NVD公開月 2026-07
9,919 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2011-10043 | Deferred | 未確認 | CWE-145 | Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify ar |
| CVE-2016-20096 | Deferred | 未確認 | CWE-89 | Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipul |
| CVE-2019-25764 | Deferred | 未確認 | CWE-782 | **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitr |
| CVE-2021-27137 | Analyzed | 掲載 | CWE-121 | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a re |
| CVE-2021-32084 | Analyzed | 未確認 | CWE-284 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are |
| CVE-2021-32085 | Analyzed | 未確認 | CWE-798 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of bo |
| CVE-2021-32086 | Analyzed | 未確認 | CWE-321 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. (This key |
| CVE-2021-32087 | Analyzed | 未確認 | CWE-798 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is p |
| CVE-2021-32088 | Analyzed | 未確認 | CWE-384 | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This prot |
| CVE-2022-4989 | Deferred | 未確認 | CWE-1284 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via crafted |
| CVE-2022-4990 | Deferred | 未確認 | CWE-1284 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restri |
| CVE-2022-4994 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulator_pio_in Use __emulator_pio_in() directly for fast PIO instead of bouncing | |
| CVE-2022-50973 | Deferred | 未確認 | CWE-434 | Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary |
| CVE-2023-37507 | Analyzed | 未確認 | CWE-497 | HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed. |
| CVE-2023-37508 | Analyzed | 未確認 | CWE-79 | HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present. |
| CVE-2023-49899 | Deferred | 未確認 | CWE-346 | An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel. |
| CVE-2023-49900 | Deferred | 未確認 | CWE-78 | An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command. |
| CVE-2023-54366 | Analyzed | 未確認 | CWE-276 | SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attack |
| CVE-2024-1248 | Analyzed | 未確認 | CWE-298 | The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user |
| CVE-2024-14037 | Deferred | 未確認 | CWE-434 | Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtF |
| CVE-2024-14040 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur at various points in the network |
| CVE-2024-14041 | Analyzed | 未確認 | CWE-208 | In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYSTALS-Kyber) routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decode |
| CVE-2024-23564 | Deferred | 未確認 | CWE-326 | HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own |
| CVE-2024-23565 | Deferred | 未確認 | CWE-799 | HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a huma |
| CVE-2024-23566 | Deferred | 未確認 | CWE-804 | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated att |
| CVE-2024-23567 | Deferred | 未確認 | CWE-804 | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed |
| CVE-2024-23568 | Deferred | 未確認 | CWE-200 | HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. Displaying version information of software cou |
| CVE-2024-23569 | Deferred | 未確認 | CWE-692 | HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header |
| CVE-2024-23570 | Deferred | 未確認 | CWE-200 | HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in an iFrame on his mali |
| CVE-2024-23571 | Deferred | 未確認 | CWE-525 | HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be |
| CVE-2024-23572 | Deferred | 未確認 | CWE-614 | HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of |
| CVE-2024-23573 | Deferred | 未確認 | CWE-425 | HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implem |
| CVE-2024-23574 | Deferred | 未確認 | CWE-204 | HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in the system. Use renum |
| CVE-2024-23575 | Deferred | 未確認 | CWE-209 | HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the |
| CVE-2024-23577 | Deferred | 未確認 | CWE-20 | HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application |
| CVE-2024-23578 | Deferred | 未確認 | CWE-942 | HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain ( |
| CVE-2024-25039 | Analyzed | 未確認 | CWE-400 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow |
| CVE-2024-32385 | Deferred | 未確認 | CWE-200 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a boardID and revisionID components |
| CVE-2024-32386 | Deferred | 未確認 | CWE-22 | Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the SNMP update m |
| CVE-2024-32387 | Deferred | 未確認 | CWE-200, CWE-798 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component. |
| CVE-2024-32389 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs compo |
| CVE-2024-34268 | Deferred | 未確認 | CWE-306 | EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows a |
| CVE-2024-40683 | Analyzed | 未確認 | CWE-613 | IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not in |
| CVE-2024-42214 | Deferred | 未確認 | CWE-692 | HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web |
| CVE-2024-51311 | Deferred | 未確認 | CWE-121 | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList. |
| CVE-2024-51312 | Deferred | 未確認 | CWE-121 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg. |
| CVE-2024-51313 | Deferred | 未確認 | CWE-121 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg. |
| CVE-2024-51314 | Deferred | 未確認 | CWE-121 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg. |
| CVE-2024-51315 | Deferred | 未確認 | CWE-121 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName |
| CVE-2024-51316 | Deferred | 未確認 | CWE-400 | The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevName |
| CVE-2024-5300 | Awaiting Analysis | 未確認 | CWE-212 | An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /e |
| CVE-2024-56141 | Deferred | 未確認 | CWE-329 | Minosoft is an open-source, multi-version Minecraft Java Edition client written in Kotlin. Starting in commit f1ae30e2b046a490026a8413b075685deb795122, the CryptManager encryption |
| CVE-2024-58023 | Awaiting Analysis | 未確認 | CWE-312 | Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information. |
| CVE-2024-58330 | Awaiting Analysis | 未確認 | CWE-284 | A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data. |
| CVE-2024-58352 | Deferred | 未確認 | CWE-564 | Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL synt |
| CVE-2024-58353 | Deferred | 未確認 | CWE-80 | Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting (XSS) on the publicly accessible single booking view (e.g., /booking/<id>). Booking |
| CVE-2024-58354 | Deferred | 未確認 | CWE-77 | cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Actions workflows. The workflow pr.yml uses the pull_request_tar |
| CVE-2024-58355 | Deferred | 未確認 | CWE-80 | Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view (e.g., https://app.cal.com/booking/<id>) renders booki |
| CVE-2024-58356 | Analyzed | 未確認 | CWE-276 | SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definiti |
| CVE-2024-58357 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Auth |
| CVE-2024-58358 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers ca |
| CVE-2024-58359 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY rand() clause. Authorized clients can execute queries with OR |
| CVE-2024-58360 | Deferred | 未確認 | CWE-1173 | stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create |
| CVE-2024-58361 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execut |
| CVE-2024-58362 | Analyzed | 未確認 | CWE-75 | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API without recursively validating it for non |
| CVE-2024-58363 | Analyzed | 未確認 | CWE-287 | SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches databases using the USE clause or use method. Attackers with an authenticated session ca |
| CVE-2024-58364 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized cl |
| CVE-2024-58365 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can cr |
| CVE-2024-58366 | Analyzed | 未確認 | CWE-134 | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supp |
| CVE-2024-58367 | Analyzed | 未確認 | CWE-285 | SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field valu |
| CVE-2024-58368 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafte |
| CVE-2024-58369 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can in |
| CVE-2024-58370 | Analyzed | 未確認 | CWE-674 | SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attack |
| CVE-2024-6228 | Deferred | 未確認 | The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user-supplied value before using it to build a server-side file inclusion path, allo | |
| CVE-2024-7708 | Analyzed | 未確認 | CWE-400, CWE-401 | For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the |
| CVE-2025-0152 | Analyzed | 未確認 | CWE-79 | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vulnerability |
| CVE-2025-10656 | Deferred | 未確認 | CWE-863 | The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.37 vi |
| CVE-2025-11698 | Awaiting Analysis | 未確認 | CWE-120 | A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid |
| CVE-2025-11977 | Deferred | 未確認 | CWE-98 | The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin for WordPress is vulnerable to Local File Inclusion in all ver |
| CVE-2025-12011 | Awaiting Analysis | 未確認 | CWE-120 | A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major |
| CVE-2025-12012 | Awaiting Analysis | 未確認 | CWE-120 | A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing th |
| CVE-2025-12127 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2025-12506 | Analyzed | 未確認 | CWE-706 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have |
| CVE-2025-12799 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded U |
| CVE-2025-13146 | Deferred | 未確認 | CWE-94 | The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the |
| CVE-2025-13475 | Analyzed | 未確認 | CWE-288 | In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific SaaS |
| CVE-2025-13968 | Deferred | 未確認 | CWE-79 | The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in the [starboard-suite-lightbox] shortcode in |
| CVE-2025-14562 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2025-14785 | Deferred | 未確認 | CWE-79 | The Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the |
| CVE-2025-15646 | Deferred | 未確認 | CWE-125, CWE-843 | HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element was added to libgumbo 0.10.0 in 2015, but the walk_tree funct |
| CVE-2025-15662 | Deferred | 未確認 | CWE-918 | The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce |
| CVE-2025-15665 | Deferred | 未確認 | The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the fr | |
| CVE-2025-15666 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file c |
| CVE-2025-15667 | Deferred | 未確認 | CWE-119, CWE-415 | A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gf_isom_nalu_sample_rewrite of the file src/isomedia/avc_ext.c of the component MP4Box |
| CVE-2025-15668 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/isomedia/box_code_base.c of the component MP4Box. Such manipu |
| CVE-2025-23350 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input |
| CVE-2025-23351 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input |
| CVE-2025-27462 | Deferred | 未確認 | CWE-276 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities |
| CVE-2025-27463 | Deferred | 未確認 | CWE-276 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to |
| CVE-2025-27464 | Deferred | 未確認 | CWE-276 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to |
| CVE-2025-30007 | Analyzed | 未確認 | CWE-78 | HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting |
| CVE-2025-30008 | Analyzed | 未確認 | CWE-79 | HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary HTML by creating a DNS record with a do |
| CVE-2025-3110 | Analyzed | 未確認 | CWE-444 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behi |
| CVE-2025-32781 | Deferred | 未確認 | CWE-639, CWE-862 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and nam |
| CVE-2025-36298 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 thr |
| CVE-2025-36374 | Awaiting Analysis | 未確認 | CWE-611 | IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitiv |
| CVE-2025-36431 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an au |
| CVE-2025-40945 | Deferred | 未確認 | CWE-426 | A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D ( |
| CVE-2025-43892 | Modified | 未確認 | CWE-126 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions |
| CVE-2025-44089 | Deferred | 未確認 | CWE-693 | An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. |
| CVE-2025-44090 | Deferred | 未確認 | CWE-693 | An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. |
| CVE-2025-45422 | Deferred | 未確認 | CWE-284 | Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port forwarding rules. |
| CVE-2025-45868 | Deferred | 未確認 | CWE-89 | LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonServlet component, allowing authenticated user to manipulate SQL queries via crafte |
| CVE-2025-45869 | Deferred | 未確認 | CWE-918 | LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet by |
| CVE-2025-45870 | Deferred | 未確認 | CWE-22 | LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion (LFI) in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal |
| CVE-2025-5017 | Deferred | 未確認 | CWE-89 | The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due t |
| CVE-2025-50324 | Deferred | 未確認 | CWE-693 | An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component. |
| CVE-2025-50325 | Deferred | 未確認 | CWE-693 | BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected inst |
| CVE-2025-50327 | Deferred | 未確認 | CWE-693 | An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection me |
