnet Labs Unbound degradation of service with unbounded NSEC3 hash calculations6.9CNA v4.00.4%2026-05-20Fix
CVE-2026-42834Microsoft Windows Admin Center in Azure Portal elevation of privilege7.8CNA v3.10.4%2026-05-20Fix
CVE-2026-42534NLnet Labs Unbound jostle logic bypass degrades resolution performance6.9CNA v4.00.7%2026-05-20Fix
CVE-2026-42383YITH WooCommerce Product Add-Ons WordPress plugin SQL injection7.6CNA v3.10.4%2026-05-20Fix
CVE-2026-41292NLnet Labs Unbound long list of incoming EDNS options degrades performance6.6CNA v4.00.8%2026-05-20Fix
CVE-2026-41091Microsoft Defender link following7.8CNA v3.10.4%2026-05-20KEVExploit codeFix
CVE-2026-41054SUSE Container suse/sle-micro-rancher/5.3:latest authentication bypass7.8CNA v3.10.2%2026-05-20Fix
CVE-2026-40622NLnet Labs Unbound another ghost domain names attack variant6.6CNA v4.00.1%2026-05-20Fix
CVE-2026-40102Plane: ORM field reference injection via `segment` parameter in Saved Analytics6.5CNA v3.10.4%2026-05-20Fix
CVE-2026-40094nimiq core-rs-albatross nimiq-blockchain: Network-libp2p untrusted peer can crash address book4.3CNA v3.10.4%2026-05-20Fix
CVE-2026-40092Nimiq Core-rs-albatross DHT record signature verification denial of service7.5CNA v3.10.8%2026-05-20Fix
CVE-2026-39960MantisBT is vulnerable to stored XSS through Custom Field Textarea Values5.4CNA v3.10.3%2026-05-20Fix
CVE-2026-39850yiisoft yii2 yii 2: Local file inclusion via view parameter name collision7.4CNA v3.10.5%2026-05-20Fix
CVE-2026-39405Frappe has Path Transversal via SCORM9.4CNA v4.00.5%2026-05-20Fix
CVE-2026-39352Frappe has an arbitrary file read via path traversal in render_include8.7CNA v4.01.3%2026-05-20NucleiFix
CVE-2026-39311Trilium Notes: Stored XSS leads to unauthorized remote code execution6.8CNA v3.10.4%2026-05-20Fix
CVE-2026-39310Trilium Notes: Authentication bypass in Clipper API for Electron (Desktop) Builds8.6CNA v3.10.5%2026-05-20Fix
CVE-2026-39309Trilium Notes: MacOS TCC Bypass via Prompt spoofing5.5CNA v3.10.2%2026-05-20Fix
CVE-2026-39047EPSON L14150 FL27PB buffer overflow7.5CISA ADP v3.10.8%2026-05-20Exploit code
CVE-2026-35593Trilium Notes has local file inclusion via upload modified file API endpoint6.8CNA v3.10.7%2026-05-20Fix
CVE-2026-35070Dell SmartFabric Storage Software command injection6.4CNA v3.10.4%2026-05-20Fix
CVE-2026-35016Open ISES Tickets reflected XSS via search.php frm_query parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35015Open ISES Tickets reflected XSS via do_unit_mail.php the_ticket parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35014Open ISES Tickets reflected XSS via routes_nm.php ticket_id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35013Open ISES Tickets reflected XSS via street_view.php thelat and thelng parameters5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35012Open ISES Tickets reflected XSS via add_facnote.php ticket_id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35011Open ISES Tickets reflected XSS via opena.php frm_call parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35010Open ISES Tickets reflected XSS via patient_JF.php ticket_id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35009Open ISES Tickets reflected XSS via add_note.php ticket_id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35008Open ISES Tickets reflected XSS via single.php ticket_id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-35007Open ISES Tickets reflected XSS via single_unit.php id parameter5.1CNA v4.00.3%2026-05-20Fix
CVE-2026-34970MantisBT Bugnote Revision page leaks Private issue Metadata after issue Access is Revoked5.3CNA v4.00.5%2026-05-20Fix
CVE-2026-34754MantisBT allows unauthorized users to upload attachments to restricted issues via REST API4.3CNA v3.10.3%2026-05-20Fix
CVE-2026-33278NLnet Labs Unbound possible arbitrary code execution during DNSSEC validation9.1CNA v4.01.1%2026-05-20Fix
CVE-2026-33137XWiki Platform REST XAR import API missing authorization9.3CNA v4.00.9%2026-05-20Exploit codeFix
CVE-2026-32792NLnet Labs Unbound packet of death with DNSCrypt4.6CNA v4.00.4%2026-05-20Fix
CVE-2026-30691@cyntler/react-doc-viewer v1.17.1 cross-site scripting6.1CISA ADP v3.10.3%2026-05-20Exploit code
CVE-2026-29518Rsync TOCTOU race condition allows Symlink-based arbitrary file write7.3CNA v4.00.1%2026-05-20Fix
CVE-2026-27424Image Photo Gallery Final Tiles Grid WordPress plugin broken access control4.3CNA v3.10.3%2026-05-20Fix
CVE-2026-27405WpBookingly WordPress plugin broken access control6.5CNA v3.10.4%2026-05-20Fix
CVE-2026-26028CryptPad: Sanitizer Bypass in Diffmarked.js allows arbitrary HTML injection and potential XSS6.1CNA v3.10.3%2026-05-20Fix
CVE-2026-25602Mesalvo Meona Server feedback function insufficient verification of data authenticity2.3CNA v3.10.1%2026-05-20Fix
CVE-2026-24573Visualizer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-05-20Fix
CVE-2026-24425twigphp Twig twig.x and sandbox bypass via SourcePolicyInterface9.9NVD v3.10.8%2026-05-20Fix
CVE-2026-24218NVIDIA DGX Spark hard-coded cryptographic key8.1CNA v3.10.6%2026-05-20Fix
CVE-2026-24217NVIDIA BioNeMo Framework path traversal8.8CNA v3.10.8%2026-05-20Fix
CVE-2026-24216NVIDIA BioNeMo Framework deserialization of untrusted data7.8CNA v3.10.3%2026-05-20Fix
CVE-2026-24215NVIDIA Triton Inference Server resource exhaustion5.7CNA v3.10.4%2026-05-20Fix
CVE-2026-24214NVIDIA Triton Inference Server integer overflow8.0CNA v3.10.7%2026-05-20Fix
CVE-2026-24213NVIDIA Triton Inference Server out-of-bounds read8.0CNA v3.10.7%2026-05-20Fix
CVE-2026-24210NVIDIA Triton Inference Server integer overflow7.5CNA v3.10.6%2026-05-20Fix
CVE-2026-24209NVIDIA Triton Inference Server path traversal7.5CNA v3.10.7%2026-05-20Fix
CVE-2026-24208NVIDIA Triton Inference Server path traversal5.3CNA v3.15.2%2026-05-20Fix
CVE-2026-24207NVIDIA Triton Inference Server authentication bypass9.8CNA v3.12.6%2026-05-20NucleiExploit codeFix
CVE-2026-24206NVIDIA Triton Inference Server authentication bypass7.3CNA v3.10.6%2026-05-20Fix
CVE-2026-24188NVIDIA TensorRT out-of-bounds write8.2CNA v3.10.4%2026-05-20Fix
CVE-2026-24163NVIDIA TensorRT-LLM deserialization of untrusted data7.5CNA v3.10.6%2026-05-20Fix
CVE-2026-24160NVIDIA TensorRT-LLM null pointer dereference5.5CNA v3.10.5%2026-05-20Fix
CVE-2026-24142NVIDIA TensorRT-LLM deserialization of untrusted data6.3CNA v3.10.4%2026-05-20Fix
CVE-2026-23734XWiki Platform: Path traversal9.3CNA v4.018.5%2026-05-20Emerging ThreatsFix
CVE-2026-22554MediaArea MediaInfoLib Channel Splitting functionality heap-based buffer overflow7.8CNA v3.10.3%2026-05-20
CVE-2026-21836HCL DominoIQ is affected by broken access control6.5CNA v3.10.3%2026-05-20
CVE-2026-20240Denial of service through coldToFrozen.sh script in Splunk Enterprise7.1CNA v3.10.4%2026-05-20Fix
CVE-2026-20239Sensitive information disclosure through Log files in Splunk Enterprise7.5CNA v3.10.5%2026-05-20Fix
CVE-2026-20238Improper access control through Role Inheritance in Splunk AI Toolkit app6.5CNA v3.10.3%2026-05-20Fix
CVE-2026-20223Cisco Secure Workload Unauthorized API Access vulnerability10.0CNA v3.10.8%2026-05-20Exploit codeFix
CVE-2026-20206Cisco ThousandEyes BrowserBot command injection6.3CNA v3.10.4%2026-05-20Fix
CVE-2026-20199Cisco ThousandEyes Enterprise Agent injection4.7CNA v3.10.4%2026-05-20Fix
CVE-2026-20171Cisco Nexus 3000 and 9000 Series Border Gateway protocol denial of service6.8CNA v3.10.5%2026-05-20Fix
CVE-2026-9150openSUSE libsolv Debian metadata parser stack-based buffer overflow6.5CNA v3.10.6%2026-05-20Fix
CVE-2026-9149Red Hat Enterprise Linux 10 libsolv: Heap buffer overflow in libsolv repo_add_solv6.5NVD v3.10.6%2026-05-20Fix
CVE-2026-9144Taiko AG1000-01A Rev/8 stored XSS via Web Configuration interface8.4CNA v4.00.5%2026-05-20
CVE-2026-9141Taiko AG1000-01A Rev/8 authentication bypass via Web interface9.3CNA v4.00.7%2026-05-20
CVE-2026-9139Taiko AG1000-01A Rev/8 hard-coded credentials via login.zhtml9.3CNA v4.00.7%2026-05-20
CVE-2026-9137CSP Report Endpoint Log Flooding in MISP via Incorrect Size Limit7.5v3.10.5%2026-05-20
CVE-2026-9136Unauthorized ShadowAttribute modification in MISP via client-supplied identifier6.5NVD v3.10.3%2026-05-20
CVE-2026-9133RabbitMQ AWS arbitrary file read in rabbitmq-aws plugin8.3CNA v4.01.1%2026-05-20NucleiFix
CVE-2026-9129Path traversal in Altium Enterprise Server Viewer StorageController allows arbitrary file read9.4CNA v4.00.3%2026-05-20Fix
CVE-2026-9126Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-05-20Fix
CVE-2026-9124Google Chrome improper input validation5.3CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-9123Google Android Chromecast in Google Chrome heap-based buffer overflow7.5CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-9122Google Chrome GPU out-of-bounds read6.5CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-9121Google Chrome GPU out-of-bounds read8.8CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-9120Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-05-20Fix
