CVE-2026-79747 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79746 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79745 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79744 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-79743 - MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/AP

CVE-2026-51730 - Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51729 - Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51728 - Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51727 - Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51726 - Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51725 - Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-19953 - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via miss

CVE-2026-82810 - A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The im

CVE-2026-82809 - A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The aff

CVE-2026-82808 - A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impac

CVE-2026-51724 - Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51723 - Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51722 - Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51721 - Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51720 - Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-17615 - A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker

CVE-2026-14366 - The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx

CVE-2026-83492 - Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affec

CVE-2026-82823 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason:

CVE-2026-82807 - A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown

CVE-2026-82805 - A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of

CVE-2026-82803 - A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_s

CVE-2026-82802 - A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSea

CVE-2026-77975 - The affected Ebyte product exports administrative credentials and other sensitive configuration i

CVE-2026-77966 - The affected Ebyte product does not provide separation between limited and administrative managem

CVE-2026-76133 - The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related oper

CVE-2026-75133 - Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulner

CVE-2026-75132 - WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns`

CVE-2026-73819 - The affected Ebyte product's vendor configuration utility permits access to administrative functi

CVE-2026-51719 - Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51718 - Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51717 - Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51716 - Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 al

CVE-2026-51715 - Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51714 - Incorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51713 - Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51712 - Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51711 - Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51710 - Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51709 - Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51708 - Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51706 - Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51705 - Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51704 - Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51703 - Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51702 - Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-51701 - Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51700 - Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51699 - Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51698 - Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51153 - Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 th

CVE-2026-51152 - Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetche

CVE-2026-21827 - HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to

CVE-2026-82970 - Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for

CVE-2026-82801 - A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the f

CVE-2026-82703 - A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function

CVE-2026-82702 - A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file

CVE-2026-82701 - A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue i

CVE-2026-78422 - Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit sub

CVE-2026-66047 - ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code

CVE-2026-63083 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-59111 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-51697 - Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51696 - Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 al

CVE-2026-51695 - Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51694 - Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51693 - Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51692 - Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51691 - Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51690 - Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51689 - Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51688 - Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allow

CVE-2026-51687 - Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51686 - Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51684 - Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51683 - Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-82700 - A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerabilit

CVE-2026-82699 - A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe53

CVE-2026-82698 - A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb

CVE-2026-82697 - A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e90

CVE-2026-82217 - In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change too

CVE-2026-78079 - Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.

CVE-2026-78078 - Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ulti

CVE-2026-78077 - Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container

CVE-2026-78076 - Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settin

CVE-2026-78075 - Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Heli

CVE-2026-78074 - Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various

CVE-2026-76986 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-76985 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ext

CVE-2026-76763 - A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly va

CVE-2026-51681 - Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51680 - Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51679 - Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51678 - Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-51677 - Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51676 - Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 all

CVE-2026-51675 - Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows una

CVE-2026-51674 - Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51673 - Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unaut

CVE-2026-51672 - Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-51671 - Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015

CVE-2026-51670 - Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-51669 - Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unau

CVE-2026-51668 - Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows

CVE-2026-19702 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-19616 - Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionalit

CVE-2026-82696 - A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element

CVE-2026-82695 - A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of th

CVE-2026-82694 - A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSe

CVE-2026-82693 - A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function

CVE-2026-82692 - A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown par

CVE-2026-74010 - Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Confi

CVE-2026-5956 - Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i

CVE-2026-51667 - Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allo

CVE-2026-51666 - Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows un

CVE-2026-12894 - A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content l

CVE-2026-82797 - Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nest

CVE-2026-82691 - A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Af

CVE-2026-82690 - A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability

CVE-2026-82689 - A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affe

CVE-2026-76984 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-76983 - Improper neutralization of input during web page generation in Apache Wicket. The <wicket:label> ta

CVE-2026-76982 - Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.mar

CVE-2026-75802 - AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writ

CVE-2026-71378 - ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forge

CVE-2026-71257 - Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multip

CVE-2026-70449 - Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote att

CVE-2026-82881 - Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitizatio

CVE-2026-82880 - YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, Fre

CVE-2026-82879 - DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets

CVE-2026-82878 - DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, d

CVE-2026-82877 - ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOA

CVE-2026-82876 - Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within

CVE-2026-82688 - A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1

CVE-2026-82680 - A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file

CVE-2026-82679 - A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unk

CVE-2026-82678 - A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the functio