| CVE-2025-50329 | Deferred | 未確認 | CWE-693 | An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe. |
| CVE-2025-50330 | Deferred | 未確認 | CWE-693 | An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe. |
| CVE-2025-50455 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitiz |
| CVE-2025-51677 | Deferred | 未確認 | CWE-116 | An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and the netlist of the or1200 cpu output port can lead to unexpected behavior. |
| CVE-2025-51678 | Deferred | 未確認 | CWE-119, CWE-704 | An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior. |
| CVE-2025-51684 | Deferred | 未確認 | CWE-79 | CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting (XSS). The application does not sanitize untrusted data received via window.postMessage before injecting it into the |
| CVE-2025-53379 | Analyzed | 未確認 | CWE-125 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve s |
| CVE-2025-53827 | Deferred | 未確認 | CWE-749 | ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 |
| CVE-2025-53828 | Deferred | 未確認 | CWE-918 | SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to |
| CVE-2025-53829 | Deferred | 未確認 | CWE-23 | ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path travers |
| CVE-2025-53830 | Deferred | 未確認 | CWE-918 | Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulne |
| CVE-2025-53831 | Deferred | 未確認 | CWE-79 | DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version 1.0 |
| CVE-2025-56361 | Analyzed | 未確認 | CWE-617 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControl |
| CVE-2025-56362 | Analyzed | 未確認 | CWE-617 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a Move |
| CVE-2025-56363 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, A |
| CVE-2025-56364 | Analyzed | 未確認 | CWE-457 | A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first check |
| CVE-2025-56365 | Analyzed | 未確認 | CWE-617 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent |
| CVE-2025-58146 | Deferred | 未確認 | CWE-20 | There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notification using the unsanitised input. This causes the datab |
| CVE-2025-58151 | Deferred | 未確認 | CWE-367 | varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. |
| CVE-2025-58902 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions. |
| CVE-2025-59172 | Deferred | 未確認 | CWE-78 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as |
| CVE-2025-59177 | Deferred | 未確認 | CWE-209 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to r |
| CVE-2025-59178 | Deferred | 未確認 | CWE-497 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to e |
| CVE-2025-59180 | Deferred | 未確認 | CWE-798 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge |
| CVE-2025-59181 | Deferred | 未確認 | CWE-35 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change director |
| CVE-2025-59615 | Analyzed | 未確認 | CWE-416 | Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization. |
| CVE-2025-59616 | Analyzed | 未確認 | CWE-416 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory. |
| CVE-2025-59617 | Analyzed | 未確認 | CWE-416 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. |
| CVE-2025-59866 | Awaiting Analysis | 未確認 | CWE-732 | The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-adm |
| CVE-2025-60357 | Analyzed | 未確認 | CWE-943 | AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint. |
| CVE-2025-60835 | Deferred | 未確認 | CWE-35 | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. |
| CVE-2025-60931 | Deferred | 未確認 | CWE-639 | An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compe |
| CVE-2025-62347 | Deferred | 未確認 | CWE-20 | HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implemen |
| CVE-2025-62675 | Modified | 未確認 | CWE-113 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 |
| CVE-2025-62826 | Modified | 未確認 | CWE-113 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 |
| CVE-2025-63579 | Deferred | 未確認 | CWE-200, CWE-284, CWE-311, CWE-326 | Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed wit |
| CVE-2025-63913 | Deferred | 未確認 | CWE-400 | An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' fun |
| CVE-2025-65336 | Deferred | 未確認 | CWE-89 | Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php. |
| CVE-2025-65337 | Deferred | 未確認 | CWE-79 | Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field. |
| CVE-2025-65340 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. |
| CVE-2025-65341 | Deferred | 未確認 | CWE-79 | Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php. |
| CVE-2025-65342 | Deferred | 未確認 | CWE-79 | code-projects Blood System 1.0 is vulnerable to Cross Site Scripting (XSS) in /don.php via the city field. |
| CVE-2025-65720 | Awaiting Analysis | 未確認 | CWE-77 | An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page. |
| CVE-2025-66076 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6.2 versions. |
| CVE-2025-66390 | Awaiting Analysis | 未確認 | CWE-284 | In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant A, an attacker can reuse the registrati |
| CVE-2025-67403 | Deferred | 未確認 | CWE-89 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name. |
| CVE-2025-67404 | Deferred | 未確認 | CWE-89 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class. |
| CVE-2025-67405 | Deferred | 未確認 | CWE-89 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password. |
| CVE-2025-67406 | Deferred | 未確認 | CWE-89 | https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). The component is: control/activa |
| CVE-2025-67407 | Deferred | 未確認 | CWE-89 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_class. |
| CVE-2025-67408 | Deferred | 未確認 | CWE-89 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status. |
| CVE-2025-67649 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting fun |
| CVE-2025-67650 | Deferred | 未確認 | CWE-89 | An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters |
| CVE-2025-67651 | Deferred | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker |
| CVE-2025-6784 | Deferred | 未確認 | CWE-77 | The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.3.5 via the 'code-engine' shortcode. This is due to the plugin n |
| CVE-2025-68081 | Deferred | 未確認 | CWE-79 | Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions. |
| CVE-2025-68640 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint Token) to enumerate devices and remove offline devices from a |
| CVE-2025-69094 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. |
| CVE-2025-69132 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. |
| CVE-2025-69133 | Deferred | 未確認 | CWE-98 | Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions. |
| CVE-2025-69134 | Deferred | 未確認 | CWE-862 | Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. |
| CVE-2025-69152 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2 versions. |
| CVE-2025-69153 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions. |
| CVE-2025-69154 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions. |
| CVE-2025-69155 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions. |
| CVE-2025-69156 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress Theme <= 5.4 versions. |
| CVE-2025-69930 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print_membership_card.php?id=1. |
| CVE-2025-69931 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1. |
| CVE-2025-69933 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1. |
| CVE-2025-69934 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1. |
| CVE-2025-69935 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue_report.php via the fromDate parameter. |
| CVE-2025-69936 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1. |
| CVE-2025-69937 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id. |
| CVE-2025-69938 | Deferred | 未確認 | CWE-89 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType. |
| CVE-2025-69941 | Deferred | 未確認 | CWE-89 | SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1. |
| CVE-2025-69942 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1. |
| CVE-2025-69943 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid. |
| CVE-2025-69944 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter. |
| CVE-2025-69945 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1. |
| CVE-2025-69946 | Deferred | 未確認 | CWE-89 | SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id. |
| CVE-2025-69947 | Deferred | 未確認 | CWE-89 | SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1. |
| CVE-2025-69948 | Deferred | 未確認 | CWE-89 | SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. |
| CVE-2025-69949 | Deferred | 未確認 | CWE-89 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email. |
| CVE-2025-70796 | Deferred | 未確認 | CWE-22 | An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated at |
| CVE-2025-71342 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. Attackers can embed undetected code in pickle files that exec |
| CVE-2025-71343 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce method. Attackers can craft malici |
| CVE-2025-71345 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd_prof function. Attackers can embed undetected code in pickl |
| CVE-2025-71347 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attackers to bypass security checks. R |
| CVE-2025-71353 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with |
| CVE-2025-71356 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files. Attackers can embed und |
| CVE-2025-71359 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code execution. Attackers |
| CVE-2025-71360 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce methods. Attackers can embed undetected code in pickle files tha |
| CVE-2025-71362 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle |
| CVE-2025-71364 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code execution. Attackers can cr |
| CVE-2025-71366 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote a |
| CVE-2025-71367 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicious |
| CVE-2025-71369 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attackers to bypass safe |
| CVE-2025-71372 | Deferred | 未確認 | CWE-502 | Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft maliciou |
| CVE-2025-71373 | Deferred | 未確認 | CWE-693 | picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pi |
| CVE-2025-71375 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads u |
| CVE-2025-71377 | Deferred | 未確認 | CWE-1025 | stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be g |
| CVE-2025-71380 | Deferred | 未確認 | CWE-284 | The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials ca |
| CVE-2025-71385 | Analyzed | 未確認 | CWE-79 | Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text el |
| CVE-2025-71388 | Deferred | 未確認 | CWE-639 | stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChannel (read) permission on a channel to fetch that channel's webhooks, including the |
| CVE-2025-71389 | Deferred | 未確認 | CWE-94 | Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components (RSC) request han |
| CVE-2025-71390 | Analyzed | 未確認 | CWE-863 | SurrealDB before 2.2.6, 2.3.6, and 2.1.8 (and 3.0.0-alpha.7 and earlier) fails to validate DNS-resolved hostnames against --deny-net network access restrictions in its http::* func |
| CVE-2025-71391 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP |
| CVE-2025-71392 | Analyzed | 未確認 | CWE-77 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated System User w |
| CVE-2025-71393 | Analyzed | 未確認 | CWE-674 | SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries. Authenticated at |
| CVE-2025-71394 | Analyzed | 未確認 | CWE-22 | SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER statement that allows authenticated users to read arbitrary files on the file system. |
| CVE-2025-71395 | Analyzed | 未確認 | CWE-789 | SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. |
| CVE-2025-71396 | Analyzed | 未確認 | CWE-770 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execution-time limit on embedded JavaScript scripting functions when the scripting cap |
| CVE-2025-71397 | Analyzed | 未確認 | CWE-835 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions (at the root, namespace, or database level) to define |
| CVE-2025-71398 | Analyzed | 未確認 | CWE-918 | SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Atta |
| CVE-2025-71408 | Analyzed | 未確認 | CWE-95 | NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line argu |
| CVE-2025-8412 | Deferred | 未確認 | CWE-120 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registr |
| CVE-2025-8591 | Analyzed | 未確認 | CWE-79 | The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to |
| CVE-2025-9205 | Deferred | 未確認 | CWE-79 | The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output |
| CVE-2026-0275 | Analyzed | 未確認 | CWE-269 | A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform a |
| CVE-2026-0276 | Undergoing Analysis | 未確認 | CWE-269 | A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user. |
| CVE-2026-0277 | Analyzed | 未確認 | CWE-295 | An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. Th |
| CVE-2026-0278 | Analyzed | 未確認 | CWE-693 | Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. |
| CVE-2026-0279 | Modified | 未確認 | CWE-79 | Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo |
| CVE-2026-0280 | Modified | 未確認 | CWE-131 | An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, |
| CVE-2026-0281 | Modified | 未確認 | CWE-524 | An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web |
| CVE-2026-0282 | Modified | 未確認 | CWE-20 | A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a |
