CVE-2026-19977 - A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function http

CVE-2026-73678 - MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution

CVE-2026-19188 - A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gate

CVE-2026-72811 - SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query

CVE-2026-72851 - Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered

CVE-2026-61962 - Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.

CVE-2026-27544 - Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.

CVE-2026-59500 - CWE-287: Improper Authentication

CVE-2026-15413 - The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it

CVE-2024-27253 - IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass secur