Latest CVEs

Newest

CVE-2026-97635 High The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file…
CVE-2026-97631 Critical EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow…
CVE-2026-97328 High The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser…
CVE-2026-96889 High A flaw was found in librsvg.
CVE-2026-96778 High Pillow is a Python imaging library.
CVE-2026-96644 High Pillow is a Python imaging library.
CVE-2026-96643 High Pillow is a Python imaging library.
CVE-2026-96642 High Pillow is a Python imaging library.
CVE-2026-96641 Medium Pillow is a Python imaging library.
CVE-2026-96640 High Pillow is a Python imaging library.
CVE-2026-96639 Critical Pillow is a Python imaging library.
CVE-2026-96638 Medium Pillow is a Python imaging library.
CVE-2026-96637 High Pillow is a Python imaging library.
CVE-2026-96636 Medium Pillow is a Python imaging library.
CVE-2026-96398 Medium Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing.
CVE-2026-96392 Low Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor…
CVE-2026-96391 Unscored Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing.
CVE-2026-96390 Medium Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows…
CVE-2026-96388 Medium Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site…
CVE-2026-96387 Low Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login…
CVE-2026-96386 Medium Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing.
CVE-2026-96385 Medium Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API…
CVE-2026-96384 Low Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing.
CVE-2026-96382 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96380 Medium Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing.
CVE-2026-96379 Unscored Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96378 Medium Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal…
CVE-2026-96377 Medium Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows…
CVE-2026-96376 Medium Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in…
CVE-2026-96375 Medium Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM).
CVE-2026-96374 Medium Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery.
CVE-2026-96373 Low Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing.
CVE-2026-96372 Medium Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing.
CVE-2026-96371 Medium Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS.
CVE-2026-96370 Medium Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery.
CVE-2026-96369 Low Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting…
CVE-2026-96368 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96367 Medium Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS.
CVE-2026-96366 Medium Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing.
CVE-2026-96365 High Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive…
CVE-2026-96364 Medium Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse.
CVE-2026-96363 Unscored Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS.
CVE-2026-96362 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96361 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96360 Low Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96359 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96358 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96357 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-96356 Medium Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing.
CVE-2026-96355 Critical Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows…
CVE-2026-96293 Medium A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk…
CVE-2026-95721 Low No description provided
CVE-2026-95720 Medium No description provided
CVE-2026-95719 Medium No description provided
CVE-2026-95718 Medium No description provided
CVE-2026-95717 Medium No description provided
CVE-2026-95716 Medium No description provided
CVE-2026-95715 Medium No description provided
CVE-2026-95714 Medium No description provided
CVE-2026-95713 High No description provided
CVE-2026-95712 High No description provided
CVE-2026-95711 High No description provided
CVE-2026-95710 High No description provided
CVE-2026-95709 High No description provided
CVE-2026-95708 High No description provided
CVE-2026-95707 High No description provided
CVE-2026-95706 High No description provided
CVE-2026-95705 High No description provided
CVE-2026-95704 High No description provided
CVE-2026-94502 High In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds…
CVE-2026-94482 High Next.js is a React framework for building full-stack web applications.
CVE-2026-94423 Unscored Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks…
CVE-2026-94140 Unscored Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync…
CVE-2026-93471 High Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an…
CVE-2026-93336 High Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…
CVE-2026-92709 High Rsyslog is a rocket-fast system for log processing.
CVE-2026-91403 Critical Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of…
CVE-2026-89410 Medium In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak…
CVE-2026-89409 Medium In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series…
CVE-2026-89052 Medium A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal…
CVE-2026-88849 Low The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted…
CVE-2026-87955 Medium Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing.
CVE-2026-87954 Medium Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing.
CVE-2026-87953 Low Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side…
CVE-2026-87952 Low Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote…
CVE-2026-87951 Low Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows…
CVE-2026-87950 Medium Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded…
CVE-2026-87949 Low Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-87948 Low Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-87947 Medium Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows…
CVE-2026-87946 Medium Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force.
CVE-2026-87945 Medium URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider…
CVE-2026-87944 Medium Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the…
CVE-2026-87943 Medium Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing.
CVE-2026-87942 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-87941 Unscored Vulnerability in Drupal Patreon.