| CVE-2026-0283 | Modified | 未確認 | CWE-306 | An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security res |
| CVE-2026-0284 | Modified | 未確認 | CWE-74 | An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject |
| CVE-2026-0285 | Modified | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface |
| CVE-2026-0286 | Modified | 未確認 | CWE-78 | A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. |
| CVE-2026-0287 | Modified | 未確認 | CWE-754 | Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition |
| CVE-2026-0288 | Modified | 未確認 | CWE-787 | Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network a |
| CVE-2026-0487 | Awaiting Analysis | 未確認 | CWE-427 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. Thi |
| CVE-2026-0515 | Deferred | 未確認 | CWE-233 | Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel. |
| CVE-2026-0667 | Awaiting Analysis | 未確認 | CWE-754 | CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity whe |
| CVE-2026-10031 | Awaiting Analysis | 未確認 | CWE-863 | SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent per-directory access controls by creating symbolic links in a permitt |
| CVE-2026-10033 | Deferred | 未確認 | CWE-862 | The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.14. This is due to the plugin not properly verifying th |
| CVE-2026-10037 | Awaiting Analysis | 未確認 | CWE-20 | A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mai |
| CVE-2026-10041 | Deferred | 未確認 | CWE-639 | The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfm_product |
| CVE-2026-10051 | Analyzed | 未確認 | CWE-200 | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that |
| CVE-2026-10054 | Deferred | 未確認 | CWE-1385, CWE-306 | In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged terminal RPC over WebSocket (/services/shell-terminal, /services/terminals/:id) with |
| CVE-2026-10055 | Deferred | 未確認 | CWE-200, CWE-918 | In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client connected to the standard /services messaging en |
| CVE-2026-10077 | Deferred | 未確認 | The yootheme WordPress theme before 5.0.35 does not prevent its bundled front-end framework from treating certain HTML attributes, which are permitted by wp_kses_post(), as markup, | |
| CVE-2026-10079 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshi |
| CVE-2026-10081 | Deferred | 未確認 | CWE-79 | The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Re |
| CVE-2026-10082 | Deferred | 未確認 | CWE-79 | The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the page, allowing users with the Contributor role and a |
| CVE-2026-10085 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to restrict the group_constrained channel flag to public and private channels that support group sy |
| CVE-2026-10089 | Deferred | 未確認 | CWE-79 | The Insert Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post custom field keys (meta key names) in all versions up to, and including, 3.11.4. This is |
| CVE-2026-10095 | Deferred | 未確認 | CWE-79 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insuff |
| CVE-2026-10096 | Deferred | 未確認 | CWE-639 | The Qi Blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.4.9 via the 'page_id' parameter due to missing validati |
| CVE-2026-10103 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated |
| CVE-2026-10104 | Deferred | 未確認 | CWE-79 | The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom_thumbnail Parameter in all versions up to, and including, 1.5 |
| CVE-2026-10106 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify that the channel referenced in an action cookie matches the channel of the target post, w |
| CVE-2026-10130 | Deferred | 未確認 | CWE-863 | QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup reques |
| CVE-2026-10207 | Deferred | 未確認 | CWE-89 | The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplie |
| CVE-2026-10525 | Deferred | 未確認 | CWE-79 | The NEX-Forms WordPress plugin before 9.2.3 does not sanitise and escape some submitted form data before storing it and outputting it back in the admin dashboard, leading to a Sto |
| CVE-2026-10535 | Analyzed | 未確認 | CWE-121 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. |
| CVE-2026-10536 | Modified | 未確認 | CWE-416 | A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequ |
| CVE-2026-10538 | Awaiting Analysis | 未確認 | CWE-502 | Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Co |
| CVE-2026-10539 | Awaiting Analysis | 未確認 | CWE-305 | A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to |
| CVE-2026-10540 | Awaiting Analysis | 未確認 | CWE-328 | The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained |
| CVE-2026-10545 | Analyzed | 未確認 | CWE-601 | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If u |
| CVE-2026-10551 | Deferred | 未確認 | The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minific | |
| CVE-2026-10569 | Analyzed | 未確認 | CWE-200 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is |
| CVE-2026-10570 | Deferred | 未確認 | CWE-79 | The Sympl Repeater for ACF and Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ACF repeater field values in all versions up to, and including, 2.3. |
| CVE-2026-10573 | Awaiting Analysis | 未確認 | CWE-770 | A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a |
| CVE-2026-10577 | Awaiting Analysis | 未確認 | CWE-306 | A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, all |
| CVE-2026-10587 | Awaiting Analysis | 未確認 | CWE-787 | A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. |
| CVE-2026-10588 | Awaiting Analysis | 未確認 | CWE-497 | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. |
| CVE-2026-10589 | Awaiting Analysis | 未確認 | CWE-787 | A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode. |
| CVE-2026-10590 | Awaiting Analysis | 未確認 | A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. | |
| CVE-2026-10600 | Analyzed | 未確認 | CWE-770 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to bound the time and resource consumption of server-side document content extrac |
| CVE-2026-10610 | Deferred | 未確認 | CWE-269 | Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user. |
| CVE-2026-10628 | Deferred | 未確認 | CWE-862 | The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.10.0. This is due to the plugin not proper |
| CVE-2026-10656 | Modified | 未確認 | CWE-476 | The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completion handlers w |
| CVE-2026-10657 | Modified | 未確認 | CWE-125 | Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which always reads |
| CVE-2026-10659 | Modified | 未確認 | CWE-476 | The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that, on a flash error, the error code was written unconditionally |
| CVE-2026-10660 | Awaiting Analysis | 未確認 | CWE-787 | The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single file-static net_ |
| CVE-2026-10663 | Analyzed | 未確認 | CWE-416 | In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object without clearing the |
| CVE-2026-10664 | Analyzed | 未確認 | CWE-787 | The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow entries from |
| CVE-2026-10665 | Analyzed | 未確認 | CWE-787 | In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buffer of CONFIG |
| CVE-2026-10666 | Analyzed | 未確認 | CWE-121 | parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buffer (char ipad |
| CVE-2026-10667 | Analyzed | 未確認 | CWE-416 | Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated kernel object |
| CVE-2026-10668 | Analyzed | 未確認 | CWE-400 | The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numaker_hsusbd_ep_t |
| CVE-2026-10669 | Analyzed | 未確認 | CWE-190, CWE-787 | On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-supplied buffer |
| CVE-2026-10670 | Analyzed | 未確認 | CWE-476 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller-supplied thr |
| CVE-2026-10671 | Analyzed | 未確認 | CWE-1188, CWE-825 | In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSCALL_OBJ() (which requires the kernel object to already be in |
| CVE-2026-10672 | Analyzed | 未確認 | CWE-125 | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, default 128) wit |
| CVE-2026-10673 | Analyzed | 未確認 | CWE-125, CWE-787 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by copying device- |
| CVE-2026-10674 | Analyzed | 未確認 | CWE-617 | The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart_configure(), |
| CVE-2026-10675 | Analyzed | 未確認 | CWE-400 | In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditionally at the |
| CVE-2026-10677 | Analyzed | 未確認 | CWE-401 | The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then validates eac |
| CVE-2026-10678 | Analyzed | 未確認 | CWE-476, CWE-787 | The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_i2c_gpio_targ |
| CVE-2026-10679 | Analyzed | 未確認 | CWE-369 | The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency. spi_transc |
| CVE-2026-10680 | Analyzed | 未確認 | CWE-125 | The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command size against buf |
| CVE-2026-10681 | Analyzed | 未確認 | CWE-362 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bitmap |
| CVE-2026-10682 | Analyzed | 未確認 | CWE-787 | The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed comparison against the int16_t src_id parameter: src_i |
| CVE-2026-10683 | Analyzed | 未確認 | CWE-835 | In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the rx_full interrupt handler gates the write_requested() callback on dw->state != CMD_ |
| CVE-2026-10684 | Awaiting Analysis | 未確認 | CWE-125 | In subsys/debug/coredump/coredump_shell.c, print_coredump_hdr() used the 16-bit tgt_code field of a stored Zephyr coredump header directly as an index into coredump_target_code2str |
| CVE-2026-10685 | Analyzed | 未確認 | CWE-416 | The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c invoked the application's params->subscribe() callback after it had |
| CVE-2026-10686 | Analyzed | 未確認 | CWE-835 | Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6_route_packet() (subsys/net/ip) were affecte |
| CVE-2026-10695 | Analyzed | 未確認 | CWE-400 | IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries. |
| CVE-2026-10697 | Analyzed | 未確認 | CWE-287 | Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3. |
| CVE-2026-10698 | Analyzed | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0 |
| CVE-2026-10699 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 202 |
| CVE-2026-10700 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files |
| CVE-2026-10706 | Deferred | 未確認 | In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The pl | |
| CVE-2026-10708 | Deferred | 未確認 | This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a minimal leaderboard component may return user records containin | |
| CVE-2026-10714 | Awaiting Analysis | 未確認 | CWE-1390 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stem |
| CVE-2026-10723 | Undergoing Analysis | 未確認 | CWE-347 | BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 thro |
| CVE-2026-10724 | Deferred | 未確認 | CWE-345 | The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review content before rendering it through its dynamic block, allo |
| CVE-2026-10750 | Deferred | 未確認 | The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing authenticated users with a lo | |
| CVE-2026-10755 | Deferred | 未確認 | CWE-863 | The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such |
| CVE-2026-10768 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0. |
| CVE-2026-10769 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versi |
| CVE-2026-10770 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Sp |
| CVE-2026-10818 | Deferred | 未確認 | CWE-434 | The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.10.1.1 via the ajax_chunk_upload_finalize function. This is due |
| CVE-2026-10819 | Analyzed | 未確認 | CWE-409 | Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.7.x <= 11.7.4 fail to limit the number of frames and enforce the file size cap on animated GIF uploa |
| CVE-2026-10822 | Undergoing Analysis | 未確認 | CWE-1284, CWE-617 | If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS r |
| CVE-2026-10830 | Deferred | 未確認 | The AllCoach WordPress plugin before 1.0.2 does not verify that an email address submitted to a public account-registration endpoint is not already associated with an existing use | |
| CVE-2026-10834 | Deferred | 未確認 | The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users | |
| CVE-2026-10842 | Analyzed | 未確認 | CWE-289 | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypa |
| CVE-2026-10865 | Deferred | 未確認 | CWE-200 | The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.11 via the (template body). This makes it |
| CVE-2026-11321 | Deferred | 未確認 | CWE-89 | The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field values directly into SQL queries during CSV import, without parameterization or escap |
| CVE-2026-11324 | Deferred | 未確認 | CWE-79 | The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in version |
| CVE-2026-11328 | Deferred | 未確認 | CWE-79 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title parameter in all versions up to, and including, 2.7.9.8 due |
| CVE-2026-11331 | Undergoing Analysis | 未確認 | CWE-790 | An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ proce |
| CVE-2026-11340 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master |
| CVE-2026-11348 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107. |
| CVE-2026-11349 | Deferred | 未確認 | CWE-89 | The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using |
| CVE-2026-11351 | Deferred | 未確認 | CWE-200 | The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve informa |