CVE-2026-9119Google Chrome WebRTC heap-based buffer overflow8.8CISA ADP v3.10.5%2026-05-20Fix
CVE-2026-9118Google Chrome XR use-after-free8.8CISA ADP v3.10.4%2026-05-20Fix
CVE-2026-9117Google Chrome GFX type confusion7.5CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-9116Google Chrome ServiceWorker insufficient policy enforcement4.3CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-9115Google Chrome Service Worker insufficient policy enforcement4.3CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-9114Google Chrome QUIC use-after-free8.8CISA ADP v3.10.4%2026-05-20Fix
CVE-2026-9113Google Chrome GPU out-of-bounds read4.3CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-9112Google Chrome GPU use-after-free8.8CISA ADP v3.10.4%2026-05-20Fix
CVE-2026-9111Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-05-20Fix
CVE-2026-9110Google Chrome UI inappropriate implementation4.2CISA ADP v3.10.2%2026-05-20Fix
CVE-2026-9102Path traversal in Altium Enterprise Server ComparisonService allows arbitrary file write9.4CNA v4.00.8%2026-05-20Fix
CVE-2026-9101MongoDB Compass prototype pollution in CSV parsing5.3CNA v4.00.5%2026-05-20Fix
CVE-2026-9100Heap memory out-of-bounds read and crash in C Driver legacy GridFS file reader6.0CNA v4.00.3%2026-05-20Fix
CVE-2026-9087Red Hat build of Keycloak first-broker-login email verification insecure direct object reference6.4CNA v3.10.4%2026-05-20Fix
CVE-2026-9084MISP OIDC authentication bypass6.0CNA v4.00.2%2026-05-20
CVE-2026-9082Drupal Core SQL injection9.8CNA v3.115.7%2026-05-20KEVNucleiMetasploitExploit codeFix
CVE-2026-9065SureCart SQL injection9.3CNA v4.00.4%2026-05-20Fix
CVE-2026-9064Red Hat 389 Directory Server LDAP control handling resource exhaustion7.5CNA v3.11.1%2026-05-20Fix
CVE-2026-9059NextGEN Gallery SQL injection9.3CNA v4.00.4%2026-05-20Fix
CVE-2026-9057Security fix for Qlik Talend Administration Center URL access control vulnerability8.2CNA v3.10.3%2026-05-20Fix
CVE-2026-9056Security fix for Qlik Talend Administration Center cross-site scripting5.4CNA v3.10.2%2026-05-20Fix
CVE-2026-9010Boost WordPress plugin unauthenticated blind SQL injection via Multiple parameters7.5CNA v3.10.5%2026-05-20Fix
CVE-2026-9003TONNET｜E-LAN Hybrid Recording System SQL injection8.7CNA v4.00.6%2026-05-20Fix
CVE-2026-8685Infility Global WordPress plugin authenticated (Subscriber+) SQL injection via orderby parameter6.5CNA v3.10.4%2026-05-20Fix
CVE-2026-8632HP Linux Imaging and Printing Software command injection8.5CNA v4.04.6%2026-05-20Fix
CVE-2026-8631HP Linux Imaging and Printing Software hpcups integer overflow9.3CNA v4.01.1%2026-05-20Fix
CVE-2026-8627The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to the correct_prices_page() function echoing $_SERVER['PHP_SELF'] into a form's action attribute without any input sanitizat6.1CNA v3.10.3%2026-05-20
CVE-2026-8626SponsorMe WordPress plugin reflected cross-site scripting via PHP_SELF parameter6.1CNA v3.10.4%2026-05-20
CVE-2026-8624LJ comments import: reloaded WordPress plugin reflected cross-site scripting via PHP_SELF parameter6.1CNA v3.10.4%2026-05-20
CVE-2026-8610TypeSquare Webfonts for ConoHa WordPress plugin authorization bypass4.3CNA v3.10.4%2026-05-20
CVE-2026-8598Unauthenticated Export service in ZKTeco CCTV Cameras9.1CNA v4.00.6%2026-05-20Fix
CVE-2026-8488Progress Software MOVEit Automation resource exhaustion4.3CNA v3.10.4%2026-05-20Fix
CVE-2026-8487Incorrect default permissions vulnerability in Progress Software MOVEit Automation6.5CNA v3.10.3%2026-05-20Fix
CVE-2026-8486Progress Software MOVEit Automation resource exhaustion5.3CNA v3.10.5%2026-05-20Fix
CVE-2026-8485Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation5.9CNA v3.10.4%2026-05-20Fix
CVE-2026-8469Unauthenticated denial of service via BEAM atom table exhaustion in phoenix_storybook8.2CNA v4.00.5%2026-05-20Fix
CVE-2026-8467Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground9.5CNA v4.02.1%2026-05-20NucleiFix
CVE-2026-8424jay_patel Remove Yellow BGBOX settings page cross-site request forgery4.3CNA v3.10.2%2026-05-20
CVE-2026-8423JaviBola Custom Theme Test WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-05-20
CVE-2026-8420BLOGCHAT Chat System WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2026-05-20
CVE-2026-8419Amazon Scraper WordPress plugin cross-site request forgery to stored cross-site scripting4.3CNA v3.10.2%2026-05-20
CVE-2026-8418Games Catalog WordPress plugin cross-site request forgery to arbitrary Game/Post deletion4.3CNA v3.10.2%2026-05-20
CVE-2026-8038Faces of Users WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-20
CVE-2026-7637Boost WordPress plugin unauthenticated PHP object injection via STYXKEY-BOOST_USER_LOCATION Cookie9.8CNA v3.10.8%2026-05-20Fix
CVE-2026-7613Cost of Goods by PixelYourSite WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-05-20Fix
CVE-2026-7522Advanced Database Cleaner Premium WordPress plugin local file inclusion8.8CNA v3.10.8%2026-05-20Fix
CVE-2026-7472Read More and Accordion WordPress plugin SQL injection4.9CNA v3.10.6%2026-05-20
CVE-2026-7467Read More and Accordion WordPress plugin privilege escalation via importData8.8CNA v3.11.6%2026-05-20Nuclei
CVE-2026-7462VatanSMS WP SMS WordPress plugin reflected cross-site scripting via page parameter6.1CNA v3.10.4%2026-05-20
CVE-2026-7460mailcow-dockerized 2026-03b stored XSS in Queue Manager via unescaped7.4CNA v4.00.4%2026-05-20
CVE-2026-7385Decent Comments WordPress plugin unauthenticated email Address disclosure5.8CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-7284Easy Elements for Elementor WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.7%2026-05-20Fix
CVE-2026-6728Slider Revolution WordPress plugin unauthenticated sensitive information exposure via sliders/stream5.3CNA v3.10.4%2026-05-20Fix
CVE-2026-6566Photo Gallery WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-05-20Fix
CVE-2026-6555ProSolution WP Client WordPress plugin unauthenticated arbitrary file upload via files9.8CNA v3.11.4%2026-05-20Fix
CVE-2026-6549Logo Manager For Enamad WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-20
CVE-2026-6456Account Switcher WordPress plugin authentication bypass to privilege escalation8.8CNA v3.10.5%2026-05-20
CVE-2026-6452Bigfishgames Syndicate WordPress plugin cross-site request forgery to settings reset and update4.3CNA v3.10.2%2026-05-20
CVE-2026-6405Anomify AI WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-05-20
CVE-2026-6404Anomify AI WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-05-20
CVE-2026-6401Bottom Bar WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-05-20
CVE-2026-6400Child Height Predictor by Ostheimer WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-05-20
CVE-2026-6399General Options WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-05-20
CVE-2026-6397Sticky WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-20
CVE-2026-6395Word 2 Cash WordPress plugin Cross-Site request Forgeryto stored cross-site scripting6.1CNA v3.10.2%2026-05-20
CVE-2026-6394Nexa Blocks WordPress plugin unauthenticated blind server-side request forgery5.4CNA v3.10.4%2026-05-20
CVE-2026-6391Sentence To SEO WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2026-05-20
CVE-2026-6072Oliver POS WordPress plugin unauthenticated authorization bypass6.5CNA v3.10.6%2026-05-20Fix
CVE-2026-5950Unbounded resend loop in BIND 9 resolver5.3CNA v3.10.8%2026-05-20Fix
CVE-2026-5947ISC BIND 9 SIG(0) validation during query flood may lead to undefined behavior7.5CNA v3.10.8%2026-05-20Fix
CVE-2026-5946ISC BIND 9 invalid handling of CLASS != IN7.5CNA v3.11.7%2026-05-20Fix
CVE-2026-5783Reflected XSS in Beyaz Computer's CityPLus7.6CNA v3.10.3%2026-05-20Fix
CVE-2026-5776Email Encoder WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.3%2026-05-20Fix
CVE-2026-5293診断ジェネレータ作成プラグイン WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-20
CVE-2026-5200AcyMailing WordPress plugin missing authorization authenticated privilege escalation8.8CNA v3.10.4%2026-05-20Fix
CVE-2026-5075All in One SEO WordPress plugin sensitive information exposure4.3CNA v3.10.3%2026-05-20Fix
CVE-2026-4293Kieback and Peter DDC Building Controllers cross-site scripting5.3CNA v3.10.3%2026-05-20Fix
CVE-2026-3985Creative Mail Easier WordPress and WooCommerce Email Marketing plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-05-20
CVE-2026-3593Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation7.4CNA v3.11.1%2026-05-20Fix
CVE-2026-3592ISC BIND 9 amplification vulnerabilities via self-pointed glue records5.3CNA v3.10.6%2026-05-20Fix
CVE-2026-3039BIND 9 server memory exhaustion during GSS-API TKEY negotiation7.5CNA v3.12.3%2026-05-20Fix
CVE-2026-2955AI Chatbot and Workflow Automation by AIWU WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-20Fix
CVE-2026-2813Unvalidated redirect in ArcGIS Server4.7CNA v3.10.3%2026-05-20Fix
CVE-2026-2812Improper authentication issue in ArcGIS Server5.3CNA v3.10.4%2026-05-20Fix
CVE-2026-0857Mesalvo Meona Client weak password hash4.4CNA v3.10.1%2026-05-20Fix
