CVE-2026-40017 - An attacker that can send mail to a user can craft a message header whose values are chosen to colli

CVE-2026-40015 - An attacker that has valid credentials can open many connections to the imap-hibernate service and s

CVE-2026-40014 - An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD comma

CVE-2026-40013 - An attacker that has valid credentials can submit a Sieve script containing an extreme numeric liter

CVE-2026-33607 - An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degr

CVE-2026-33606 - Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands wh

CVE-2026-33605 - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed com

CVE-2026-33604 - An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submissio

CVE-2026-33263 - When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with ep

CVE-2026-27852 - An attacker that can send mail to a user can craft a message whose headers contain a very large numb

CVE-2026-18918 - In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization checks can be bypassed when the 2

CVE-2026-18393 - A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-alloc

CVE-2026-9548 - An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilit

CVE-2026-9491 - A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22

CVE-2026-82123 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-80724 - In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only

CVE-2026-80723 - In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB w

CVE-2026-80722 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate indivi

CVE-2026-80721 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangl

CVE-2026-80720 - In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set f

CVE-2026-80719 - In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch upda

CVE-2026-80718 - In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overfl

CVE-2026-80717 - In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indic

CVE-2026-80716 - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain wa

CVE-2026-80715 - In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize()

CVE-2026-80714 - In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-pack

CVE-2026-80713 - In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restric

CVE-2026-80712 - In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the

CVE-2026-80711 - In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle

CVE-2026-80710 - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized forma

CVE-2026-80709 - In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain v

CVE-2026-80708 - In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem sc

CVE-2026-80707 - In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_se

CVE-2026-80706 - In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): valid

CVE-2026-80705 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21

CVE-2026-80704 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper con

CVE-2026-80703 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authori

CVE-2026-80702 - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_di

CVE-2026-80701 - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size

CVE-2026-80700 - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external B

CVE-2026-80699 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-

CVE-2026-80698 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double fre

CVE-2026-80697 - In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for

CVE-2026-80696 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading th

CVE-2026-80695 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (sht3x) Fix unaligned ac

CVE-2026-80694 - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pas

CVE-2026-80693 - In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector re

CVE-2026-80692 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn

CVE-2026-80691 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong

CVE-2026-80690 - In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba

CVE-2026-80689 - In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL che

CVE-2026-80688 - In the Linux kernel, the following vulnerability has been resolved: riscv: drop __init from vec_che

CVE-2026-80687 - In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igr

CVE-2026-80686 - In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn

CVE-2026-80685 - In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 fo

CVE-2026-80684 - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL derefe

CVE-2026-80683 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket

CVE-2026-80682 - In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignmen

CVE-2026-80681 - In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header afte

CVE-2026-80680 - In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callba

CVE-2026-80679 - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL p

CVE-2026-80678 - In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registratio

CVE-2026-80677 - In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() fo

CVE-2026-80676 - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic

CVE-2026-80675 - In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive me

CVE-2026-80674 - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribu

CVE-2026-80673 - In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attr

CVE-2026-80672 - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of res

CVE-2026-80671 - In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid()

CVE-2026-80670 - In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_c

CVE-2026-80669 - In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_sessio

CVE-2026-80668 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect:

CVE-2026-80667 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missi

CVE-2026-80666 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: sco: Fix a race cond

CVE-2026-80665 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if k

CVE-2026-80664 - In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsup

CVE-2026-80663 - In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-sel

CVE-2026-80662 - In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to

CVE-2026-80661 - In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dere

CVE-2026-80660 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs d

CVE-2026-80659 - In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until

CVE-2026-80658 - In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Fix null-p

CVE-2026-80657 - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management

CVE-2026-80656 - In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for

CVE-2026-80655 - In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition

CVE-2026-80654 - In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free

CVE-2026-80653 - In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destr

CVE-2026-80652 - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length

CVE-2026-80651 - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail

CVE-2026-80650 - In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF

CVE-2026-80649 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in

CVE-2026-80648 - In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL che

CVE-2026-80647 - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll c

CVE-2026-80646 - In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NU

CVE-2026-80645 - In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad d

CVE-2026-80644 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG_ON an invalid

CVE-2026-80643 - In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due

CVE-2026-80642 - In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count inc

CVE-2026-80641 - In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right

CVE-2026-80640 - In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic

CVE-2026-80639 - In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic

CVE-2026-80638 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write

CVE-2026-80637 - In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unalig

CVE-2026-80636 - In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct

CVE-2026-80635 - In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read fro

CVE-2026-80634 - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num

CVE-2026-80633 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dma_resv lock bef

CVE-2026-80632 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL po

CVE-2026-80631 - In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed s

CVE-2026-80630 - In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not

CVE-2026-80629 - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of

CVE-2026-80628 - In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq

CVE-2026-80627 - In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds wri

CVE-2026-80626 - In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count

CVE-2026-80625 - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bo

CVE-2026-80624 - In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firm

CVE-2026-80623 - In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save sta

CVE-2026-80622 - In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free

CVE-2026-80621 - In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes

CVE-2026-80620 - In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X re

CVE-2026-80619 - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in

CVE-2026-80618 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin

CVE-2026-80617 - In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time

CVE-2026-80616 - In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_

CVE-2026-80615 - In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-po

CVE-2026-80614 - In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer der

CVE-2026-80613 - In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enab

CVE-2026-80612 - In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadat

CVE-2026-80611 - In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI

CVE-2026-80610 - In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divid

CVE-2026-80609 - In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check f

CVE-2026-80608 - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain

CVE-2026-80607 - In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_

CVE-2026-80606 - In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_l

CVE-2026-80605 - In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL poin

CVE-2026-80604 - In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_

CVE-2026-80603 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fi

CVE-2026-80602 - In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel ad

CVE-2026-80601 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire etherne

CVE-2026-80600 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw

CVE-2026-80599 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessi

CVE-2026-80598 - In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read i

CVE-2026-80597 - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL

CVE-2026-80596 - In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sy

CVE-2026-80595 - In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response l