CVE-2026-82677 - A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandle

CVE-2026-82671 - A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function Z

CVE-2026-82670 - A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTRO

CVE-2026-82669 - A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function

CVE-2026-49003 - Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing

CVE-2026-19873 - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count

CVE-2026-82875 - ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endp

CVE-2026-82874 - ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization speci

CVE-2026-82873 - ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/re

CVE-2026-82872 - ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated us

CVE-2026-82871 - ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing

CVE-2026-82870 - ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy ro

CVE-2026-82869 - ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_t

CVE-2026-82868 - @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin t

CVE-2026-82867 - @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugi

CVE-2026-82866 - @pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePd

CVE-2026-82865 - pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText p

CVE-2026-82864 - pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeS

CVE-2026-82863 - @hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, re

CVE-2026-82862 - Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing w

CVE-2026-82861 - @hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attac

CVE-2026-82860 - @hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence

CVE-2026-82859 - hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses f

CVE-2026-82858 - @hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient prov

CVE-2026-82857 - hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration

CVE-2026-82856 - @hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition ope

CVE-2026-82855 - @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudf

CVE-2026-82854 - Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.siz

CVE-2026-82853 - Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport na

CVE-2026-82668 - A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerab

CVE-2026-82667 - A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function Distribut

CVE-2026-82666 - A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of

CVE-2026-82665 - A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the funct

CVE-2026-82664 - A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknow

CVE-2026-82662 - Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUn

CVE-2026-82661 - Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment f

CVE-2026-82660 - Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during messa

CVE-2026-82659 - nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level

CVE-2026-81624 - Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how

CVE-2026-19410 - An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build pri

CVE-2024-58379 - nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsi

CVE-2026-82838 - The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could

CVE-2026-82631 - A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function

CVE-2026-82630 - A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager

CVE-2026-82629 - A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1d

CVE-2026-58301 - When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an

CVE-2026-82628 - A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function

CVE-2026-82625 - A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown

CVE-2026-82624 - A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some u

CVE-2026-82623 - A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the functio

CVE-2026-82622 - A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affe

CVE-2026-77013 - The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a req

CVE-2026-68951 - GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unau

CVE-2026-58574 - Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenti

CVE-2026-53620 - GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookm

CVE-2026-40465 - NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redi

CVE-2026-40464 - NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled inpu

CVE-2026-40463 - WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log File

CVE-2026-82621 - A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4c

CVE-2026-82620 - A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af40

CVE-2026-82619 - A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function m

CVE-2026-82618 - A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function s

CVE-2026-82616 - A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUpl

CVE-2026-82615 - A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affec

CVE-2026-82614 - A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affect

CVE-2026-82727 - Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoeni

CVE-2026-82726 - Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select t

CVE-2026-82725 - Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an at

CVE-2026-82724 - Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authoriza

CVE-2026-82613 - A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the f

CVE-2026-82612 - A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affe

CVE-2026-82611 - A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this

CVE-2026-82610 - A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is

CVE-2026-82609 - A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unkno

CVE-2026-82722 - Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any

CVE-2026-82681 - Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who

CVE-2026-82673 - Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-pr

CVE-2026-82608 - A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes o

CVE-2026-82607 - A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impact

CVE-2026-82605 - A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown

CVE-2026-81853 - Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a reco

CVE-2026-81852 - Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, public

CVE-2026-77850 - Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record

CVE-2026-75757 - Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin

CVE-2026-82604 - A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the compo

CVE-2026-82603 - A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the

CVE-2026-82602 - A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown

CVE-2026-82601 - A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.p

CVE-2026-82600 - A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown fun

CVE-2026-82580 - Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai dis

CVE-2026-82579 - Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an a

CVE-2026-82564 - Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller

CVE-2026-75760 - Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai dis

CVE-2026-82599 - A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function

CVE-2026-82598 - A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file se

CVE-2026-82597 - A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function

CVE-2026-81315 - Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass th

CVE-2026-77956 - Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a

CVE-2026-82596 - A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function L

CVE-2026-82595 - A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function s

CVE-2026-82594 - A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknow

CVE-2026-82593 - A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /bo

CVE-2026-82592 - A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the f

CVE-2026-82591 - A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impa

CVE-2026-82590 - A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm

CVE-2026-82589 - A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_h

CVE-2026-82588 - A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of

CVE-2026-56718 - AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in