CVE-2026-0856Mesalvo Meona Client improper access control7.8CNA v3.10.1%2026-05-20Fix
CVE-2026-47358Tenable Terrascan external control of a file path9.3CNA v4.00.6%2026-05-19
CVE-2026-47357Tenable Terrascan external control of a file path9.3CNA v4.00.6%2026-05-19
CVE-2026-47356Tenable Terrascan server-side request forgery8.7CNA v4.00.6%2026-05-19
CVE-2026-47323Apache Camel: Camel-CXF message header injection via Missing Inbound Filtering9.8CISA ADP v3.11.6%2026-05-19Exploit codeFix
CVE-2026-47317Samsung Open Source Escargot uncontrolled recursion5.5CNA v3.10.3%2026-05-19
CVE-2026-47316Samsung Open Source Escargot improper exception handling5.5CNA v3.10.3%2026-05-19
CVE-2026-47315Samsung Open Source Escargot improper check for exceptional conditions5.5CNA v3.10.3%2026-05-19
CVE-2026-47314Samsung Open Source Escargot out-of-bounds write7.8CNA v3.10.3%2026-05-19
CVE-2026-47313Samsung Open Source Escargot excessive memory allocation5.5CNA v3.10.3%2026-05-19
CVE-2026-47312Samsung Open Source Escargot release of an invalid pointer5.5CNA v3.10.3%2026-05-19
CVE-2026-47311Samsung Open Source Escargot heap-based buffer overflow7.8CNA v3.10.3%2026-05-19
CVE-2026-47310Samsung Open Source Escargot use-after-free7.8CNA v3.10.3%2026-05-19
CVE-2026-47309Samsung Open Source Escargot uncontrolled recursion5.5CNA v3.10.3%2026-05-19
CVE-2026-47308Samsung Open Source Walrus null pointer dereference5.5CNA v3.10.3%2026-05-19
CVE-2026-47307Samsung Open Source Walrus null pointer dereference5.5CNA v3.10.3%2026-05-19
CVE-2026-47107Windmill incorrect default permissions in nsjail Configuration8.6CNA v4.00.3%2026-05-19Fix
CVE-2026-47100Funnel Builder for WooCommerce Checkout missing authorization via AJAX8.7CNA v4.00.5%2026-05-19Fix
CVE-2026-46725Remote code execution in extension Content Element Selector (ceselector)9.2CNA v4.01.9%2026-05-19NucleiEmerging ThreatsFix
CVE-2026-46724Path traversal in extension Faceted Search (ke_search)5.9CNA v4.00.5%2026-05-19Fix
CVE-2026-46723Information disclosure in extension Faceted Search (ke_search)5.9CNA v4.00.4%2026-05-19Fix
CVE-2026-46722XML external entity injection in extension Faceted Search (ke_search)5.9CNA v4.00.4%2026-05-19Fix
CVE-2026-46721Broken access control in extension Frontend User Registration (sf_register)6.9CNA v4.00.4%2026-05-19Fix
CVE-2026-46586Apache OFBiz content traversal service code injection8.8CISA ADP v3.10.7%2026-05-19Fix
CVE-2026-45585Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.5%2026-05-19Exploit codeFix
CVE-2026-45557Technitium DNS Server excessive DNSSEC requests6.9CNA v4.00.5%2026-05-19Fix
CVE-2026-45442Presto Player WordPress plugin broken access control4.3CNA v3.10.3%2026-05-19Fix
CVE-2026-45434Apache OFBiz: Authentication bypass via Password-Change logic flaw leading to RCE9.8CISA ADP v3.11.3%2026-05-19Emerging ThreatsFix
CVE-2026-45187Apache OFBiz improper authorization6.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-44408Unauthorized access vulnerability in ZTE MU52506.3CNA v3.10.4%2026-05-19
CVE-2026-44159Tyler Identity Local (TID-L) default administrative credentials9.3CNA v4.00.5%2026-05-19
CVE-2026-43634HestiaCP IP spoofing via CF-Connecting-IP header8.7CNA v4.00.4%2026-05-19
CVE-2026-43633HestiaCP deserialization RCE via Web Terminal9.5CNA v4.01.5%2026-05-19
CVE-2026-43493Linux kernel pcrypt parallel crypto vulnerability9.8CNA v3.10.6%2026-05-19Fix
CVE-2026-43492Linux kernel MPI library integer underflow5.5NVD v3.10.2%2026-05-19Fix
CVE-2026-43491In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking on the number of servers added per node. A malicious client can flood NEW_SERVER messages and exhaust memory. Fix this issue by lim5.5v3.10.1%2026-05-19Fix
CVE-2026-42526Apache Airflow Amazon provider team-scoped secrets backend incorrect authorization5.3CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-42100DoS in Sparx Pro Cloud Server7.5v3.10.6%2026-05-19
CVE-2026-42099Race condition in Sparx Pro Cloud Server7.5v3.10.7%2026-05-19
CVE-2026-42098Authorization bypass in Sparx Enterprise Architect8.7CNA v4.00.4%2026-05-19
CVE-2026-42097Authentication bypass in Sparx Pro Cloud Server8.8NVD v3.10.9%2026-05-19
CVE-2026-42096Broken access control in Sparx Pro Cloud Server8.8v3.10.6%2026-05-19Exploit code
CVE-2026-41919Apache OFBiz LDAP Query improper neutralization9.1CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-41470LIVE555 RTSP server authorization bypass via Session Token8.2CNA v4.00.6%2026-05-19Fix
CVE-2026-39250Innoshop improper access control7.3CISA ADP v3.10.3%2026-05-19
CVE-2026-37982Keycloak: Org.keycloak.authentication: Keycloak: Unauthorized account takeover6.8CNA v3.10.6%2026-05-19Fix
CVE-2026-37981Keycloak: Org.keycloak.authorization: Keycloak: Information disclosure4.3CNA v3.10.4%2026-05-19Fix
CVE-2026-37979Keycloak: Keycloak: Information disclosure via oidc token introspection endpoint audience bypass6.5CNA v3.10.4%2026-05-19Fix
CVE-2026-37978Keycloak: Org.keycloak.services: Keycloak: Information disclosure via evaluate-scopes admin API4.9CNA v3.10.5%2026-05-19Fix
CVE-2026-37281Zenshin stream-to-vlc route command injection9.8CISA ADP v3.12.5%2026-05-19
CVE-2026-36829Panabit PAP-XM320 session cookie validation authentication bypass9.8CISA ADP v3.11.5%2026-05-19
CVE-2026-36828Panabit PAP-XM320 ajax_cmd CGI script command injection8.8CISA ADP v3.12.3%2026-05-19
CVE-2026-36827Panabit PAP-XM320 pappiw helper utility command injection5.4CISA ADP v3.11.0%2026-05-19
CVE-2026-35086Apache OFBiz: Authenticated remote code execution via Unsafe Template Expansion in email services6.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-34883Dell Color Management application installer privilege escalation5.3CISA ADP v3.10.2%2026-05-19
CVE-2026-34744MantisBT authorization bypass allows continued access to self-uploaded attachments on private issues5.3CNA v4.00.4%2026-05-19Fix
CVE-2026-34600Joplin Server delta API returns note content after share access is revoked5.7CNA v3.10.4%2026-05-19Fix
CVE-2026-34579MantisBT has an authorization bypass via private issue monitoring5.3CNA v4.00.4%2026-05-19Fix
CVE-2026-34463MantisBT has stored HTML injection/XSS via Clone issue form8.6CNA v4.00.5%2026-05-19Fix
CVE-2026-34390MantisBT: Privilege escalation from Manager to Administrator5.1CNA v4.00.5%2026-05-19Fix
CVE-2026-34358Ctrlpanel-gg panel CtrlPanel: Missing authorization on Admin Write endpoints allows RBAC Bypass8.1CNA v3.10.4%2026-05-19Fix
CVE-2026-34246Ctrlpanel-gg panel CtrlPanel: Stored XSS in Admin Role Management4.8CNA v3.10.3%2026-05-19Fix
CVE-2026-34241CtrlPanel ticket reply notifications stored cross-site scripting8.7CNA v3.10.4%2026-05-19Fix
CVE-2026-34234Ctrlpanel-gg panel CtrlPanel: Unauthenticated RCE using installer script10.0CNA v3.14.5%2026-05-19NucleiFix
CVE-2026-34233Ctrlpanel-gg panel CtrlPanel has missing authentication Checks in Datatable Admin endpoints6.5CNA v3.10.4%2026-05-19Fix
CVE-2026-34216Ctrlpanel-gg panel CtrlPanel: Authenticated remote code execution6.6CNA v3.10.7%2026-05-19Fix
CVE-2026-34154Discourse has a subscription access bypass in its discourse-subscriptions plugin2.1CNA v4.00.3%2026-05-19Fix
CVE-2026-33741EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScript6.8CNA v3.10.3%2026-05-19Fix
CVE-2026-33642Kitty has a heap buffer over-read/Write via integer overflow in compose_rectangles Bounds Check9.9CNA v3.10.4%2026-05-19Fix
CVE-2026-33637Faraday: Protocol-relative URI objects still bypass host scoping0.0CNA v3.10.3%2026-05-19Fix
CVE-2026-33633Kitty has a heap buffer overflow in its Graphics protocol handler7.5CNA v3.10.5%2026-05-19Fix
CVE-2026-33565OpenHarmony kernel_linux_common_modules has a race condition3.3CNA v3.10.1%2026-05-19
CVE-2026-33514Discourse: Information disclosure in form Template API due to missing authorization6.0CNA v4.00.3%2026-05-19Fix
CVE-2026-33234AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server5.0CNA v3.10.4%2026-05-19Exploit codeFix
CVE-2026-33233AutoGPT Platform: Remote code execution via Unsafe Pickle deserialization of Redis Cache Entries7.6CNA v3.10.5%2026-05-19Fix
CVE-2026-33232AutoGPT: Unauthenticated DoS via Disk Space Exhaustion7.5CNA v3.10.5%2026-05-19Fix
CVE-2026-33052MantisBT: Authorization bypass in Global Profile Creation5.3CNA v4.00.4%2026-05-19Fix
CVE-2026-32994Rocket.Chat improper access control5.3CNA v3.00.3%2026-05-19Fix
CVE-2026-32882libheif overlay image compositing out-of-bounds read7.1CNA v3.10.7%2026-05-19Fix
CVE-2026-32814libheif grid tile decoding information disclosure6.5CNA v3.10.4%2026-05-19Fix
CVE-2026-32741libheif has a heap buffer overflow in decode_mask_image7.1CNA v3.10.4%2026-05-19Fix
CVE-2026-32740Struktur libheif grid tile chroma compositing out-of-bounds write8.8CNA v3.10.8%2026-05-19Exploit codeFix
CVE-2026-32739libheif is vulnerable to infinite loop DoS via stts Sample Duration Lookup6.5CNA v3.10.4%2026-05-19Fix
CVE-2026-32738libheif has a heap OOB read/SEGV crash via Zero samples_per_chunk6.5CNA v3.10.4%2026-05-19Fix