CVE-2026-80594 - In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential

CVE-2026-80593 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check pac

CVE-2026-80592 - In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early

CVE-2026-80591 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of

CVE-2026-80590 - In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state fr

CVE-2026-79996 - The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability chec

CVE-2026-79995 - The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account w

CVE-2026-79706 - The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request bef

CVE-2026-79615 - The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when r

CVE-2026-78238 - SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on t

CVE-2026-78032 - SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed

CVE-2026-77838 - SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on t

CVE-2026-77701 - The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person reques

CVE-2026-76581 - The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions u

CVE-2026-73827 - SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on t

CVE-2026-6286 - The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stor

CVE-2026-5097 - The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in

CVE-2026-4246 - The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' pa

CVE-2026-40541 - An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilit

CVE-2026-19423 - The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection whe

CVE-2026-19084 - The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when cr

CVE-2026-14567 - The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory sea

CVE-2026-14558 - The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions

CVE-2026-12514 - The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do

CVE-2026-12513 - The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do

CVE-2026-82090 - Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  Jav

CVE-2026-82089 - The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS bec

CVE-2026-82082 - NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remot

CVE-2026-82081 - wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during

CVE-2026-77365 - The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin f

CVE-2026-76053 - The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulner

CVE-2026-3129 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `<

CVE-2026-18983 - The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site S

CVE-2026-18978 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Co

CVE-2026-18324 - The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln

CVE-2026-16759 - The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Co

CVE-2026-16654 - The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'si

CVE-2026-15798 - The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Bl

CVE-2026-78618 - A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multi

CVE-2026-78617 - WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockou

CVE-2026-78616 - A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate c

CVE-2026-78615 - A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page al

CVE-2026-78614 - WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report featu

CVE-2026-78613 - WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature

CVE-2026-78612 - WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report f

CVE-2026-78610 - WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF prot

CVE-2026-78500 - A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test c

CVE-2026-78499 - A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuratio

CVE-2026-78498 - A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configurat

CVE-2026-78495 - A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Tes

CVE-2026-78195 - Rejected reason: Rejecting as a duplicate of CVE-2026-78047

CVE-2026-78174 - WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagno

CVE-2026-78103 - WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The serve

CVE-2026-78047 - A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature

CVE-2026-78011 - An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauth

CVE-2026-78010 - A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a rem

CVE-2026-78009 - An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unaut

CVE-2026-78008 - A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authentica

CVE-2026-61802 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-61800 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-38822 - In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the au

CVE-2026-38821 - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenti

CVE-2026-38820 - openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injec

CVE-2026-38819 - Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive port

CVE-2026-19318 - A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remo

CVE-2026-19317 - An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unaut

CVE-2026-19316 - A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticat

CVE-2026-19315 - A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthe

CVE-2026-19314 - An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauth

CVE-2026-19313 - An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenti

CVE-2026-13108 - WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high v

CVE-2026-13086 - A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecate

CVE-2026-82072 - Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut

CVE-2026-81851 - A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated adm

CVE-2026-81848 - A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element

CVE-2026-81847 - A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the

CVE-2026-81845 - A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the fun

CVE-2026-81837 - A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.reso

CVE-2026-81836 - A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown

CVE-2026-81835 - A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the fun

CVE-2026-80179 - A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JW

CVE-2026-78239 - Xiiaozet LK100W exposes a critical management function that can be invoked without authentication,

CVE-2026-78037 - Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. A

CVE-2026-77977 - Ebyte gateway product's vendor configuration utility does not require authentication before allowin

CVE-2026-77358 - cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enab

CVE-2026-77341 - cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer

CVE-2026-76945 - The affected Ebyte device relies on client-managed authentication tokens without sufficient server-

CVE-2026-76943 - Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allo

CVE-2026-76940 - The affected Ebyte device does not restrict repeated authentication attempts through rate limiting

CVE-2026-76179 - An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway produ

CVE-2026-76060 - An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionalit

CVE-2026-75814 - The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the

CVE-2026-75813 - Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthor

CVE-2026-75548 - The affected Ebyte device web management interface does not restrict the interface from being rende

CVE-2026-75419 - go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer() fun

CVE-2026-75418 - A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.

CVE-2026-75417 - A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() func

CVE-2026-75339 - The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logge

CVE-2026-75337 - The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to pa

CVE-2026-73839 - Administrative credentials may be exposed in plaintext within the Ebyte device's management interfa

CVE-2026-73809 - A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway pro

CVE-2026-73125 - Ebyte device web management interface does not consistently enforce authentication before granting

CVE-2026-71396 - Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automati

CVE-2026-71187 - The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticat

CVE-2026-69658 - MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information t