| CVE-2026-11352 | Modified | 未確認 | CWE-835 | An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function di |
| CVE-2026-11354 | Deferred | 未確認 | CWE-862 | The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it p |
| CVE-2026-11359 | Deferred | 未確認 | CWE-862 | The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in ver |
| CVE-2026-11371 | Deferred | 未確認 | CWE-79 | The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed |
| CVE-2026-11380 | Deferred | 未確認 | CWE-79 | The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.21. This is due to insufficient output escaping a |
| CVE-2026-11383 | Analyzed | 未確認 | CWE-79 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console. |
| CVE-2026-11386 | Awaiting Analysis | 未確認 | CWE-20 | An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT source files (such as /etc/apt/so |
| CVE-2026-11387 | Deferred | 未確認 | CWE-287 | The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all vers |
| CVE-2026-11390 | Deferred | 未確認 | CWE-79 | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets in all versions up to, and inc |
| CVE-2026-11391 | Awaiting Analysis | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Patch. |
| CVE-2026-11392 | Deferred | 未確認 | CWE-79 | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' and 'check_out_date' parameters in all versions up to, and includi |
| CVE-2026-11397 | Deferred | 未確認 | CWE-918 | The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpie_import_upload_file_from_url AJAX |
| CVE-2026-11398 | Deferred | 未確認 | CWE-862 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.6.1. This is |
| CVE-2026-11403 | Analyzed | 未確認 | CWE-331 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targ |
| CVE-2026-11404 | Deferred | 未確認 | CWE-125 | Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_tls_server_recv_hello(), which uses an attacker-controlled session_id_len byte fr |
| CVE-2026-11405 | Deferred | 未確認 | The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login() function at 004c88b8. - The function contains a normal authentication path us | |
| CVE-2026-11426 | Deferred | 未確認 | CWE-22 | The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.76. This is due to the plugin accepting arbitrary lo |
| CVE-2026-11536 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector. |
| CVE-2026-11562 | Deferred | 未確認 | The WS Form LITE WordPress plugin before 1.11.8 does not have a capability check on one of its settings-update actions, allowing authenticated users with subscriber-level access a | |
| CVE-2026-11563 | Deferred | 未確認 | The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor does it have proper authorization or CSRF checks, all | |
| CVE-2026-11564 | Modified | 未確認 | CWE-295 | libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA |
| CVE-2026-11567 | Deferred | 未確認 | The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced (variable/hidden) payment amount, allowing unaut | |
| CVE-2026-11568 | Deferred | 未確認 | The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authorisation or post-status check before returning WooCommerce product data through a p | |
| CVE-2026-11570 | Deferred | 未確認 | The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross | |
| CVE-2026-11571 | Deferred | 未確認 | The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-notification processing and leaves them publicly accessible in | |
| CVE-2026-11575 | Deferred | 未確認 | CWE-862 | The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenticity of incoming payment callbacks: the secret used to validate the callback signat |
| CVE-2026-11578 | Deferred | 未確認 | The Fluent Forms WordPress plugin before 6.2.5 does not properly restrict the deletion of form submission entries to the forms a restricted Manager is authorized to manage, allowi | |
| CVE-2026-11579 | Deferred | 未確認 | CWE-434 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not verify that a file upload is made against an existing form configured with a file-uplo |
| CVE-2026-11580 | Deferred | 未確認 | CWE-639 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not perform a per-object capability check in its post-duplication AJAX action, allowing us |
| CVE-2026-11586 | Modified | 未確認 | CWE-770 | By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust a |
| CVE-2026-11591 | Deferred | 未確認 | CWE-79 | The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient i |
| CVE-2026-11592 | Deferred | 未確認 | CWE-862 | The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versio |
| CVE-2026-11598 | Deferred | 未確認 | CWE-79 | The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name' Shortcode Attribute in all versions up to, and including, 1.4.3 due to insufficient inp |
| CVE-2026-11600 | Deferred | 未確認 | CWE-862 | The Envo's Templates & Widgets for Elementor and WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the Envo Tabs |
| CVE-2026-11605 | Undergoing Analysis | 未確認 | CWE-408 | The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A qu |
| CVE-2026-11610 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF > 0), an authenticate |
| CVE-2026-11622 | Undergoing Analysis | 未確認 | CWE-770 | A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send querie |
| CVE-2026-11707 | Analyzed | 未確認 | CWE-79 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login pa |
| CVE-2026-11721 | Undergoing Analysis | 未確認 | CWE-1284 | It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to |
| CVE-2026-11740 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11756 | Awaiting Analysis | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could |
| CVE-2026-11763 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management Syst |
| CVE-2026-11766 | Deferred | 未確認 | The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea profile fields before outputting it on user profiles, allowin | |
| CVE-2026-11767 | Deferred | 未確認 | CWE-79 | The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, |
| CVE-2026-11770 | Modified | 未確認 | CWE-90 | A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Becaus |
| CVE-2026-11771 | Analyzed | 未確認 | CWE-121, CWE-193, CWE-787 | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via |
| CVE-2026-11778 | Deferred | 未確認 | CWE-94 | The The CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includin |
| CVE-2026-11781 | Deferred | 未確認 | The Adminify WordPress plugin before 4.2.10 does not perform per-user read-capability checks on the results returned by one of its administration search features, allowing users w | |
| CVE-2026-11782 | Deferred | 未確認 | CWE-284 | The Points and Rewards for WooCommerce WordPress plugin before 2.10.1 does not have authorisation checks in place on a wallet and points update action that is available to unauthen |
| CVE-2026-11794 | Deferred | 未確認 | The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form sub | |
| CVE-2026-11798 | Deferred | 未確認 | CWE-79 | The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heateor_mastodon_share' p |
| CVE-2026-11802 | Deferred | 未確認 | CWE-862 | The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration() function |
| CVE-2026-11804 | Deferred | 未確認 | CWE-280 | Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux |
| CVE-2026-11818 | Deferred | 未確認 | CWE-862 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.14. T |
| CVE-2026-11823 | Deferred | 未確認 | CWE-89 | The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store_service_date' parameter of the bpa_assign_staffmember_to_slots() functio |
| CVE-2026-11826 | Deferred | 未確認 | CWE-122 | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads characters between two delimiters into a caller-supp |
| CVE-2026-11827 | Analyzed | 未確認 | CWE-522 | GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allo |
| CVE-2026-11841 | Deferred | 未確認 | CWE-552 | An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critic |
| CVE-2026-11851 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated use |
| CVE-2026-11855 | Deferred | 未確認 | The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from | |
| CVE-2026-11856 | Modified | 未確認 | CWE-294 | Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a different one (`hostB`) for a secon |
| CVE-2026-11866 | Deferred | 未確認 | CWE-352 | The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing actions handled by its central request dispatcher, allowing a |
| CVE-2026-11867 | Deferred | 未確認 | CWE-862 | The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing au |
| CVE-2026-11868 | Deferred | 未確認 | CWE-862 | The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, al |
| CVE-2026-11869 | Deferred | 未確認 | The WP DSGVO Tools (GDPR) WordPress plugin before 3.1.40 does not perform an authorization check on the immediate-processing path of its data subject access request feature, allowi | |
| CVE-2026-11870 | Deferred | 未確認 | CWE-290 | The WP Ghost (Hide My WP Ghost) WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP hea |
| CVE-2026-11875 | Deferred | 未確認 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and imp | |
| CVE-2026-11876 | Awaiting Analysis | 未確認 | CWE-862 | In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_deployed_stack`) lacks proper RBAC authorization checks, allowing any authenticated user t |
| CVE-2026-11880 | Deferred | 未確認 | The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-pr | |
| CVE-2026-11881 | Deferred | 未確認 | CWE-79 | The Fluent Forms WordPress plugin before 6.2.6 does not sanitise and escape one of its form field configuration settings before outputting it inside an inline script when a form i |
| CVE-2026-11883 | Deferred | 未確認 | The WebAuthn Provider for Two Factor WordPress plugin before 2.5.6 does not correctly validate the second-factor authentication response, allowing an attacker who already knows a u | |
| CVE-2026-11885 | Analyzed | 未確認 | CWE-120 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervis |
| CVE-2026-11887 | Deferred | 未確認 | The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its AJAX actions, allowing any authenticated user, such as a subscrib | |
| CVE-2026-11889 | Awaiting Analysis | 未確認 | CWE-639 | SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any |
| CVE-2026-11896 | Deferred | 未確認 | CWE-639 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14 via the 'vcal' parame |
| CVE-2026-11897 | Analyzed | 未確認 | CWE-770 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could ex |
| CVE-2026-11898 | Deferred | 未確認 | CWE-79 | The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.7.12 due to insufficient input sani |
| CVE-2026-11900 | Deferred | 未確認 | CWE-639 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 2.8.16 via the 'data' attribute of |
| CVE-2026-11901 | Deferred | 未確認 | CWE-345 | The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. This is due to the `web_hook_ |
| CVE-2026-11903 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: |
| CVE-2026-11904 | Analyzed | 未確認 | CWE-209 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Ve |
| CVE-2026-11908 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Stored XSS. This issue affects Tagify versions: from 0.0. |
| CVE-2026-11909 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6. |
| CVE-2026-11913 | Awaiting Analysis | 未確認 | CWE-79 | vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*. |
| CVE-2026-11914 | Awaiting Analysis | 未確認 | CWE-20 | vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*. |
| CVE-2026-11915 | Awaiting Analysis | 未確認 | CWE-307 | vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions: *.*. |
| CVE-2026-11917 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker |
| CVE-2026-11922 | Awaiting Analysis | 未確認 | CWE-290 | A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the `POST /api/v1/login` and self password-change endpoints by rotati |
| CVE-2026-11925 | Analyzed | 未確認 | CWE-451 | Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server. |
| CVE-2026-11944 | Analyzed | 未確認 | CWE-22 | openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker |
| CVE-2026-11946 | Awaiting Analysis | 未確認 | CWE-770, CWE-789 | An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service in open62541. The endpointUrl field of GetEndpointsRequest is not validated for |
| CVE-2026-11950 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11961 | Deferred | 未確認 | CWE-269 | The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the |
| CVE-2026-11962 | Deferred | 未確認 | The FileOrganizer WordPress plugin before 1.2.0 does not validate the file type on several of its file-management operations, allowing authenticated users who have been granted fi | |
| CVE-2026-11963 | Deferred | 未確認 | The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a calle | |
| CVE-2026-11964 | Deferred | 未確認 | The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowin | |
| CVE-2026-11965 | Deferred | 未確認 | The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowing unauthenticated use | |
| CVE-2026-11966 | Deferred | 未確認 | CWE-639 | The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts |
| CVE-2026-11973 | Deferred | 未確認 | CWE-89 | The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient |
| CVE-2026-11974 | Deferred | 未確認 | CWE-22 | The wp-media-folder-addon WordPress plugin before 4.1.7 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauth |
| CVE-2026-11980 | Analyzed | 未確認 | CWE-242 | IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. |
| CVE-2026-11981 | Deferred | 未確認 | CWE-352 | The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce validation on the give_set_notific |
| CVE-2026-11988 | Deferred | 未確認 | CWE-639 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including |