CVE-2026-32323Mullvad VPN for macOS: Local privilege escalation via unverified bundle path in installer7.3CNA v3.10.1%2026-05-19Fix
CVE-2026-32312GLPI: Unauthorized export of form structure5.1CNA v4.00.3%2026-05-19Fix
CVE-2026-32244Discourse: Cached outdated summaries can leak removed content5.3CNA v3.10.4%2026-05-19Fix
CVE-2026-32134NanoMQ: Null pointer dereference crash in tcptran_pipe_peer during Session Restore5.9CNA v3.10.5%2026-05-19Fix
CVE-2026-31986Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and widget template injection9.1CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31910Apache OFBiz: Improper input validation in UI Factory Classes leads to SSRF and Blind File Access7.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31909Apache OFBiz: Unauthenticated Shipment Label Image Disclosure7.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31906Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal dialog parameters6.1CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31388Apache OFBiz: Cross-Tenant data exposure via Program Export feature5.3CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-31387Apache OFBiz: Cookie Manipulation allows Authenticated JWT Forgery and Account Impersonation5.3CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31380Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass6.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-31379Apache OFBiz Catalog Manager path traversal6.1CISA ADP v3.10.7%2026-05-19Fix
CVE-2026-31378Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass leads to remote code execution6.5CISA ADP v3.10.7%2026-05-19Fix
CVE-2026-31072APScheduler's JSONSerializer and CBORSerializer are vulnerable to remote code execution9.8CISA ADP v3.11.0%2026-05-19
CVE-2026-31071LalanaChami Pharmacy Management System API endpoints missing authentication9.1CISA ADP v3.10.7%2026-05-19
CVE-2026-31070LalanaChami Pharmacy Management System signup endpoint privilege escalation9.8CISA ADP v3.10.6%2026-05-19
CVE-2026-31069BillaBear is vulnerable to SQL injection in the EventRepository8.8CISA ADP v3.10.5%2026-05-19
CVE-2026-30118scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows unauthenticated attackers to force the backend server to send HTTP requests to attacker-controlled URLs, leading to authentica9.8CISA ADP v3.10.6%2026-05-19
CVE-2026-30117scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file.9.8CISA ADP v3.10.7%2026-05-19
CVE-2026-29226Apache OFBiz: Low-privilege SSRF in Content component7.3CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-29220Apache OFBiz: Low-privilege LFI in Content component6.5CISA ADP v3.10.8%2026-05-19Fix
CVE-2026-29207Apache OFBiz: Low-privilege SSTI leading to RCE in the Content component6.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-28751OpenHarmony filemanagement_storage_service has an improper input validation3.3CNA v3.10.1%2026-05-19
CVE-2026-28733OpenHarmony filemanagement_storage_service has an use-after-free6.5CNA v3.10.1%2026-05-19
CVE-2026-27781OpenHarmony kernel_liteos_a has an integer overflow3.3CNA v3.10.1%2026-05-19
CVE-2026-27766OpenHarmony multimedia_audio_framework has a race condition5.5CNA v3.10.1%2026-05-19
CVE-2026-27648OpenHarmony web_webview has an out-of-bounds write8.8CNA v3.10.7%2026-05-19
CVE-2026-27173Apache Airflow CNCF Kubernetes provider information disclosure8.7CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-25850OpenHarmony filemanagement_storage_service has an improper preservation of permissions5.5CNA v3.10.1%2026-05-19
CVE-2026-25781OpenHarmony kernel_liteos_a has an out-of-bounds write8.4CNA v3.10.2%2026-05-19
CVE-2026-25110OpenHarmony sensors_medical_sensor has a null pointer dereference3.3CNA v3.10.1%2026-05-19
CVE-2026-24792OpenHarmony web_webview has a race condition8.1CNA v3.10.4%2026-05-19
CVE-2026-23558Xen grant table v2 race in status page mapping7.8CISA ADP v3.10.1%2026-05-19Fix
CVE-2026-23557Xen xenstored DoS via XS_RESET_WATCHES command6.5CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-8975Memory safety bugs fixed in Thunderbird and Thunderbird 1518.8CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-8974Memory safety bugs fixed in Thunderbird and Thunderbird 1518.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8973Memory safety bugs fixed in Thunderbird 1518.8CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-8972Mozilla Firefox privilege escalation in the WebRTC: Audio/Video component8.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8971Mozilla Firefox same-origin policy bypass in the Networking: JAR component6.5CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-8970Mozilla Firefox privilege escalation in the Security component8.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8969Mozilla Firefox mitigation bypass in the DOM: Security component8.1CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8968Mozilla Firefox denial of service due to invalid pointer in the Audio/Video: Web Codecs component7.5CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-8967Mozilla Firefox information disclosure in the Graphics: WebGPU component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8966Mozilla Firefox information disclosure in the IP Protection component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8965Mozilla Firefox information disclosure in the DOM: Security component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8964Mozilla Firefox spoofing issue in the Popup Blocker component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8963Mozilla Firefox spoofing issue in the Web Speech component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8962Mozilla Firefox mitigation bypass in the DOM: Security component8.1CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8961Mozilla Firefox spoofing issue in the Form Autofill component6.5CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-8960Mozilla Firefox spoofing issue in WebExtensions7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8959Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8958Mozilla Firefox information disclosure, sandbox escape in the Security: Process Sandboxing component8.6CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8957Mozilla Firefox privilege escalation in the Enterprise Policies component8.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8956Mozilla Firefox integer overflow in the Networking: JAR component9.8CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-8955Mozilla Firefox privilege escalation in the DOM: Workers component8.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8954Mozilla Firefox incorrect boundary conditions, integer overflow in the Audio/Video component7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8953Mozilla Firefox sandbox escape due to use-after-free in the Disability Access APIs component9.6CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-8952Mozilla Firefox privilege escalation in the Application Update component8.8CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8951Mozilla spoofing issue in the Toolbar component in Firefox for Android6.5CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-8950Mozilla Firefox same-origin policy bypass in the Networking: HTTP component9.3CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-8949Mozilla Firefox integer overflow in the Widget: Win32 component7.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-8948Mozilla Firefox same-origin policy bypass in the DOM: Networking component9.1CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-8947Mozilla Firefox use-after-free in the DOM: Bindings (WebIDL) component7.3CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8946Mozilla Firefox incorrect boundary conditions in the Audio/Video: Web Codecs component7.5CISA ADP v3.10.6%2026-05-19Fix
CVE-2026-8945Mozilla sandbox escape in Firefox and Firefox Focus for Android7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-8922Red Hat build of Keycloak OIDC token introspection flawed authentication5.4CNA v3.10.3%2026-05-19Fix
CVE-2026-8912Contest Gallery WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-05-19Fix
CVE-2026-8830Red Hat Keycloak WebAuthn credential registration client-side authentication4.3CNA v3.10.4%2026-05-19Fix
CVE-2026-8827SQL injection in extension Address List (tt_address)8.2CNA v4.00.4%2026-05-19Fix
CVE-2026-8814ExifReader is vulnerable to denial of service via unbounded decompression of image metadata6.9CNA v4.00.5%2026-05-19Fix
CVE-2026-8813ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag8.7CNA v4.00.6%2026-05-19Fix
CVE-2026-8727Remote code execution in extension Site Crawler (crawler)7.1CNA v4.00.5%2026-05-19Fix
CVE-2026-8726SQL injection in extension News system (news)8.2CNA v4.00.6%2026-05-19Fix
CVE-2026-8711F5 NGINX JavaScript js_fetch_proxy heap-based buffer overflow9.2CNA v4.00.8%2026-05-19Fix