CVE-2026-87940 Medium Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting…
CVE-2026-87939 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-87938 Unscored Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal…
CVE-2026-87937 Medium URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System…
CVE-2026-87936 Medium Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal…
CVE-2026-86696 High Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an…
CVE-2026-85080 Medium In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write…
CVE-2026-85079 High In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write…
CVE-2026-84924 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-84923 Medium Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS…
CVE-2026-84921 Medium Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing.
CVE-2026-84920 Medium Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.
CVE-2026-84919 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-84918 Low Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows…
CVE-2026-84917 Medium Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing.
CVE-2026-84916 Low Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing.
CVE-2026-84915 Medium Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-84914 Medium Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing.
CVE-2026-84913 Medium Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing.
CVE-2026-84912 Medium Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.
CVE-2026-84911 Low Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal…
CVE-2026-84910 Medium Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing.
CVE-2026-81163 Medium Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media…
CVE-2026-79956 High No description provided
CVE-2026-79955 High No description provided
CVE-2026-79895 High No description provided
CVE-2026-79894 High No description provided
CVE-2026-79893 High No description provided
CVE-2026-79892 High No description provided
CVE-2026-79891 High No description provided
CVE-2026-79890 High No description provided
CVE-2026-79889 High No description provided
CVE-2026-79888 High No description provided
CVE-2026-79887 High No description provided
CVE-2026-79886 High No description provided
CVE-2026-79885 High No description provided
CVE-2026-79884 High No description provided
CVE-2026-79883 High No description provided
CVE-2026-79882 High No description provided
CVE-2026-79881 High No description provided
CVE-2026-79880 High No description provided
CVE-2026-79879 High No description provided
CVE-2026-79878 High No description provided
CVE-2026-79877 High No description provided
CVE-2026-79876 Critical No description provided
CVE-2026-79875 Critical No description provided
CVE-2026-79874 Critical No description provided
CVE-2026-79873 Critical No description provided
CVE-2026-79872 Critical No description provided
CVE-2026-79871 Critical No description provided
CVE-2026-79870 Critical No description provided
CVE-2026-79869 Critical No description provided
CVE-2026-79868 Critical No description provided
CVE-2026-79867 Critical No description provided
CVE-2026-79866 Critical No description provided
CVE-2026-79865 Critical No description provided
CVE-2026-79864 Critical No description provided
CVE-2026-79863 Critical No description provided
CVE-2026-79862 Critical No description provided
CVE-2026-79861 Critical No description provided
CVE-2026-79860 Critical No description provided
CVE-2026-79859 Critical No description provided
CVE-2026-79858 Critical No description provided
CVE-2026-79857 Critical No description provided
CVE-2026-79856 Critical No description provided
CVE-2026-79855 Critical No description provided
CVE-2026-79854 Critical No description provided
CVE-2026-79853 Critical No description provided
CVE-2026-79852 Critical No description provided
CVE-2026-79851 Critical No description provided
CVE-2026-79850 Critical No description provided
CVE-2026-79849 Critical No description provided
CVE-2026-79848 Critical No description provided
CVE-2026-79847 Critical No description provided
CVE-2026-79846 Critical No description provided
CVE-2026-79844 Critical No description provided
CVE-2026-78846 Unscored AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.
CVE-2026-78801 Unscored An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a…
CVE-2026-78392 Medium The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting…
CVE-2026-77157 Medium ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from…
CVE-2026-77156 Medium Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS…
CVE-2026-76531 Critical As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76530 High As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76529 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76528 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76527 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76526 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76408 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76407 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76406 Medium In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from…
CVE-2026-76308 Medium In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition…
CVE-2026-76307 High In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could…
CVE-2026-76306 High In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the…
CVE-2026-76305 Medium In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view…
CVE-2026-76304 Medium In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit…
CVE-2026-76303 Medium In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store…
CVE-2026-76302 Critical As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76301 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76300 Unscored As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76299 Critical As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a…
CVE-2026-76298 High In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power"…
CVE-2026-76297 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick…
CVE-2026-76296 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the…
CVE-2026-76295 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions…
CVE-2026-76294 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the…
CVE-2026-76293 High In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…
CVE-2026-76292 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions…
CVE-2026-76291 High In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…
CVE-2026-76290 High In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated…
CVE-2026-76289 Medium In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the…
CVE-2026-76288 High In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send…
CVE-2026-76287 Medium In Splunk Enterprise versions below 10.4.4, a user that holds a role with the…
CVE-2026-75508 High GraphQL-core is a Python port of the GraphQL.js reference implementation.