| CVE-2026-11990 | Deferred | 未確認 | CWE-862 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.0. This is due to the p |
| CVE-2026-11992 | Deferred | 未確認 | CWE-862 | The Easy Appointments plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.12.27. This is due to the plugin not properly verifying tha |
| CVE-2026-12001 | Deferred | 未確認 | CWE-798 | A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authenticatio |
| CVE-2026-12002 | Deferred | 未確認 | CWE-352 | The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.11.1. This i |
| CVE-2026-12041 | Deferred | 未確認 | CWE-79 | The Chatra Live Chat + ChatBot + Cart Saver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to |
| CVE-2026-12064 | Modified | 未確認 | CWE-295, CWE-297 | When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly in |
| CVE-2026-12080 | Awaiting Analysis | 未確認 | CWE-61 | A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic |
| CVE-2026-12081 | Deferred | 未確認 | The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.2 does not restrict the PHP classes allowed when unserializing an attacker-supplied form-field | |
| CVE-2026-12082 | Deferred | 未確認 | CWE-862 | The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of |
| CVE-2026-12083 | Deferred | 未確認 | The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or no | |
| CVE-2026-12090 | Deferred | 未確認 | CWE-89 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'wppm_proj_filter' parameter in al |
| CVE-2026-12097 | Deferred | 未確認 | CWE-862 | The User Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2. This is due to the plugin not properly verifying that a us |
| CVE-2026-12103 | Deferred | 未確認 | CWE-862 | The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.4. This is due to the plugin not properly verifying |
| CVE-2026-12108 | Deferred | 未確認 | CWE-79 | The Highlighting Code Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.2.0 due to insufficient inp |
| CVE-2026-12110 | Deferred | 未確認 | CWE-89 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'task_search' parameter in all ver |
| CVE-2026-12113 | Deferred | 未確認 | CWE-862 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.02 via the cpabc_appointments_filter |
| CVE-2026-12116 | Deferred | 未確認 | A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an atta | |
| CVE-2026-12118 | Analyzed | 未確認 | CWE-502 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted dat |
| CVE-2026-12122 | Deferred | 未確認 | CWE-862 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.11 vi |
| CVE-2026-12123 | Deferred | 未確認 | CWE-918 | The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.8.5 via the 'vdl' parameter. This makes it po |
| CVE-2026-12124 | Deferred | 未確認 | CWE-862 | The PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin for WordPress is vulnerable to unauthorized access of data due to a |
| CVE-2026-12126 | Deferred | 未確認 | CWE-79 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment 'post_title' in all versions up to, |
| CVE-2026-12127 | Deferred | 未確認 | CWE-93 | The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF |
| CVE-2026-12133 | Deferred | 未確認 | CWE-862 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Group Deletion in versions up to, and in |
| CVE-2026-12134 | Deferred | 未確認 | CWE-862 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is d |
| CVE-2026-12135 | Deferred | 未確認 | CWE-79 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video_player' shortcode 'align' attribute in all versions up to, and inclu |
| CVE-2026-12139 | Analyzed | 未確認 | CWE-214 | Tanium addressed an information disclosure vulnerability in Connect. |
| CVE-2026-12141 | Deferred | 未確認 | CWE-79 | The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter |
| CVE-2026-12142 | Deferred | 未確認 | CWE-79 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '_name[]' Array Parameter in all versions up to, and inclu |
| CVE-2026-12144 | Deferred | 未確認 | CWE-269 | The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the `save_requests_meta()` func |
| CVE-2026-12153 | Deferred | 未確認 | CWE-862 | The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8. This is due to the plugin not properly verifying that a |
| CVE-2026-12154 | Deferred | 未確認 | CWE-79 | The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_id' shortcode attribute of the [fbrev] shortcode |
| CVE-2026-12158 | Deferred | 未確認 | CWE-352 | The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due t |
| CVE-2026-12166 | Deferred | 未確認 | A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a | |
| CVE-2026-12167 | Deferred | 未確認 | The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to access privileged driver functionality via a communication interface | |
| CVE-2026-12168 | Deferred | 未確認 | An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kerne | |
| CVE-2026-12170 | Deferred | 未確認 | CWE-79 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' |
| CVE-2026-12194 | Deferred | 未確認 | CWE-98 | PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file |
| CVE-2026-12195 | Deferred | 未確認 | CWE-78 | myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting |
| CVE-2026-12196 | Deferred | 未確認 | CWE-287 | HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management scripts |
| CVE-2026-12224 | Deferred | 未確認 | CWE-269 | The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities REST Endpoint in all versions up to, and including, 5.0.4. This is due to the `upd |
| CVE-2026-12228 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores attacker-controlled `pro |
| CVE-2026-12250 | Deferred | 未確認 | CWE-214 | Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This iss |
| CVE-2026-12251 | Deferred | 未確認 | CWE-269 | The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-regi |
| CVE-2026-12252 | Analyzed | 未確認 | CWE-94 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependen |
| CVE-2026-12255 | Deferred | 未確認 | CWE-287 | The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in its site-registration request handler when password authentication has been disabled for |
| CVE-2026-12257 | Deferred | 未確認 | CWE-94 | Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. The flaw is located in the endpoint “/index.cfm/_api/json/v1/default”, where th |
| CVE-2026-12270 | Deferred | 未確認 | The Everest Forms WordPress plugin before 3.5.0 does not correctly restrict access to several REST API endpoints belonging to its onboarding assistant: the capability check is onl | |
| CVE-2026-12271 | Deferred | 未確認 | The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to it, allowing authenticated users with subscriber-level access | |
| CVE-2026-12273 | Deferred | 未確認 | The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target validation before creating a comment in one of its handlers, and stores the comment | |
| CVE-2026-12274 | Deferred | 未確認 | The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save han | |
| CVE-2026-12275 | Deferred | 未確認 | The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capability checks it e | |
| CVE-2026-12276 | Deferred | 未確認 | The LA-Studio Element Kit for Elementor WordPress plugin before 1.6.1 does not check whether user registration is enabled on the site before creating an account through one of its | |
| CVE-2026-12277 | Deferred | 未確認 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input before deleting the referenced file, allowing unauthenticated u | |
| CVE-2026-12281 | Deferred | 未確認 | CWE-287 | The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries iden |
| CVE-2026-12283 | Awaiting Analysis | 未確認 | CWE-89 | Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you t |
| CVE-2026-12341 | Analyzed | 未確認 | CWE-287 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bear |
| CVE-2026-12352 | Awaiting Analysis | 未確認 | CWE-863 | This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device. |
| CVE-2026-12353 | Awaiting Analysis | 未確認 | CWE-772 | An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how th |
| CVE-2026-12357 | Awaiting Analysis | 未確認 | CWE-93 | Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte |
| CVE-2026-12374 | Deferred | 未確認 | CWE-295, CWE-367 | Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a loc |
| CVE-2026-12375 | Deferred | 未確認 | The uncanny-automator-pro WordPress plugin before 7.3.0.6 was distributed with malicious code after the vendor's uncanny-automator-pro WordPress plugin before 7.3.0.6 update/distri | |
| CVE-2026-12376 | Deferred | 未確認 | CWE-639 | The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and abo |
| CVE-2026-12378 | Deferred | 未確認 | The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data before passing it to a PHP deserialization function, allowing | |
| CVE-2026-12379 | Deferred | 未確認 | CWE-601 | An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authenti |
| CVE-2026-12382 | Awaiting Analysis | 未確認 | CWE-290 | A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the sou |
| CVE-2026-12383 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny], authentication_classes=[]) |
| CVE-2026-12385 | Deferred | 未確認 | CWE-200 | The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it po |
| CVE-2026-12386 | Deferred | 未確認 | CWE-170 | Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 |
| CVE-2026-1239 | Deferred | 未確認 | CWE-862 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization check on the 'ninja- |
| CVE-2026-12391 | Awaiting Analysis | 未確認 | CWE-59 | An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framework. The utility creat |
| CVE-2026-12393 | Deferred | 未確認 | CWE-639 | The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated |
| CVE-2026-12394 | Deferred | 未確認 | CWE-269 | The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitra |
| CVE-2026-12395 | Deferred | 未確認 | CWE-89 | The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-le |
| CVE-2026-12396 | Deferred | 未確認 | The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscri | |
| CVE-2026-12397 | Deferred | 未確認 | The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscribe | |
| CVE-2026-12400 | Deferred | 未確認 | CWE-639 | The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the update_form d |
| CVE-2026-12406 | Deferred | 未確認 | CWE-862 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to authorization bypass in all versions u |
| CVE-2026-12408 | Deferred | 未確認 | CWE-200 | The Slim SEO – A Fast & Automated SEO Plugin For WordPress plugin for WordPress is vulnerable to Unauthorized Private Content Disclosure in all versions up to, and including, 4.9.8 |
| CVE-2026-12409 | Deferred | 未確認 | CWE-352 | The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u |
| CVE-2026-12413 | Analyzed | 未確認 | CWE-193, CWE-617 | An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_inc |
| CVE-2026-12418 | Deferred | 未確認 | CWE-639 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in al |
| CVE-2026-12421 | Deferred | 未確認 | CWE-79 | The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input sani |
| CVE-2026-12426 | Deferred | 未確認 | CWE-200 | The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.22 via the members |
| CVE-2026-12428 | Deferred | 未確認 | CWE-862 | The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_all_values() function in the /wp-json/acf-f |
| CVE-2026-12433 | Deferred | 未確認 | CWE-639 | The Hydra Booking – Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.2.1 via the |
| CVE-2026-12434 | Deferred | 未確認 | CWE-862 | The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize_status. This makes it pos |
| CVE-2026-12435 | Deferred | 未確認 | CWE-862 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.111. This is due to th |
| CVE-2026-12436 | Analyzed | 未確認 | CWE-915 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-12472 | Deferred | 未確認 | CWE-862 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.11. This is due |
| CVE-2026-12476 | Deferred | 未確認 | CWE-434 | The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in th |
| CVE-2026-12478 | Awaiting Analysis | 未確認 | CWE-125 | The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A ma |
| CVE-2026-12480 | Awaiting Analysis | 未確認 | CWE-73 | Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the `H5IOStore._ver |
| CVE-2026-12481 | Analyzed | 未確認 | CWE-502 | A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically, the `_raise_ |
| CVE-2026-12482 | Analyzed | 未確認 | CWE-22 | A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_ |
| CVE-2026-12484 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.TorchModuleWrapper.from |
| CVE-2026-12492 | Deferred | 未確認 | CWE-287 | The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a suppl |
| CVE-2026-12493 | Deferred | 未確認 | CWE-287 | The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce ord |
| CVE-2026-12495 | Deferred | 未確認 | CWE-121 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker |
| CVE-2026-12496 | Deferred | 未確認 | CWE-116, CWE-79 | Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allow |
| CVE-2026-12497 | Deferred | 未確認 | CWE-269 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.18 does not consistently enforce the role r |
| CVE-2026-12500 | Deferred | 未確認 | CWE-862 | The WP Travel Engine WordPress plugin before 6.8.2 does not perform a capability check on an AJAX action that updates a WP Travel Engine WordPress plugin before 6.8.2 option, all |
| CVE-2026-12502 | Deferred | 未確認 | CWE-269 | Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superad |
| CVE-2026-12503 | Deferred | 未確認 | CWE-59 | Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated `larm |
| CVE-2026-12504 | Deferred | 未確認 | CWE-287, CWE-521 | Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local atta |