CVE-2026-8706Mozilla Firefox sensitive user data could be leaked to other applications through Reader mode6.5CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-8605ScadaBR hard-coded credentials9.8v3.10.5%2026-05-19Fix
CVE-2026-8604Cross-site request forgery (CSRF) in ScadaBR8.8v3.10.2%2026-05-19Fix
CVE-2026-8603Improper neutralization of special elements used in an OS command (OS command injection) in ScadaBR9.8v3.12.1%2026-05-19Fix
CVE-2026-8602Missing authentication for critical function in ScadaBR9.1v3.10.6%2026-05-19Fix
CVE-2026-8495Date iCal Critical information disclosure SA-CONTRIB-2026-0379.8CISA ADP v3.10.5%2026-05-19Fix
CVE-2026-8493Colorbox Inline Moderately critical cross-site scripting SA-CONTRIB-2026-0365.4CISA ADP v3.10.2%2026-05-19Fix
CVE-2026-8492Translate Drupal with GTranslate modification of assumed-immutable data2.7CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-8491Node View Permissions Moderately critical Access bypass SA-CONTRIB-2026-0343.7CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-8370Automic Automation Agent Unix privilege escalation8.5CNA v4.00.2%2026-05-19Fix
CVE-2026-8096Kirki WordPress plugin missing authorization authenticated sensitive form Submission data exposure6.5CNA v3.10.5%2026-05-19Fix
CVE-2026-8073Kirki WordPress plugin unauthenticated limited arbitrary file read and deletion via downloadZIP7.5CNA v3.10.5%2026-05-19Fix
CVE-2026-7860Possible information disclosure of environment variables in Vaadin Build plugins1.6CNA v4.00.1%2026-05-19Fix
CVE-2026-7571Keycloak: Keycloak: Access token disclosure and implicit flow bypass via forged client data7.1CNA v3.10.4%2026-05-19Fix
CVE-2026-7507Keycloak: Session fixation in OIDC login flow that can lead to account takeover7.5CNA v3.11.1%2026-05-19Fix
CVE-2026-7504Org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect uris in keycloak8.1CNA v3.10.5%2026-05-19Fix
CVE-2026-7307Keycloak: Keycloak: Denial of service via specially crafted saml input7.5CNA v3.11.0%2026-05-19Fix
CVE-2026-6871Obfuscate Moderately critical cross-site scripting SA-CONTRIB-2026-0336.1CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-6367Drupal core Moderately critical cross-site scripting SA-CORE-2026-0036.1CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-6366Drupal core Moderately critical Gadget Chain SA-CORE-2026-0026.6CISA ADP v3.10.4%2026-05-19Fix
CVE-2026-6365Drupal core Critical cross-site scripting SA-CORE-2026-0016.1CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-6095Orejime Moderately critical cross-site scripting SA-CONTRIB-2026-0326.1CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-6009Jaspersoft Reports: Java deserialization vulnerability Lleads to remote code execution (RCE)8.7CNA v4.00.7%2026-05-19Fix
CVE-2026-5804Motorola Phones improper authentication8.4CNA v4.00.2%2026-05-19Fix
CVE-2026-5511TP-Link Archer AX72 network diagnostic tool information disclosure4.6CNA v4.00.3%2026-05-19Fix
CVE-2026-5090Template::Plugin::HTML versions for Perl allows HTML and JavaScript to be injected6.1CISA ADP v3.10.3%2026-05-19Fix
CVE-2026-4885Piotnet Addons for Elementor Pro WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2026-05-19Exploit code
CVE-2026-4883Piotnet Forms WordPress plugin unauthenticated arbitrary file upload via form file upload9.8CNA v3.10.9%2026-05-19NucleiExploit code
CVE-2026-4630Red Hat Keycloak Authorization Services Protection API insecure direct object reference6.8CNA v3.10.4%2026-05-19Fix
CVE-2026-2611Improper Origin Validation in MLflow/MLflow9.6CNA v3.00.4%2026-05-19Fix
CVE-2026-2587GlassFish's gadget handler is vulnerable to RCE9.6CNA v3.10.7%2026-05-19Fix
CVE-2026-2586GlassFish's Administration console is vulnerable to RCE9.1CNA v3.10.8%2026-05-19Exploit codeFix
CVE-2026-47092jarrodwatts claude-hud claude HUD arbitrary command execution via COMSPEC Environment variable7.3CNA v4.00.9%2026-05-18
CVE-2026-47091jarrodwatts claude-hud claude HUD path traversal via transcript_path4.8CNA v4.00.2%2026-05-18
CVE-2026-47090jarrodwatts claude-hud Claude HUD Terminal injection via OSC 8 Hyperlinks2.4CNA v4.00.1%2026-05-18
CVE-2026-45829ChromaDB Python project has a pre-authentication code injection10.0CNA v4.01.0%2026-05-18Exploit code
CVE-2026-45495Microsoft Edge (Chromium-based) remote code execution8.8CNA v3.11.0%2026-05-18Fix
CVE-2026-45494Microsoft Edge (Chromium-based) spoofing5.4CNA v3.10.3%2026-05-18Fix
CVE-2026-45492Microsoft Edge (Chromium-based) security feature bypass5.4CNA v3.10.4%2026-05-18Fix
CVE-2026-45246Summarize insecure file permissions information disclosure6.8CNA v4.00.2%2026-05-18Fix
CVE-2026-45245Summarize Unauthorized daemon request via Untrusted Events4.6CNA v4.00.5%2026-05-18Fix
CVE-2026-45244Summarize Unapproved Browser Automation Execution2.1CNA v4.00.4%2026-05-18Fix
CVE-2026-45243Summarize Browser extension missing authorization via Content script5.3CNA v4.00.3%2026-05-18Fix
CVE-2026-45242Summarize path traversal via slidesDir parameter7.1CNA v4.00.7%2026-05-18Fix
CVE-2026-45231DumbAssets stored cross-site scripting via Asset fields5.3CNA v4.00.3%2026-05-18
CVE-2026-45230DumbAssets path traversal file deletion via /API/delete-file8.8CNA v4.01.0%2026-05-18
CVE-2026-42822Microsoft Azure Local Disconnected Operations (ALDO) elevation of privilege10.0CNA v3.10.9%2026-05-18Fix
CVE-2026-42009GnuTLS: GnuTLS: Denial of service via dtls packet reordering7.5CNA v3.11.1%2026-05-18Fix
CVE-2026-41949Dify authorization bypass via File Preview endpoint7.5NVD v3.10.6%2026-05-18Fix
CVE-2026-41948Dify path traversal via plugin Daemon Internal API Access9.4NVD v3.11.9%2026-05-18Reported exploitedNuclei
CVE-2026-41947Dify authorization bypass via Trace Configuration endpoints9.1NVD v3.10.6%2026-05-18Fix
CVE-2026-41119Dell Live Optics improper certificate validation6.8CNA v3.10.2%2026-05-18Fix
CVE-2026-41085Thermo Fisher Scientific Torrent Suite Dx privilege escalation8.8CISA ADP v3.10.4%2026-05-18
CVE-2026-39079An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and /modules/upsshipping/lib/UPSBaseApi.php components7.5CISA ADP v3.10.5%2026-05-18
CVE-2026-38719OpENer Common Packet Format parser out-of-bounds read6.2CISA ADP v3.10.2%2026-05-18
CVE-2026-36438Intelbras VIP-1230-D-G4 password reset function information disclosure5.3CNA v3.10.5%2026-05-18
CVE-2026-32849NetBSD Signed integer overflow in cryptodev_op via cryptodev.c5.7CNA v4.00.2%2026-05-18
CVE-2026-32848NetBSD cryptodev race condition double free via cryptodev_op5.7CNA v4.00.1%2026-05-18
CVE-2026-30950AutoGPT has authenticated session hijacking via IDOR7.1CNA v3.10.4%2026-05-18Exploit codeFix
CVE-2026-29965Hsclabs Mailinspector cross-site scripting6.1CISA ADP v3.10.3%2026-05-18
CVE-2026-29964Hsclabs Mailinspector cross-site scripting6.1CISA ADP v3.10.4%2026-05-18
CVE-2026-29963Hsclabs Mailinspector path traversal7.5CISA ADP v3.13.0%2026-05-18Nuclei
CVE-2026-29962Hsclabs Mailinspector external control of a file path7.5CISA ADP v3.11.8%2026-05-18Nuclei
CVE-2026-28759Mattermost Server shared channel membership sync incorrect authorization4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-28732Mattermost slash command trigger-word update allowed command hijacking4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-27964FacturaScripts: Reflected cross-site scripting (XSS) via Cookie Manipulation3.9CNA v3.10.1%2026-05-18Fix
CVE-2026-27892FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via library module file upload/Download6.5CNA v3.10.4%2026-05-18Fix
CVE-2026-27891NeoRazorX facturascripts remote code execution (RCE) via Zip Slip in plugin Upload Mechanism7.2CNA v3.10.9%2026-05-18Fix
CVE-2026-27737BigBlueButton has stored XSS in bbb-playback replay6.5CNA v3.10.4%2026-05-18Fix
CVE-2026-27130Dokploy has command injection in its Service Operations9.9CNA v3.11.2%2026-05-18Fix
CVE-2026-26978FreePBX backup module deserialization of untrusted data8.6CNA v4.01.0%2026-05-18Fix
CVE-2026-26462Offline Hospital Management System Electron renderer remote code execution7.3CISA ADP v3.10.5%2026-05-18
CVE-2026-25244WebdriverIO has command injection in the BrowserStack service9.8CNA v3.13.3%2026-05-18Fix
CVE-2026-22810Joplin: Path traversal in OneNote importer allows overwriting arbitrary files8.2CNA v3.10.2%2026-05-18Fix
CVE-2026-21789HCL Connections is vulnerable to broken access control4.6CNA v3.10.1%2026-05-18
CVE-2026-20685Apple Private Cloud Compute Server Software path traversal6.5CISA ADP v3.10.3%2026-05-18Fix
CVE-2026-8851SOGo SQL injection via addUserInAcls endpoint8.6CNA v4.00.4%2026-05-18Fix
CVE-2026-8843MongoDB Server calling createIndex with certain index types can crash mongod7.1CNA v4.00.4%2026-05-18Fix
CVE-2026-8838AWS Amazon Redshift connector for Python remote code execution9.3CNA v4.00.8%2026-05-18Fix
CVE-2026-8836lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow9.3CNA v4.01.6%2026-05-18Exploit codeFix
CVE-2026-8803opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash6.3CNA v4.00.3%2026-05-18
CVE-2026-8802opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal5.3CNA v4.00.6%2026-05-18
