CVE-2026-106624 - ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability

CVE-2026-106622 - ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in pr

CVE-2026-105899 - ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that coul

CVE-2026-82542 - A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formI

CVE-2026-82456 - argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions withou

CVE-2026-54745 - Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

CVE-2026-82222 - Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injec

CVE-2026-81735 - startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::

CVE-2026-81096 - ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that req

CVE-2026-77554 - A malicious actor with access to the network could exploit an Improper Input Validation vulnerabilit