| CVE-2026-12510 | Deferred | 未確認 | CWE-639 | The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a client-supplied identifier, allowing users with subscriber-le |
| CVE-2026-12511 | Deferred | 未確認 | The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a downloaded file, allowing authenticated users with editor-level a | |
| CVE-2026-12512 | Deferred | 未確認 | CWE-89 | The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to |
| CVE-2026-12516 | Deferred | 未確認 | The Fediverse Embeds WordPress plugin before 1.5.8 does not validate the destination of the server-side request performed by an unauthenticated media-proxying endpoint, allowing an | |
| CVE-2026-12517 | Deferred | 未確認 | The Fediverse Embeds WordPress plugin before 1.5.8 does not validate the destination of the server-side request performed by an unauthenticated site-info endpoint before fetching i | |
| CVE-2026-12523 | Analyzed | 未確認 | CWE-400 | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. Impact HTTP/3 |
| CVE-2026-12525 | Deferred | 未確認 | CWE-269 | The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscri |
| CVE-2026-12535 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field v |
| CVE-2026-12536 | Deferred | 未確認 | CWE-79 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ parameter in all versions up to, and including, 3.15.5 due to in |
| CVE-2026-12547 | Awaiting Analysis | 未確認 | CWE-201 | SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or |
| CVE-2026-12548 | Analyzed | 未確認 | CWE-125 | A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length |
| CVE-2026-12557 | Deferred | 未確認 | CWE-862 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plugin not properly verif |
| CVE-2026-12562 | Deferred | 未確認 | CWE-306 | The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerabili |
| CVE-2026-12575 | Deferred | 未確認 | CWE-404 | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. |
| CVE-2026-12576 | Deferred | 未確認 | CWE-924 | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability. |
| CVE-2026-12577 | Deferred | 未確認 | CWE-358 | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. |
| CVE-2026-12579 | Deferred | 未確認 | CWE-288 | AS228T with Authentication Bypass Vulnerability |
| CVE-2026-12582 | Deferred | 未確認 | The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated atta | |
| CVE-2026-12583 | Deferred | 未確認 | CWE-502 | The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored through a public form, allowing unauthenticated attackers to inject |
| CVE-2026-12585 | Deferred | 未確認 | CWE-287 | The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing un |
| CVE-2026-12588 | Awaiting Analysis | 未確認 | CWE-409 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a lar |
| CVE-2026-12590 | Analyzed | 未確認 | CWE-770 | Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser is configured with an invalid limit option value such as an unparseable string or N |
| CVE-2026-12592 | Deferred | 未確認 | CWE-79 | The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenti |
| CVE-2026-12593 | Deferred | 未確認 | CWE-862 | The implementation of an internal and undocumented Dashboard API endpoint (POST /api/users/~/{user}/tokens) forgot to ensure an HTTP request for creating an API Token for another u |
| CVE-2026-12595 | Deferred | 未確認 | CWE-287 | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all versions up to and including 6.2.3. The vulnerability exists in the |
| CVE-2026-12597 | Deferred | 未確認 | CWE-287 | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in th |
| CVE-2026-12598 | Deferred | 未確認 | CWE-287 | The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via the Spotify Social Login addon. This is due to the loginpre |
| CVE-2026-12606 | Modified | 未確認 | CWE-444 | Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling. Gr |
| CVE-2026-12617 | Undergoing Analysis | 未確認 | CWE-617 | The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries f |
| CVE-2026-12654 | Deferred | 未確認 | CWE-862 | The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.7. This is due to the plugin not pro |
| CVE-2026-12657 | Deferred | 未確認 | CWE-639 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6 |
| CVE-2026-12659 | Awaiting Analysis | 未確認 | CWE-415 | A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets se |
| CVE-2026-12684 | Deferred | 未確認 | CWE-434 | The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the r |
| CVE-2026-12685 | Deferred | 未確認 | The EscortWP escortwp WordPress theme through 3.6.2 was distributed with a vendor-authored, obfuscated backdoor that lets an unauthenticated attacker who supplies a hard-coded, per | |
| CVE-2026-12686 | Deferred | 未確認 | CWE-639 | An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised access to other companies hosted within the same subdomain envir |
| CVE-2026-12687 | Deferred | 未確認 | CWE-269 | The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated u |
| CVE-2026-12688 | Deferred | 未確認 | CWE-284 | The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group membership, allowing unauthenticated attackers to forge a payme |
| CVE-2026-12689 | Deferred | 未確認 | CWE-862 | The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users w |
| CVE-2026-12690 | Deferred | 未確認 | CWE-862 | The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in use |
| CVE-2026-12691 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: f |
| CVE-2026-12692 | Deferred | 未確認 | CWE-620 | Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 befor |
| CVE-2026-12693 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This iss |
| CVE-2026-12694 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video |
| CVE-2026-12695 | Deferred | 未確認 | CWE-287 | The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored secret, instead verifying it against an attac |
| CVE-2026-12697 | Deferred | 未確認 | CWE-639 | The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, allowing users with a subsc |
| CVE-2026-12701 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory trave |
| CVE-2026-12702 | Analyzed | 未確認 | CWE-284 | In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment. |
| CVE-2026-12703 | Deferred | 未確認 | CWE-288 | TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections ap |
| CVE-2026-12705 | Deferred | 未確認 | CWE-353 | Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update To |
| CVE-2026-12707 | Awaiting Analysis | 未確認 | CWE-770 | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of post-handshake client migration events. Impact quiche s |
| CVE-2026-12715 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and acc |
| CVE-2026-12720 | Deferred | 未確認 | CWE-502 | The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises data that unauthenticated users can store, leading to PHP Object |
| CVE-2026-12721 | Deferred | 未確認 | CWE-89 | The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape a value taken from the request before using it in a SQL statement, allowing unauthenticated attacker |
| CVE-2026-12722 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Comme |
| CVE-2026-12723 | Deferred | 未確認 | CWE-862 | The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary e |
| CVE-2026-12724 | Deferred | 未確認 | CWE-345 | The Kirki WordPress plugin before 6.0.12 does not sanitise or escape the email subject and body values supplied in a request before including them in the password-reset email it s |
| CVE-2026-12729 | Deferred | 未確認 | CWE-862 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.3.0. Thi |
| CVE-2026-12731 | Deferred | 未確認 | CWE-79 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTi |
| CVE-2026-12732 | Deferred | 未確認 | CWE-79 | The LearnPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class_wrapper_form' shortcode attribute in versions up to, and including, 4.4.0. This is d |
| CVE-2026-12733 | Analyzed | 未確認 | CWE-770 | IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations. |
| CVE-2026-12734 | Deferred | 未確認 | CWE-79 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'connectorWidth' Block Attribute |
| CVE-2026-12736 | Deferred | 未確認 | CWE-269 | The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /w |
| CVE-2026-12738 | Deferred | 未確認 | CWE-862 | The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due t |
| CVE-2026-12740 | Deferred | 未確認 | CWE-352 | Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a s |
| CVE-2026-12741 | Deferred | 未確認 | CWE-89 | The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and inclu |
| CVE-2026-12746 | Deferred | 未確認 | CWE-352 | Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization |
| CVE-2026-12753 | Deferred | 未確認 | CWE-89 | The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, |
| CVE-2026-12754 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'layoutstyle' parameter in all versions up to, and including, |
| CVE-2026-12761 | Deferred | 未確認 | CWE-287 | The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass leading to account takeover in versions up |
| CVE-2026-12800 | Deferred | 未確認 | CWE-89 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST A |
| CVE-2026-12869 | Deferred | 未確認 | CWE-79 | The Header Footer Builder for Elementor WordPress plugin before 1.2.1 does not require an administrative capability for its dashboard template-import action (it allows any edit_pos |
| CVE-2026-12877 | Deferred | 未確認 | CWE-287 | The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sanitise and escape user supplied input before using it in a SQL query, allowing unaut |
| CVE-2026-12879 | Awaiting Analysis | 未確認 | CWE-441, CWE-610 | An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltra |
| CVE-2026-12895 | Deferred | 未確認 | CWE-89 | SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using `str.format()` wi |
| CVE-2026-12898 | Deferred | 未確認 | CWE-22 | The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated |
| CVE-2026-12900 | Deferred | 未確認 | CWE-79 | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `uagb/image` block in all versions up |
| CVE-2026-12902 | Deferred | 未確認 | CWE-862 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.7. This is due t |
| CVE-2026-12904 | Deferred | 未確認 | CWE-639 | The Kadence Blocks – Gutenberg Blocks for Page Builder Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.7.7. This i |
| CVE-2026-12906 | Deferred | 未確認 | CWE-639 | The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users wit |
| CVE-2026-12907 | Deferred | 未確認 | CWE-862 | The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and |
| CVE-2026-12918 | Deferred | 未確認 | CWE-89 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to generic SQL Injection via the 'recipients' parameter in all |
| CVE-2026-12920 | Deferred | 未確認 | CWE-89 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3. |
| CVE-2026-12923 | Deferred | 未確認 | CWE-98 | The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' param |
| CVE-2026-12924 | Deferred | 未確認 | CWE-79 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'etn_faq_content' paramet |
| CVE-2026-12927 | Awaiting Analysis | 未確認 | CWE-787 | CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition |
| CVE-2026-12932 | Analyzed | 未確認 | CWE-401 | A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory ex |
| CVE-2026-12935 | Deferred | 未確認 | CWE-121 | The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates |
| CVE-2026-12936 | Deferred | 未確認 | CWE-89 | The Recurio – Ultimate Subscription for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 1.1.3 |
| CVE-2026-12938 | Deferred | 未確認 | CWE-79 | The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the [newsletters_post] shortcode in versions up to and includin |
| CVE-2026-12939 | Deferred | 未確認 | CWE-79 | The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post_thumbnail (and newsletters_post_thumbnail) shortcodes in |
| CVE-2026-12940 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher |
| CVE-2026-12941 | Deferred | 未確認 | CWE-89 | The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions |
| CVE-2026-12942 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot do |
| CVE-2026-12943 | Analyzed | 未確認 | CWE-78 | IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated |
| CVE-2026-12945 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticat |
| CVE-2026-12946 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. |
| CVE-2026-12947 | Analyzed | 未確認 | CWE-532 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user. |
| CVE-2026-12948 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authentic |
| CVE-2026-12955 | Deferred | 未確認 | CWE-862 | The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the gdpr_cookie_ |
| CVE-2026-12960 | Deferred | 未確認 | CWE-926 | An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS |
| CVE-2026-12968 | Deferred | 未確認 | CWE-79 | The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint and accepts SVG files that are s |
| CVE-2026-12970 | Deferred | 未確認 | CWE-79 | The LearnPress WordPress plugin before 4.4.1 does not escape a search parameter before reflecting it into an HTML attribute, leading to Reflected Cross-Site Scripting that execute |
| CVE-2026-12972 | Deferred | 未確認 | CWE-284 | The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users |
| CVE-2026-12973 | Deferred | 未確認 | CWE-862 | The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users |
| CVE-2026-12978 | Deferred | 未確認 | CWE-79 | The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before reflecting it into the HTML response of one of its page-builder AJAX actions, allow |
| CVE-2026-12979 | Deferred | 未確認 | CWE-73 | The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleting a file during a template-import operation, allowing users with administrator |