CVE-2026-8788Net::Statsd::Lite versions for Perl allowed metric injections7.3CISA ADP v3.10.3%2026-05-18Fix
CVE-2026-8786Tencent WeKnora config API endpoint insecure direct object reference5.3CNA v4.00.4%2026-05-18
CVE-2026-8785Projectworlds hospital management system in PHP update_info.php SQL injection6.9CNA v4.00.4%2026-05-18
CVE-2026-8784npitre cramfs-tools cramfsck.c change_file_status symlink4.6CNA v4.00.2%2026-05-18
CVE-2026-8783omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference5.3CNA v4.00.5%2026-05-18Fix
CVE-2026-8782omec-project amf NGAP message handler.go null pointer dereference5.3CNA v4.00.5%2026-05-18Fix
CVE-2026-8781omec-project amf handler.go RANConfiguration null pointer dereference5.3CNA v4.00.5%2026-05-18Fix
CVE-2026-8780omec-project amf NGAP message dispatcher.go memory corruption5.3CNA v4.00.5%2026-05-18Fix
CVE-2026-8779omec-project amf handler.go NGSetupRequest memory corruption5.3CNA v4.00.5%2026-05-18Fix
CVE-2026-8777Edimax BR-6428NS POST request formStaDrvSetup command injection5.3CNA v4.02.4%2026-05-18
CVE-2026-8776Edimax BR-6428NS POST request formPPTPSetup buffer overflow8.7CNA v4.00.8%2026-05-18
CVE-2026-8775Edimax BR-6428NS POST request formL2TPSetup buffer overflow8.7CNA v4.00.8%2026-05-18
CVE-2026-8774Edimax BR-6228NC POST request mp command injection5.3CNA v4.02.4%2026-05-18
CVE-2026-8773linlinjava litemall Database Setting DbUtil.java load argument injection5.1CNA v4.00.4%2026-05-18
CVE-2026-8772linlinjava litemall admin endpoint SQL injection5.1CNA v4.00.3%2026-05-18
CVE-2026-8771linlinjava litemall Front-end WeChat API WxGoodsController.java list SQL injection6.9CNA v4.00.4%2026-05-18
CVE-2026-8770continuedev Continue JSON-RPC Server lsTool.ts lsTool path traversal4.8CNA v4.00.2%2026-05-18
CVE-2026-7498Stored XSS in Basamak Informatics' DernekWeb8.8CNA v3.10.5%2026-05-18
CVE-2026-7304SGLang: Unauthenticated RCE via --enable-custom-logit-processor9.8CISA ADP v3.10.9%2026-05-18
CVE-2026-7302SGLang's multimodal generation runtime has an unauthenticated path traversal9.1CISA ADP v3.10.6%2026-05-18
CVE-2026-7301SGLanG: Multimodal scheduler deserializes untrusted pickle data on ROUTER socket9.8CISA ADP v3.10.6%2026-05-18
CVE-2026-6902Code injection in Perforce P4 (Helix Core)7.7CNA v4.00.7%2026-05-18Fix
CVE-2026-6495Ajax Load More WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2026-05-18NucleiFix
CVE-2026-6381WP Maps WordPress plugin Subscriber+ local file inclusion7.5CISA ADP v3.10.5%2026-05-18Fix
CVE-2026-6379WP Photo Album Plus WordPress plugin unauthenticated SQL injection via wppa-supersearch parameter8.6CISA ADP v3.10.4%2026-05-18Exploit codeFix
CVE-2026-6347Mattermost Calls plugin exposes TURN server credentials in plaintext in support packets7.6CNA v3.10.4%2026-05-18Fix
CVE-2026-6346Sensitive credentials exposed in plaintext in Mattermost support packets8.7CNA v3.10.4%2026-05-18Fix
CVE-2026-6345Mattermost prevent password disclosure and force reset during Slack import6.5CNA v3.10.4%2026-05-18Fix
CVE-2026-6343Mattermost doesn't check public/private permissions4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-6342Mattermost group prefix matching bypass for subscriptions4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-6341Mattermost incomplete group locking implementation4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-6340Mattermost memory exhaustion via Malicious 7zip file upload4.3CNA v3.10.2%2026-05-18Fix
CVE-2026-6339Mattermost missing request origin validation on burn-on-read reveal endpoint4.3CNA v3.10.2%2026-05-18Fix
CVE-2026-6334OAuth authorization code client binding not enforced during token redemption in Mattermost3.1CNA v3.10.1%2026-05-18Fix
CVE-2026-6333Mattermost SSRF via host header spoofing in Custom Slash commands3.5CNA v3.10.1%2026-05-18Fix
CVE-2026-5163Mattermost doesn't verify channel membership when processing AI-assisted message rewrites6.5CNA v3.10.3%2026-05-18Fix
CVE-2026-4643Calling window.close from server-side content causes crash in the Mattermost Desktop App3.5CNA v3.10.3%2026-05-18Fix
CVE-2026-4320Authorization bypass in ICMS Content Management by Creartia Internet Consulting9.3CNA v4.00.4%2026-05-18Fix
CVE-2026-4286Mattermost Server Playbooks plugin incorrect authorization3.1CNA v3.10.1%2026-05-18Fix
CVE-2026-4273Mattermost insufficient token rotation validation in remote cluster invite confirmation3.7CNA v3.10.1%2026-05-18Fix
CVE-2026-4137Incomplete Fix for Insecure Temporary Directory Permissions in MLflow/MLflow7.8v3.10.2%2026-05-18Fix
CVE-2026-3637Mattermost fails to enforce create_post permission when editing posts4.3CNA v3.10.3%2026-05-18Fix
CVE-2026-3495Mattermost unescaped variables during error page composition3.8CNA v3.10.1%2026-05-18Fix
CVE-2026-3471Mattermost Desktop pop-up window handling denial of service6.5CNA v3.10.3%2026-05-18Fix
CVE-2026-3220Autoptimize WordPress plugin multiple plugins unauthenticated stored XSS via Minify library8.8CISA ADP v3.10.5%2026-05-18Fix
CVE-2026-3117Mattermost instance and webhook GitLab plugin commands were able to be run by non-admin users6.5CNA v3.10.4%2026-05-18Fix
CVE-2026-2325Mattermost improper input validation in MS Teams Meetings API handler4.3CNA v3.10.2%2026-05-18Fix
CVE-2026-1631Feeds for YouTube WordPress plugin Subscriber+ License data deletion5.4CISA ADP v3.10.3%2026-05-18Fix
CVE-2026-0983Denial of service vulnerability in M-Files Server7.1CNA v4.00.2%2026-05-18Fix
CVE-2026-46720Net::Statsd::Tiny versions for Perl allowed metric injections8.2CISA ADP v3.10.4%2026-05-17Fix
CVE-2026-8769vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption6.5NVD v3.10.6%2026-05-17Fix
CVE-2026-8768vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery7.3NVD v3.10.7%2026-05-17
CVE-2026-8767vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection7.5NVD v3.17.0%2026-05-17
CVE-2026-8766Kilo-Org kilocode Environment variable config.ts load information disclosure6.5NVD v3.10.3%2026-05-17
CVE-2026-8765Kilo-Org kilocode File Diff API endpoint worktree-diff.ts Bun.file path traversal6.5NVD v3.10.6%2026-05-17
CVE-2026-8764H3C Magic B3 aspForm UpdateWanParams buffer overflow8.6CNA v4.00.9%2026-05-17
CVE-2026-8759xiandafu beetl SpELFunction SpELFunction.java expression language injection6.9CNA v4.00.5%2026-05-17
CVE-2026-8758Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload6.9CNA v4.00.5%2026-05-17
CVE-2026-8757adenhq hive Delete request routes_sessions.py _read_events_tail path traversal9.1NVD v3.10.6%2026-05-17
CVE-2026-8756FishAudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversal6.9CNA v4.00.7%2026-05-17
CVE-2026-8755FishAudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversal6.9CNA v4.00.7%2026-05-17
CVE-2026-8754AstrBotDevs AstrBot file upload chat.py post_file path traversal5.3CNA v4.00.4%2026-05-17Fix
CVE-2026-8753kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection5.3CNA v4.02.4%2026-05-17
CVE-2026-8752h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control6.9CNA v4.00.5%2026-05-17
CVE-2026-8751h2oai h2o-3 JAR Model.java importBinaryModel deserialization9.8NVD v3.10.4%2026-05-17
CVE-2026-8750h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure7.5NVD v3.10.5%2026-05-17
CVE-2026-8747Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization5.3CNA v4.00.3%2026-05-17
CVE-2026-8746Open5GS NRF nghttp2-server.c discover_handler use-after-free6.5v3.10.7%2026-05-17
CVE-2026-8745Open5GS AUSF nausf-handler.c ogs_timer_add denial of service6.5v3.10.7%2026-05-17
CVE-2026-8744Open5GS NRF context.c ogs_sbi_nf_service_add denial of service6.5v3.10.8%2026-05-17
CVE-2026-8743Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization5.3CNA v4.00.4%2026-05-17
CVE-2026-8741EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition2.3CNA v4.00.4%2026-05-17
CVE-2026-8740Sanluan PublicCMS templateResult API server-side template injection5.3CNA v4.00.4%2026-05-17
CVE-2026-8739Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key6.9CNA v4.00.5%2026-05-17
CVE-2026-8738Sanluan PublicCMS trade payment flow business logic error6.9CNA v4.00.6%2026-05-17
CVE-2026-8737Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication6.9CNA v4.00.7%2026-05-17
CVE-2026-8736Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal2.4CNA v4.00.2%2026-05-17
CVE-2026-8735Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization5.3CNA v4.00.4%2026-05-17
CVE-2026-8734Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable SQL injection6.9CNA v4.00.4%2026-05-17
CVE-2026-8733Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow5.3CNA v4.00.4%2026-05-17
CVE-2026-8731Open5GS NRF client.c ogs_sbi_client_add denial of service6.5v3.10.7%2026-05-17
CVE-2026-8730Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service6.5v3.10.7%2026-05-17
CVE-2026-8729Open5GS NRF message.c denial of service6.5v3.10.7%2026-05-17
CVE-2026-8728Open5GS NRF conv.c ogs_sbi_discovery_option_parse_plmn_list denial of service6.5v3.10.7%2026-05-17
CVE-2026-8725CoreWorxLab CAAL test-hass endpoint webhooks.py server-side request forgery6.9CNA v4.00.5%2026-05-17