CVE-2026-75507 High GraphQL-core is a Python port of the GraphQL.js reference implementation.
CVE-2026-67597 Unscored Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66282 Medium In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive…
CVE-2026-66281 Medium In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with…
CVE-2026-66279 High In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings…
CVE-2026-63430 Medium ammonia is a Rust library for repairing and securing untrusted HTML.
CVE-2026-61791 High OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and…
CVE-2026-54532 Medium CloudPirates Open Source Helm Charts is a collection of Helm charts.
CVE-2026-54238 Low Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets.
CVE-2026-51954 Unscored An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a…
CVE-2026-21812 Low HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information…
CVE-2026-21811 Low HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving…
CVE-2026-16648 Low Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote…
CVE-2026-16477 High CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable…
CVE-2026-16255 Medium GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before…
CVE-2026-15723 High GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before…
CVE-2026-14288 Low GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before…
CVE-2026-13599 Medium Missing authentication for critical function vulnerability in ABB Ability Edgenius.
CVE-2026-13411 Medium Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import…
CVE-2026-13319 Medium GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before…
CVE-2026-12664 Medium GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before…
CVE-2026-115519 Low Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an…
CVE-2026-115517 Medium Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an…
CVE-2026-115516 Medium An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME…
CVE-2026-115513 Medium OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged…
CVE-2026-115509 Low Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts…
CVE-2026-115508 High Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the…
CVE-2026-115507 Medium Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in…
CVE-2026-115506 High libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in…
CVE-2026-115505 High libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that…
CVE-2026-115504 High CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts…
CVE-2026-115503 Medium Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in…
CVE-2026-115502 Medium A missing authorization check allows anyone having access to a "link without login" for a DataApp to list…
CVE-2026-115496 Medium Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5…
CVE-2026-115494 Medium A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0…
CVE-2026-115482 High In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number…
CVE-2026-115454 Medium An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub…
CVE-2026-115453 High Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of…
CVE-2026-115450 High External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of…
CVE-2026-115419 High The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK…
CVE-2026-115417 High Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before…
CVE-2026-115416 Medium Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an…
CVE-2026-115414 High OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can…
CVE-2026-115411 Medium crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine…
CVE-2026-115400 Medium crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database…
CVE-2026-115398 Medium Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used…
CVE-2026-115397 Medium Ghidra before 12.2 contains a resource allocation without limits vulnerability in…
CVE-2026-115396 Medium Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in…
CVE-2026-115395 Medium Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in…
CVE-2026-115394 Medium Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that…
CVE-2026-115393 Low Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a…
CVE-2026-115392 High Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a…
CVE-2026-115391 Medium Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation…
CVE-2026-115390 Medium Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled…
CVE-2026-115389 Low Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host…
CVE-2026-115388 Medium wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not…
CVE-2026-115387 Medium Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service…
CVE-2026-115386 Low Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure…
CVE-2026-115385 Medium Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the…
CVE-2026-115384 Critical Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that…
CVE-2026-115383 Medium Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that…
CVE-2026-115382 Medium Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its…
CVE-2026-115381 Medium Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory…
CVE-2026-115380 Medium Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service…
CVE-2026-115379 Medium Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that…
CVE-2026-115378 Medium Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write…
CVE-2026-115377 Critical Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write…
CVE-2026-115376 High Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…
CVE-2026-115375 Critical Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients…
CVE-2026-115374 High Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3…
CVE-2026-115373 High Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization…
CVE-2026-115372 Critical Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to…
CVE-2026-115371 High Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization…
CVE-2026-115370 Medium Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass…
CVE-2026-115369 Low OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs…
CVE-2026-115366 Low OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged…
CVE-2026-115365 High OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache…
CVE-2026-115364 Low OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy…
CVE-2026-115363 Low OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that…
CVE-2026-115362 Low OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth…
CVE-2026-115361 Low OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on…
CVE-2026-115360 Medium OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects…
CVE-2026-115359 Medium OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role…
CVE-2026-115358 Low OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak…
CVE-2026-115357 Low OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated…
CVE-2026-115356 Medium OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes…
CVE-2026-115355 High Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers…
CVE-2026-115354 High Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows…
CVE-2026-115353 Critical Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows…
CVE-2026-115352 High Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows…
CVE-2026-115351 Medium Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling…