CVE-2026-22098 - Various sensitive information such as passwords and charging card UIDs are written to log files.

CVE-2026-22097 - The firmware update mechanism does not include cryptographic signature validation. This allows anyon

CVE-2026-22096 - The webserver running on port 8090 does not require authentication. This allows for sensitive inform

CVE-2026-22095 - The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection.

CVE-2026-22093 - The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the ce

CVE-2026-15557 - A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is the

CVE-2026-15548 - A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affe

CVE-2026-14846 - In version 8.2.1 of PrestaShop, there is a vulnerability relating to the incorrect sanitisation of e

CVE-2026-13014 - A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated

CVE-2026-9708 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an

CVE-2026-9597 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is dea

CVE-2026-9571 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth

CVE-2026-6850 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the len

CVE-2026-62143 - A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion mod

CVE-2026-15574 - A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all

CVE-2026-15547 - A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048

CVE-2026-15546 - A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is the

CVE-2026-15545 - A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is t

CVE-2026-14453 - This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-t

CVE-2026-10106 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify that the

CVE-2026-10103 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post owne

CVE-2026-10085 - Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to restrict the gro

CVE-2026-57830 - Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.

CVE-2026-57829 - Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Jooml

CVE-2026-4769 - Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability durin

CVE-2026-15544 - A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar

CVE-2026-15543 - A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the f

CVE-2026-15542 - A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of

CVE-2026-15541 - A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.

CVE-2026-15540 - A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is

CVE-2026-14165 - An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Editio

CVE-2026-15539 - A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted

CVE-2026-15538 - A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the functio

CVE-2026-15537 - A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerabili

CVE-2026-15536 - A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unkno

CVE-2026-12582 - The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supp

CVE-2026-12397 - The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employe

CVE-2026-12396 - The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks bef

CVE-2026-12275 - The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integrat

CVE-2026-12274 - The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to

CVE-2026-12273 - The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target vali

CVE-2026-12271 - The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt

CVE-2026-12081 - The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.2 does not res

CVE-2026-11964 - The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity o

CVE-2026-11963 - The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization

CVE-2026-10551 - The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Sc

CVE-2026-15535 - A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99.

CVE-2026-15533 - A security flaw has been discovered in DedeCMS 5.7.118. Impacted is an unknown function of the file

CVE-2026-15532 - A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects so

CVE-2026-15531 - A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b

CVE-2026-15530 - A flaw has been found in WuzhiCMS up to 4.1.0. Affected by this vulnerability is the function config

CVE-2026-9492 - The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYT

CVE-2026-7162 - Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve sys

CVE-2026-15553 - Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing una

CVE-2026-15552 - Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowi

CVE-2026-15529 - A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persi

CVE-2026-15528 - A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown proc

CVE-2026-15527 - A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects u

CVE-2026-15526 - A flaw has been found in augmnt augments-mcp-server 7.1.0. This issue affects the function scanProje

CVE-2026-15525 - A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _v

CVE-2026-15524 - A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. This affects

CVE-2026-15523 - A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by t

CVE-2026-15522 - A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerabili

CVE-2026-15521 - A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown

CVE-2026-15520 - A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decom

CVE-2026-15519 - A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the fil

CVE-2026-15551 - Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

CVE-2026-15518 - A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the functio

CVE-2026-15517 - A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/

CVE-2026-15516 - A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of t

CVE-2026-15515 - A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects

CVE-2026-15514 - A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affec

CVE-2026-15513 - A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function wlink_uc

CVE-2026-15512 - A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown f

CVE-2026-15511 - A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerabilit

CVE-2026-15510 - A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of

CVE-2026-15509 - A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser o

CVE-2026-15508 - A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_ta

CVE-2026-15507 - A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown f

CVE-2026-15506 - A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected elemen

CVE-2026-15505 - A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the

CVE-2026-10668 - The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the co

CVE-2026-10667 - Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c)

CVE-2026-10666 - parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c

CVE-2026-10665 - In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c

CVE-2026-10664 - The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drive

CVE-2026-10663 - In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/us

CVE-2026-58596 - Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to

CVE-2026-15502 - A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of

CVE-2026-15501 - A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this iss

CVE-2026-61876 - LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allo

CVE-2026-61875 - luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN c

CVE-2026-61874 - filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in Delet

CVE-2026-59260 - OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticat

CVE-2026-56336 - Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /priva

CVE-2026-56313 - Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prel

CVE-2026-56308 - Capgo before 12.128.2 allows email address changes without requiring current password re-authenticat

CVE-2026-56281 - Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoi

CVE-2026-56271 - Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets

CVE-2026-56260 - Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /scr

CVE-2026-56259 - Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that

CVE-2026-56252 - Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint t

CVE-2026-56241 - Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users

CVE-2026-56238 - Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST glo

CVE-2026-15500 - A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability i

CVE-2026-15499 - A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function Fu

CVE-2026-15498 - A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa

CVE-2026-15497 - A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown fun

CVE-2026-15496 - A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the func

CVE-2026-15495 - A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an

CVE-2026-15494 - A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function

CVE-2026-15493 - A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0ed

CVE-2026-15492 - A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c64

CVE-2026-15491 - A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3a

CVE-2026-15490 - A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce

CVE-2026-15489 - A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3a

CVE-2026-15488 - A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileCon

CVE-2026-15487 - A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of th

CVE-2026-15486 - A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C

CVE-2026-15485 - A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C