CVE-2026-8724DataEase Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter SQL injection7.2v3.10.5%2026-05-17
CVE-2026-8723qs stringify comma array encoding null pointer dereference6.3CNA v4.00.4%2026-05-17Fix
CVE-2026-8721Crypt::OpenSSL::PKCS12 versions for Perl truncates passwords with embedded NULLs9.8CISA ADP v3.10.6%2026-05-17Fix
CVE-2026-8719AI Engine Authenticated privilege escalation8.8CNA v3.10.4%2026-05-17Fix
CVE-2026-8507Crypt::OpenSSL::PKCS12 versions for Perl have out-of-bounds (OOB) write flaws9.8CISA ADP v3.10.8%2026-05-17Fix
CVE-2026-46728denx U-Boot origin validation error8.8v3.10.2%2026-05-16Fix
CVE-2026-46719Net::Statsd::Lite versions for Perl allowed metric injections6.5CISA ADP v3.10.4%2026-05-16Fix
CVE-2026-8681Essential Chat Support WordPress plugin missing authorization unauthenticated settings reset5.3CNA v3.10.4%2026-05-16
CVE-2026-8657jsondiffpatch patch APIs are vulnerable to prototype pollution8.8CNA v4.00.7%2026-05-16Fix
CVE-2026-8656jsondiffpatch cross-site scripting5.1CNA v4.00.3%2026-05-16Fix
CVE-2026-46508Turborepo: VSCode extension command injection8.4CNA v4.00.2%2026-05-15Fix
CVE-2026-46483Vim tar plugin OS command injection3.6CNA v3.10.7%2026-05-15Fix
CVE-2026-46474Trog::TOTP versions for Perl generate secrets using rand7.5CISA ADP v3.10.5%2026-05-15Fix
CVE-2026-46408Vvveb: Checkout IDOR allows unauthorized reuse of another user's cart7.6CNA v3.10.3%2026-05-15Fix
CVE-2026-46407Vvveb: Admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-46383Microsoft APM legacy-bundle tar extraction path traversal5.5CNA v3.10.9%2026-05-15Fix
CVE-2026-46367phpMyFAQ stored XSS via Utils::parseUrl in Comment Rendering8.3CNA v4.00.3%2026-05-15Fix
CVE-2026-46366phpMyFAQ unauthenticated information disclosure via getIdFromSolutionId permission bypass8.7CNA v4.00.4%2026-05-15Fix
CVE-2026-46365phpMyFAQ missing authorization in Tag Deletion endpoint5.3CNA v4.00.3%2026-05-15Fix
CVE-2026-46364phpMyFAQ SQL injection via User-Agent header in BuiltinCaptcha9.3CNA v4.02.1%2026-05-15NucleiFix
CVE-2026-46363phpMyFAQ stored XSS in FAQ Question/Answer via Encode-Decode Bypass5.1CNA v4.00.3%2026-05-15Fix
CVE-2026-46362phpMyFAQ authorization bypass in Admin pages via Non-Terminating Permission Check7.1CNA v4.00.5%2026-05-15Fix
CVE-2026-46361phpMyFAQ stored cross-site scripting via raw Filter in search.twig8.2CNA v4.00.3%2026-05-15Fix
CVE-2026-46360phpMyFAQ stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer5.1CNA v4.00.3%2026-05-15Fix
CVE-2026-46359phpMyFAQ SQL injection in CurrentUser::setTokenData via Unescaped OAuth Token fields7.7CNA v4.00.4%2026-05-15Fix
CVE-2026-46333Linux kernel ptrace dumpable flag check privilege escalation7.1CNA v3.11.0%2026-05-15Exploit codeFix
CVE-2026-45803Gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection3.5CNA v3.10.3%2026-05-15Fix
CVE-2026-45800Vvveb: Authenticated SQL injection in /user/orders via order_by and direction8.7CNA v4.00.3%2026-05-15Fix
CVE-2026-45773Turborepo: Login callback CSRF/session fixation5.1CNA v4.00.2%2026-05-15Fix
CVE-2026-45772Turborepo: Unexpected local code execution during Yarn Berry detection0.0CNA v4.00.6%2026-05-15Fix
CVE-2026-45736ws WebSocket close handler vulnerability4.4CNA v3.10.7%2026-05-15Fix
CVE-2026-45675open-webui Open WebUI: LDAP and OAuth First-user race condition allows multiple Admin Accounts8.1CNA v3.10.5%2026-05-15Fix
CVE-2026-45672Open WebUI code execution endpoint incorrect authorization8.8CNA v3.10.6%2026-05-15Fix
CVE-2026-45671open-webui open WebUI: Shared-chat branch ignores access_type, allowing unauthorized file deletion8.0CNA v3.10.4%2026-05-15Fix
CVE-2026-45667open-webui open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-45666open-webui Open WebUI: Indirect Object Reference (IDOR) in user notes6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-45665open-webui open WebUI: Stored XSS in Banner component via improper sanitization Order8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-45622Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_id5.3CNA v4.00.4%2026-05-15Fix
CVE-2026-45616Vvveb: Stored XSS in Posts allows privilege escalation via post editor5.1CNA v4.00.4%2026-05-15Fix
CVE-2026-45539Microsoft APM package installer link following7.4CNA v3.11.1%2026-05-15Fix
CVE-2026-45402Open WebUI file attachment endpoints insecure direct object reference8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-45401open-webui Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load endpoints8.5CNA v3.10.3%2026-05-15Exploit codeFix
CVE-2026-45400open-webui open WebUI: Server-side request forgery (SSRF) bypass in `validate_url`8.5CNA v3.10.3%2026-05-15Fix
CVE-2026-45399Open WebUI background task management improper authorization7.1CNA v3.10.4%2026-05-15Fix
CVE-2026-45398open-webui Open WebUI: IDOR Retrieval API Bypasses Knowledge Base Access Controls7.5CNA v3.10.5%2026-05-15Fix
CVE-2026-45397open-webui Open WebUI: Unauthenticated RAG Configuration Disclosure5.3CNA v3.10.8%2026-05-15NucleiFix
CVE-2026-45396open-webui Open WebUI: Mass assignment5.4CNA v3.10.4%2026-05-15Fix
CVE-2026-45395Open WebUI tool update endpoint privilege escalation7.2CNA v3.10.7%2026-05-15Fix
CVE-2026-45387open-webui open WebUI: Sharing models for others to use also exposes model details4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-45386open-webui open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-45385open-webui open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-45365Open WebUI chat completions endpoint vulnerability5.4CNA v3.10.3%2026-05-15Fix
CVE-2026-45351open-webui Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-45350open-webui open WebUI: Chat completion API allows tool restrictions to be bypassed7.1CNA v3.10.4%2026-05-15Fix
CVE-2026-45349open-webui Open WebUI: Broken access control for Completions API7.1CNA v3.10.3%2026-05-15Fix
CVE-2026-45347open-webui open WebUI: Blind server side request forgery (SSRF) via the PDF generate function4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-45346open-webui Open WebUI: Stored cross-site scripting in SVG Renderer5.1CNA v4.00.2%2026-05-15Fix
CVE-2026-45345Open WebUI model update function improper authorization6.5CNA v3.10.3%2026-05-15Fix
CVE-2026-45339Open WebUI API key authentication incorrect authorization6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-45338open-webui Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)7.7CNA v3.10.4%2026-05-15Fix
CVE-2026-45331open-webui Open WebUI: Full SSRF vulnerability in the RAG Web Search feature8.5CNA v3.10.3%2026-05-15Fix
CVE-2026-45318open-webui open WebUI: Stored XSS5.4CNA v3.10.2%2026-05-15Fix
CVE-2026-45317open-webui Open WebUI: Cross-site request forgery (CSRF) via Image URL Manipulation4.6CNA v3.10.1%2026-05-15Fix
CVE-2026-45316open-webui Open WebUI: Read-Only Users can Toggle Note Pin Status via Incorrect Permission Check3.5CNA v3.10.3%2026-05-15Fix
CVE-2026-45315open-webui open WebUI: Stored XSS8.7CNA v3.10.2%2026-05-15Fix
CVE-2026-45314Open WebUI webhook profile image endpoint cross-site scripting7.4CNA v4.00.2%2026-05-15Fix
CVE-2026-45303open-webui open WebUI: Stored XSS via the HTML renedering view7.7CNA v3.10.3%2026-05-15Fix
CVE-2026-45301Open WebUI files API improper access control8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-45299open-webui Open WebUI: Stored cross-site scripting in Profile Picture5.4CNA v3.10.2%2026-05-15Fix
CVE-2026-45038Tabby: Dragging and Dropping a file into Tabby can lead to code execution8.4CNA v4.00.2%2026-05-15Fix
CVE-2026-45037Tabby terminal linkifier vulnerability7.1CNA v3.10.2%2026-05-15Fix
CVE-2026-45036Tabby ZMODEM middleware command injection7.0CNA v3.10.2%2026-05-15Fix
CVE-2026-45035Tabby: RCE via `Tabby://run` URL Scheme9.4CNA v4.00.5%2026-05-15Fix
CVE-2026-45010phpMyFAQ Unauthenticated Two-Factor Authentication brute-force via /admin/check endpoint9.3CNA v4.00.6%2026-05-15Fix
CVE-2026-45009phpMyFAQ insufficient authorization Check in Admin API endpoints5.3CNA v4.00.3%2026-05-15Fix
CVE-2026-45008phpMyFAQ path traversal in Client::deleteClientFolder via URL parameter7.0CNA v4.00.5%2026-05-15Fix
CVE-2026-45007phpMyFAQ missing permission check on 12 Configuration API endpoints allows information disclosure5.3CNA v4.00.3%2026-05-15Fix
CVE-2026-44826givanz Vvveb cart improper quantity validation7.5CNA v3.10.4%2026-05-15Fix
CVE-2026-44774Traefik Kubernetes Gateway API provider improper access control6.4CNA v4.00.6%2026-05-15Fix
CVE-2026-44721open-webui Open WebUI: Stored XSS via Model Description7.3CNA v3.10.4%2026-05-15Fix
CVE-2026-44719Mathesar: Missing collaborator checks allowed access to database-scoped Mathesar metadata5.3CNA v4.00.4%2026-05-15Fix
CVE-2026-44718Mathesar: Missing collaborator checks allowed access to saved explorations in other databases5.3CNA v4.00.4%2026-05-15Fix
CVE-2026-44717611711Dark mcp_calculate_server MCP Calculate Server: Prompt injection to RCE9.8CNA v3.10.9%2026-05-15Fix