| CVE-2026-12981 | Deferred | 未確認 | CWE-269 | The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisation when updating user passwords, allowing unauthenticated attackers to set the passwo |
| CVE-2026-12982 | Deferred | 未確認 | CWE-79 | The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, lea |
| CVE-2026-12987 | Deferred | 未確認 | CWE-89 | The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a booker-supplied registration field |
| CVE-2026-12988 | Deferred | 未確認 | CWE-862 | The WP 2FA WordPress plugin before 3.1.1.2 does not verify that the email address supplied during two-factor authentication setup belongs to the user, allowing an attacker who has |
| CVE-2026-12989 | Deferred | 未確認 | CWE-306 | A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to g |
| CVE-2026-12990 | Deferred | 未確認 | CWE-284 | An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation or |
| CVE-2026-12991 | Deferred | 未確認 | CWE-300 | The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot (APK v5.5.0) exposes the system to man-in-the-mid |
| CVE-2026-12994 | Deferred | 未確認 | CWE-862 | The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. This is due to the plugin not p |
| CVE-2026-12996 | Analyzed | 未確認 | CWE-125, CWE-416 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted |
| CVE-2026-12997 | Deferred | 未確認 | CWE-22 | The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_files' parameter parameter. This ma |
| CVE-2026-13001 | Deferred | 未確認 | CWE-20 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlove_handle_cache_files' function in all v |
| CVE-2026-13005 | Deferred | 未確認 | CWE-79 | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including |
| CVE-2026-13009 | Deferred | 未確認 | CWE-89 | The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insu |
| CVE-2026-13010 | Deferred | 未確認 | CWE-89 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up |
| CVE-2026-13011 | Deferred | 未確認 | CWE-89 | The ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in |
| CVE-2026-13014 | Awaiting Analysis | 未確認 | CWE-22, CWE-73, CWE-94 | A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable applicati |
| CVE-2026-13015 | Deferred | 未確認 | CWE-79 | The Wp Google Places Review Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'place' parameter in versions up to, and including, 18.1. This is du |
| CVE-2026-13019 | Modified | 未確認 | CWE-640 | Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated |
| CVE-2026-13020 | Analyzed | 未確認 | CWE-640 | A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attack |
| CVE-2026-13039 | Deferred | 未確認 | CWE-862 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass due to a regression in versions from 4.0 |
| CVE-2026-13040 | Deferred | 未確認 | CWE-79 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'real_val__' parameter in all versions up to, and incl |
| CVE-2026-13042 | Deferred | 未確認 | CWE-79 | The RPB Chessboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 8.1.2 due to insufficient input sanit |
| CVE-2026-13050 | Analyzed | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted reque |
| CVE-2026-13053 | Modified | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command. |
| CVE-2026-13054 | Modified | 未確認 | CWE-22 | A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacker to write arbitrary files on the Firebox's filesystem. |
| CVE-2026-13055 | Analyzed | 未確認 | CWE-617 | The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index spe |
| CVE-2026-13056 | Analyzed | 未確認 | CWE-1325 | Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error. |
| CVE-2026-13057 | Analyzed | 未確認 | CWE-20 | An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation |
| CVE-2026-13058 | Analyzed | 未確認 | CWE-617 | An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required f |
| CVE-2026-13059 | Analyzed | 未確認 | CWE-807 | An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient vali |
| CVE-2026-13060 | Analyzed | 未確認 | CWE-863 | An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup |
| CVE-2026-13061 | Analyzed | 未確認 | CWE-863 | An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restrict |
| CVE-2026-13062 | Analyzed | 未確認 | CWE-441 | An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-co |
| CVE-2026-13063 | Analyzed | 未確認 | CWE-190 | An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. Mong |
| CVE-2026-13064 | Analyzed | 未確認 | CWE-407 | Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resourc |
| CVE-2026-13065 | Analyzed | 未確認 | CWE-476 | A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod |
| CVE-2026-13066 | Analyzed | 未確認 | CWE-843 | Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data re |
| CVE-2026-13067 | Analyzed | 未確認 | CWE-863 | When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This |
| CVE-2026-13068 | Analyzed | 未確認 | CWE-863 | An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing quer |
| CVE-2026-13069 | Analyzed | 未確認 | CWE-770 | An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unval |
| CVE-2026-13070 | Analyzed | 未確認 | CWE-476 | A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling |
| CVE-2026-13071 | Analyzed | 未確認 | CWE-416 | An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves |
| CVE-2026-13072 | Analyzed | 未確認 | CWE-122 | When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory co |
| CVE-2026-13073 | Analyzed | 未確認 | CWE-617 | An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for al |
| CVE-2026-13074 | Analyzed | 未確認 | CWE-770 | An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust m |
| CVE-2026-13075 | Analyzed | 未確認 | CWE-770 | An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue |
| CVE-2026-13076 | Analyzed | 未確認 | CWE-770 | An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within M |
| CVE-2026-13077 | Analyzed | 未確認 | CWE-125 | A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can b |
| CVE-2026-13078 | Analyzed | 未確認 | CWE-862 | A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read |
| CVE-2026-13079 | Modified | 未確認 | CWE-732 | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on t |
| CVE-2026-13080 | Deferred | 未確認 | CWE-98 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1 |
| CVE-2026-13082 | Deferred | 未確認 | CWE-338, CWE-804 | GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an arr |
| CVE-2026-13084 | Analyzed | 未確認 | CWE-476 | A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by sending specially cr |
| CVE-2026-13089 | Deferred | 未確認 | CWE-347 | OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algo |
| CVE-2026-13103 | Deferred | 未確認 | CWE-22 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arb |
| CVE-2026-13104 | Deferred | 未確認 | CWE-250 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code wit |
| CVE-2026-13110 | Deferred | 未確認 | CWE-862 | The Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.1.0. This is due to a missing capability check on the bo |
| CVE-2026-13113 | Analyzed | 未確認 | CWE-367 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allo |
| CVE-2026-13114 | Deferred | 未確認 | CWE-79 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User Biographical Info in all ver |
| CVE-2026-13116 | Deferred | 未確認 | CWE-639 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generat |
| CVE-2026-13117 | Analyzed | 未確認 | CWE-416 | An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potenti |
| CVE-2026-13119 | Deferred | 未確認 | CWE-89 | The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJAX action |
| CVE-2026-13122 | Analyzed | 未確認 | CWE-617 | OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachabl |
| CVE-2026-13125 | Deferred | 未確認 | CWE-306 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-13126 | Analyzed | 未確認 | CWE-416 | The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting |
| CVE-2026-13127 | Analyzed | 未確認 | CWE-416 | The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails s |
| CVE-2026-13128 | Analyzed | 未確認 | CWE-416 | Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leadin |
| CVE-2026-13129 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the |
| CVE-2026-13131 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-13132 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-13142 | Deferred | 未確認 | CWE-269 | The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-pas |
| CVE-2026-13143 | Deferred | 未確認 | CWE-290 | The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal post-back handshake before marking a booking paid, allowing un |
| CVE-2026-13145 | Deferred | 未確認 | CWE-639 | The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account dashboard belongs to the current user, allowing any logged-in user |
| CVE-2026-13147 | Deferred | 未確認 | The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP req | |
| CVE-2026-13151 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-13152 | Deferred | 未確認 | CWE-269 | The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on |
| CVE-2026-13156 | Deferred | 未確認 | CWE-352 | The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it verifies the manage_options capability but ignores the nonce), s |
| CVE-2026-13161 | Deferred | 未確認 | CWE-89 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to generic SQL Injection via the 'alldata[truebooker_user]' parameter in all versions u |
| CVE-2026-13178 | Deferred | 未確認 | CWE-639 | The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an attacker-supplied order status, allowing unauthenticated users to create order |
| CVE-2026-13181 | Analyzed | 未確認 | CWE-470 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, |
| CVE-2026-13182 | Analyzed | 未確認 | CWE-209 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle |
| CVE-2026-13183 | Analyzed | 未確認 | CWE-208 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing differences, enabling re |
| CVE-2026-13184 | Analyzed | 未確認 | CWE-321 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity pr |
| CVE-2026-13185 | Analyzed | 未確認 | CWE-502 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie con |
| CVE-2026-13186 | Analyzed | 未確認 | CWE-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is deriv |
| CVE-2026-13187 | Analyzed | 未確認 | CWE-470 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentially altering dialog processing and enabling chained exploita |
| CVE-2026-13188 | Analyzed | 未確認 | CWE-345 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabling chained |
| CVE-2026-13189 | Analyzed | 未確認 | CWE-36 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may allow an attacker to influence server-side |
| CVE-2026-13190 | Analyzed | 未確認 | CWE-502 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persi |
| CVE-2026-13192 | Analyzed | 未確認 | CWE-918 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trig |
| CVE-2026-13199 | Awaiting Analysis | 未確認 | CWE-331 | EEPROM firmware on Raspberry Pi 5 and Compute Module 5 devices produced non-random KASLR and RNG seed values. This resulted in consistent kernel addresses across boots and devices, |
| CVE-2026-13204 | Undergoing Analysis | 未確認 | CWE-617 | If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with |
| CVE-2026-13211 | Deferred | 未確認 | CWE-201 | The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Adm |
| CVE-2026-13221 | Modified | 未確認 | CWE-190 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65 |
| CVE-2026-13228 | Deferred | 未確認 | CWE-269 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5. |
| CVE-2026-13230 | Analyzed | 未確認 | CWE-200 | An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without |
| CVE-2026-13231 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Stored XSS. This |
| CVE-2026-13232 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_fee |
| CVE-2026-13233 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, fro |
| CVE-2026-13234 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This is |
| CVE-2026-13235 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, |
| CVE-2026-13236 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3 |
| CVE-2026-13237 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1 |
| CVE-2026-13238 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0. |
| CVE-2026-13239 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0. |
| CVE-2026-13240 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0. |
| CVE-2026-13241 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0. |
| CVE-2026-13242 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation |
| CVE-2026-13243 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Salesforce Suite allows Cross Site Request Forgery. This issue affects Salesforce Suite versions: from 0.0.0 to 5.1.3. |
| CVE-2026-13244 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium |
| CVE-2026-13246 | Deferred | 未確認 | CWE-79 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'block_id' (and other) shortcode attributes of the ' |
| CVE-2026-13247 | Deferred | 未確認 | CWE-79 | The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgx_tooltip_position' |
| CVE-2026-13250 | Deferred | 未確認 | CWE-862 | The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. This is due to the plugin not properly verifying that a use |
| CVE-2026-13251 | Deferred | 未確認 | CWE-22 | The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthentica |
| CVE-2026-13252 | Deferred | 未確認 | CWE-79 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'aspectRatio' |
| CVE-2026-13253 | Deferred | 未確認 | CWE-79 | The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions |
| CVE-2026-13262 | Deferred | 未確認 | CWE-89 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'val' parameter in all versions up t |