CVE-2026-44714bitcoinj has a ScriptExecution P2PKH/P2WPKH Verification Bypass7.5CNA v3.10.3%2026-05-15Fix
CVE-2026-44699LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC9.1CNA v4.00.4%2026-05-15Fix
CVE-2026-44641Microsoft APM plugin installer path traversal7.1CNA v3.10.5%2026-05-15Fix
CVE-2026-44571Open WebUI channel message update endpoint incorrect authorization6.5CNA v3.10.3%2026-05-15Fix
CVE-2026-44570open-webui open WebUI: Inconsistent authorization controls within memories API8.3CNA v3.10.4%2026-05-15Fix
CVE-2026-44569open-webui Open WebUI: Insecure Message Access Breaks Authorization7.1CNA v3.10.4%2026-05-15Fix
CVE-2026-44568open-webui Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order4.8CNA v3.10.3%2026-05-15Fix
CVE-2026-44567open-webui Open WebUI: Open WebUI improper authorization Control7.3CNA v3.10.3%2026-05-15Fix
CVE-2026-44566open-webui open WebUI: Arbitrary file upload and path traversal7.3CNA v3.10.5%2026-05-15Fix
CVE-2026-44565open-webui open WebUI: Open WebUI arbitrary file write, Delete via path traversal8.1CNA v3.10.5%2026-05-15Fix
CVE-2026-44564open-webui Open WebUI: Read-Only Users can Modify Collaborative Documents via Socket.IO5.4CNA v3.10.3%2026-05-15Fix
CVE-2026-44563Open WebUI Ollama model access endpoints missing authorization5.4CNA v3.10.3%2026-05-15Fix
CVE-2026-44562open-webui Open WebUI: Model Import Overwrites any Model without Ownership Check6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-44561open-webui Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels5.4CNA v3.10.3%2026-05-15Fix
CVE-2026-44560open-webui Open WebUI: Unauthorized file and Knowledge Base Content Access via RAG Vector Search6.5CNA v3.10.4%2026-05-15Fix
CVE-2026-44559open-webui Open WebUI: Missing Access Check on Channel Members endpoint for Standard Channels4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-44558open-webui Open WebUI: Channel Access Grants Bypass filter_allowed_access_grants5.4CNA v3.10.3%2026-05-15Fix
CVE-2026-44557open-webui Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection4.3CNA v3.10.3%2026-05-15Fix
CVE-2026-44556open-webui open WebUI: Responses passthrough endpoint lacks access control authorization7.1CNA v3.10.4%2026-05-15Fix
CVE-2026-44555open-webui Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining7.6CNA v3.10.3%2026-05-15Fix
CVE-2026-44554Open WebUI knowledge base collection endpoint missing authorization8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-44553Open WebUI Socket.IO session pool vulnerability8.1CNA v3.10.4%2026-05-15Fix
CVE-2026-44552Open WebUI Redis cache keys cache poisoning8.7CNA v3.10.4%2026-05-15Fix
CVE-2026-44551open-webui Open WebUI: LDAP Empty Password authentication bypass9.1CNA v3.11.6%2026-05-15NucleiFix
CVE-2026-44550open-webui Open WebUI: Mass assignment5.0CNA v3.10.3%2026-05-15Fix
CVE-2026-44549open-webui open WebUI: Stored XSS in excel file preview7.3CNA v3.10.4%2026-05-15Fix
CVE-2026-44366Vvveb: Stored XSS via Comment Author field6.1CNA v3.10.3%2026-05-15Fix
CVE-2026-44310gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers5.4CNA v3.10.2%2026-05-15Fix
CVE-2026-44309gitsign commit and tag signature verification vulnerability5.3CNA v3.10.2%2026-05-15Fix
CVE-2026-44088Remote code execution in SzafirHost8.6CNA v4.00.7%2026-05-15Fix
CVE-2026-43490Linux kernel ksmbd out-of-bounds write8.8CNA v3.10.6%2026-05-15Fix
CVE-2026-42458OpenMage Magento LTS Import/Export Dataflow profiles reflected cross-site scripting5.3CNA v4.00.4%2026-05-15Fix
CVE-2026-42207Magento LTS: Open redirect via Unvalidated `uenc` parameter in `stockAction` magento-lts6.1CNA v3.10.2%2026-05-15Fix
CVE-2026-42155OpenMage magento-lts Magento LTS: Weak API Session ID Predictable MD5 of Time-Derived Inputs9.3CNA v4.00.5%2026-05-15Fix
CVE-2026-41971Huawei HarmonyOS permission control vulnerability in the security control module5.5CNA v3.10.1%2026-05-15Fix
CVE-2026-41970Huawei HarmonyOS out-of-bounds write vulnerability in the distributed file system module6.8CNA v3.10.2%2026-05-15Fix
CVE-2026-41969Huawei HarmonyOS permission control vulnerability in the projection module6.2CNA v3.10.1%2026-05-15Fix
CVE-2026-41968Huawei HarmonyOS permission control vulnerability in the manufacturability design module5.9CNA v3.10.1%2026-05-15Fix
CVE-2026-41967Huawei HarmonyOS permission control vulnerability in the manufacturability design module5.9CNA v3.10.1%2026-05-15Fix
CVE-2026-41966Huawei HarmonyOS permission control vulnerability in the smart sensing service5.6CNA v3.10.2%2026-05-15Fix
CVE-2026-41965Huawei HarmonyOS use-after-free (UAF) vulnerability in the web5.6CNA v3.10.2%2026-05-15Fix
CVE-2026-41964Huawei HarmonyOS permission control vulnerability in the web8.4CNA v3.10.1%2026-05-15Fix
CVE-2026-41963Huawei HarmonyOS stack overflow vulnerability in the media platform2.8CNA v3.10.1%2026-05-15Fix
CVE-2026-41962Huawei HarmonyOS permission control vulnerability in the app management and control module3.6CNA v3.10.1%2026-05-15Fix
CVE-2026-41961Huawei HarmonyOS permission control vulnerability in contacts5.9CNA v3.10.1%2026-05-15Fix
CVE-2026-41960Huawei HarmonyOS permission control vulnerability in calls5.8CNA v3.10.1%2026-05-15Fix
CVE-2026-41702VMware Fusion TOCTOU local privilege escalation7.8CNA v3.10.1%2026-05-15Fix
CVE-2026-41553Remote code execution in PDF Export Module10.0v3.11.0%2026-05-15Fix
CVE-2026-41552Path traversal in PDF Export Module7.5NVD v3.10.6%2026-05-15Fix
CVE-2026-41258OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange9.1CNA v3.10.5%2026-05-15Fix
CVE-2026-41181Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service6.9CNA v4.00.5%2026-05-15Fix
CVE-2026-39054Oinone Pamirs CommandHelper command injection7.3CISA ADP v3.12.2%2026-05-15
CVE-2026-39053Oinone Pamirs XStream XML parser XML external entity injection6.5CISA ADP v3.10.5%2026-05-15
CVE-2026-39052Oinone Pamirs ScriptRunner code injection6.5CISA ADP v3.10.4%2026-05-15
CVE-2026-38728Smtp-server's command parser memory exhaustion denial of service7.5CISA ADP v3.10.8%2026-05-15Fix
CVE-2026-35194Apache Flink: Remote code execution via SQL injection in code generation8.1CISA ADP v3.10.7%2026-05-15Exploit codeFix
CVE-2026-34253vorbis-tools ogg123 remote control buffer underflow8.2CISA ADP v3.10.7%2026-05-15Fix
CVE-2026-28761Fujitsu Japan Musetheque V4 Information Disclosure for IPKNOWLEDGE cross-site request forgery8.5CNA v4.00.2%2026-05-15
CVE-2026-24662Fujitsu Japan Musetheque V4 Information Disclosure for IPKNOWLEDGE cross-site scripting4.8CNA v4.00.1%2026-05-15
CVE-2026-23695Cockpit CMS stored XSS via Set Field Display template5.1CNA v4.00.1%2026-05-15
CVE-2026-8704Crypt::DSA versions for Perl use 2-args open, allowing existing files to be modified6.5CISA ADP v3.10.4%2026-05-15Fix
CVE-2026-8700Crypt::DSA versions for Perl generate seeds using rand7.3CISA ADP v3.10.4%2026-05-15Fix
CVE-2026-8696radare2 use-after-free via gdbr_pids_list9.8v3.11.0%2026-05-15Fix
CVE-2026-8695radare2 use-after-free via gdbr_threads_list9.8v3.11.1%2026-05-15Fix
CVE-2026-8686FreeRTOS coreMQTT DoS from MQTT deserialization Fault in core MQTT8.7CNA v4.00.7%2026-05-15Fix
CVE-2026-8669Imager versions for Perl allow a heap out-of-bounds (OOB) write on crafted multi-frame GIF files6.5CISA ADP v3.10.4%2026-05-15Fix
CVE-2026-8654Delphix Continuous data IBM Db2 Connector improper input validation8.7CNA v4.00.4%2026-05-15Fix
CVE-2026-8612WWW::Mechanize::Cached on-disk cache vulnerability5.3CISA ADP v3.10.3%2026-05-15Fix
CVE-2026-8503Apache::Session::Generate::SHA256 versions for Perl create insecure session ids6.5CISA ADP v3.10.4%2026-05-15Fix
CVE-2026-8454Imager::File::GIF GIF frame decoder out-of-bounds write5.3CISA ADP v3.10.2%2026-05-15Fix
CVE-2026-8425Notify Odoo WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-05-15Fix
CVE-2026-8398Daemon Tools Lite embedded malicious code9.3CNA v4.01.0%2026-05-15KEVFix
CVE-2026-7563Classified Listing WordPress plugin missing authorization authenticated arbitrary modification4.3CNA v3.10.5%2026-05-15Fix
CVE-2026-7373Metasploit Pro on Windows: Local privilege escalation via OpenSSL Configuration File Loading8.5CNA v4.00.2%2026-05-15
CVE-2026-7182Path traversal in Diagram9.2CNA v4.00.5%2026-05-15Fix
CVE-2026-7046NEX-Forms Ultimate Forms Plugin for WordPress SQL injection4.9CNA v3.10.6%2026-05-15Fix
CVE-2026-6646The7 WordPress theme stored cross-site scripting6.4CNA v3.10.4%2026-05-15Fix
CVE-2026-6415Advanced Custom Fields: Font Awesome Field WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-15Fix
CVE-2026-6403Quick Playground WordPress plugin unauthenticated path traversal to arbitrary file read7.5CNA v3.11.2%2026-05-15Fix
CVE-2026-6228Frontend Admin by DynamiApps WordPress plugin unauthenticated privilege escalation8.8CNA v3.10.8%2026-05-15Fix
CVE-2026-5229Form Notify WordPress plugin authentication bypass9.8CNA v3.11.1%2026-05-15Exploit codeFix
CVE-2026-4683Smartcat Translator for WPML WordPress plugin unauthorized access6.5CNA v3.10.5%2026-05-15Fix
CVE-2026-4094FOX WordPress plugin missing authorization8.1CNA v3.10.5%2026-05-15Fix