| CVE-2026-13268 | Awaiting Analysis | 未確認 | CWE-59 | G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installat |
| CVE-2026-13305 | Awaiting Analysis | 未確認 | CWE-347 | Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically presen |
| CVE-2026-13306 | Awaiting Analysis | 未確認 | CWE-306 | Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations o |
| CVE-2026-13307 | Awaiting Analysis | 未確認 | CWE-122 | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary c |
| CVE-2026-13308 | Awaiting Analysis | 未確認 | CWE-191 | Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i |
| CVE-2026-13309 | Awaiting Analysis | 未確認 | CWE-121 | Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary |
| CVE-2026-13320 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have |
| CVE-2026-13321 | Undergoing Analysis | 未確認 | CWE-346 | The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50 |
| CVE-2026-13323 | Analyzed | 未確認 | CWE-79 | In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a Content-Security-Policy or Content-Disposi |
| CVE-2026-13330 | Deferred | 未確認 | CWE-79 | The Animation Addons for Elementor WordPress plugin before 2.7.0 does not sanitise uploaded SVG/SVGZ files, which it adds to the list of allowed upload types, allowing users with |
| CVE-2026-13332 | Deferred | 未確認 | CWE-287 | The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated att |
| CVE-2026-13334 | Deferred | 未確認 | CWE-79 | The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient inpu |
| CVE-2026-13341 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection a |
| CVE-2026-13344 | Deferred | 未確認 | CWE-79 | The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it, allowing users with C |
| CVE-2026-13345 | Deferred | 未確認 | CWE-639 | The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-c |
| CVE-2026-13346 | Analyzed | 未確認 | CWE-36 | pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulner |
| CVE-2026-13347 | Deferred | 未確認 | CWE-22 | The Hide My WP Lite plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 1.3 via the he_wrapper_js and he_wrapper_css query parameters processe |
| CVE-2026-13352 | Deferred | 未確認 | CWE-434 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Arbitrary File Uploa |
| CVE-2026-13353 | Deferred | 未確認 | CWE-94 | The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.0. |
| CVE-2026-13356 | Analyzed | 未確認 | CWE-451 | A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar w |
| CVE-2026-13357 | Deferred | 未確認 | CWE-89 | The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.46 due to insufficient escaping o |
| CVE-2026-13368 | Analyzed | 未確認 | CWE-416 | WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attac |
| CVE-2026-13369 | Deferred | 未確認 | CWE-22 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function in versions up to, and including, 3.3.29. This is due to th |
| CVE-2026-13371 | Analyzed | 未確認 | CWE-502 | An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data endpoint, which perf |
| CVE-2026-13373 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows |
| CVE-2026-13374 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allo |
| CVE-2026-13375 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows |
| CVE-2026-13376 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulne |
| CVE-2026-13377 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnera |
| CVE-2026-13378 | Deferred | 未確認 | CWE-79 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1. |
| CVE-2026-13379 | Analyzed | 未確認 | CWE-125, CWE-142 | The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain d |
| CVE-2026-13380 | Analyzed | 未確認 | CWE-201, CWE-312 | VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these respo |
| CVE-2026-13381 | Analyzed | 未確認 | CWE-639 | VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'r |
| CVE-2026-13383 | Modified | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted reque |
| CVE-2026-13384 | Modified | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted reques |
| CVE-2026-13385 | Deferred | 未確認 | CWE-295, CWE-354 | An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router do |
| CVE-2026-13390 | Deferred | 未確認 | CWE-862 | The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for |
| CVE-2026-13392 | Deferred | 未確認 | CWE-94 | The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written ve |
| CVE-2026-13393 | Deferred | 未確認 | CWE-79 | The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the fro |
| CVE-2026-13395 | Deferred | 未確認 | CWE-89 | The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end b |
| CVE-2026-13397 | Deferred | 未確認 | CWE-835 | HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state curs |
| CVE-2026-13400 | Deferred | 未確認 | CWE-79 | Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.12.2. The root cause is a sanitization-ordering de |
| CVE-2026-13401 | Deferred | 未確認 | CWE-835 | XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state curso |
| CVE-2026-13402 | Deferred | 未確認 | CWE-200 | The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing |
| CVE-2026-13410 | Deferred | 未確認 | CWE-295 | Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is initialised with SSL_verify_mode explicitly disabled. An atta |
| CVE-2026-13423 | Deferred | 未確認 | CWE-94 | The Streamit WordPress theme through 4.5.0 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PH |
| CVE-2026-13425 | Deferred | 未確認 | CWE-79 | The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient i |
| CVE-2026-13430 | Deferred | 未確認 | CWE-434 | The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import_media_file_secure function |
| CVE-2026-13432 | Deferred | 未確認 | CWE-862 | The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to |
| CVE-2026-13435 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation. |
| CVE-2026-13439 | Deferred | 未確認 | CWE-269 | The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is du |
| CVE-2026-13440 | Deferred | 未確認 | CWE-79 | The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t |
| CVE-2026-13441 | Deferred | 未確認 | CWE-79 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_event_type_background_color' parameter in all |
| CVE-2026-13442 | Analyzed | 未確認 | CWE-520 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This caus |
| CVE-2026-13443 | Deferred | 未確認 | CWE-79 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Lesson Attachment Title in all versions up to, and includ |
| CVE-2026-13444 | Analyzed | 未確認 | CWE-520 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and |
| CVE-2026-13445 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolut |
| CVE-2026-13446 | Analyzed | 未確認 | CWE-798 | IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communica |
| CVE-2026-13448 | Modified | 未確認 | CWE-184 | IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow |
| CVE-2026-13450 | Deferred | 未確認 | CWE-639 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio |
| CVE-2026-13454 | Deferred | 未確認 | CWE-89 | The MotoPress Appointment Booking plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 2.4.5 due to insufficient |
| CVE-2026-13459 | Deferred | 未確認 | CWE-862 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due to the plugin n |
| CVE-2026-13461 | Deferred | 未確認 | When coupled with the SSL bypass vulnerability, JavaScript can be injected into a WebView in the PayRange version 7.0.7 app. The injection of specific JavaScript function calls all | |
| CVE-2026-13462 | Deferred | 未確認 | PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application webviews. A remote and unauthenti | |
| CVE-2026-13463 | Analyzed | 未確認 | CWE-798 | IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files. |
| CVE-2026-13464 | Deferred | 未確認 | CWE-639 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 |
| CVE-2026-13468 | Deferred | 未確認 | CWE-862 | The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is |
| CVE-2026-13473 | Analyzed | 未確認 | CWE-122 | IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bou |
| CVE-2026-13492 | Deferred | 未確認 | CWE-22 | The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This is due to insufficient validation of file-field values in t |
| CVE-2026-13577 | Deferred | 未確認 | CWE-338, CWE-340 | Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls |
| CVE-2026-13584 | Deferred | 未確認 | CWE-924 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller |
| CVE-2026-13585 | Deferred | 未確認 | CWE-226, CWE-770 | Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business M |
| CVE-2026-1359 | Deferred | 未確認 | CWE-863 | The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the genolve_setOpt() functio |
| CVE-2026-13597 | Deferred | 未確認 | CWE-287 | The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check always passes, and it discloses the generated login code in the |
| CVE-2026-1360 | Deferred | 未確認 | CWE-502 | The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 14.5.0 This is due to the `bp_unserialize_profile_field |
| CVE-2026-13602 | Deferred | 未確認 | CWE-20, CWE-323 | We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: * The payment inte |
| CVE-2026-13603 | Deferred | 未確認 | CWE-20, CWE-918 | The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based on Oppwa's technology. The integration of Oppwa, f |
| CVE-2026-13605 | Deferred | 未確認 | CWE-79 | The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Be |
| CVE-2026-13609 | Deferred | 未確認 | CWE-79 | The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing it, which restores HTML tags that the sanitiz |
| CVE-2026-1365 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologies Inc. OSOS allows Authentication Bypass. This issue affects OSOS: through 09072026. NOT |
| CVE-2026-13690 | Deferred | 未確認 | CWE-287 | The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor login handler, allowing an attacker who already knows a user's |
| CVE-2026-13692 | Deferred | 未確認 | CWE-862 | The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to t |
| CVE-2026-13693 | Deferred | 未確認 | CWE-22 | The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to a notification email, allowing unau |
| CVE-2026-13694 | Deferred | 未確認 | CWE-862 | The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to r |
| CVE-2026-13696 | Deferred | 未確認 | CWE-90 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: |
| CVE-2026-13697 | Analyzed | 未確認 | CWE-200, CWE-248, CWE-525 | undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate |
| CVE-2026-13698 | Analyzed | 未確認 | CWE-401, CWE-770 | A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially |
| CVE-2026-13699 | Analyzed | 未確認 | CWE-20 | In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field in PublishValueRequest. W |
| CVE-2026-13704 | Deferred | 未確認 | CWE-79 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sequoia[introduction][image]' parameter in all vers |
| CVE-2026-13705 | Deferred | 未確認 | CWE-125 | Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guard |
| CVE-2026-13706 | Analyzed | 未確認 | CWE-20 | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php. |
| CVE-2026-13707 | Analyzed | 未確認 | CWE-384 | Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from |
| CVE-2026-13708 | Deferred | 未確認 | CWE-401 | Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpe |
| CVE-2026-13710 | Deferred | 未確認 | CWE-79 | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box wid |
| CVE-2026-13713 | Deferred | 未確認 | CWE-415, CWE-416 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an anc |
| CVE-2026-13714 | Deferred | 未確認 | CWE-434 | The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded files, and its file upload functionality is gated only by an |
| CVE-2026-1372 | Deferred | 未確認 | CWE-862 | The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.0.0 This is due to missing capability checks on t |
| CVE-2026-13722 | Analyzed | 未確認 | CWE-347 | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerab |
| CVE-2026-13723 | Deferred | 未確認 | CWE-22, CWE-59 | A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization |
| CVE-2026-13724 | Deferred | 未確認 | CWE-602 | Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows |
| CVE-2026-13726 | Deferred | 未確認 | CWE-79 | The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected C |
| CVE-2026-13728 | Modified | 未確認 | CWE-798 | In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources. This vulnerabilit |
| CVE-2026-13731 | Deferred | 未確認 | CWE-79 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all vers |
| CVE-2026-13733 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute in all versions up to, and including, 3.3.60 due to ins |
| CVE-2026-13741 | Deferred | 未確認 | CWE-269 | The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missin |
| CVE-2026-13743 | Awaiting Analysis | 未確認 | CWE-347 | CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker |
| CVE-2026-13753 | Awaiting Analysis | 未確認 | CWE-703 | Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through expos |
| CVE-2026-13754 | Deferred | 未確認 | CWE-89 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 3.6.0.0 due to in |
| CVE-2026-13755 | Deferred | 未確認 | CWE-79 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute in all versions up to, and incl |
| CVE-2026-13756 | Deferred | 未確認 | CWE-269 | The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.3.3. This is due to missing authorization and meta key valida |
| CVE-2026-13760 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strin |
| CVE-2026-13765 | Deferred | 未確認 | CWE-862 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, |
| CVE-2026-13767 | Deferred | 未確認 | CWE-89 | The Quiz Master Next plugin for WordPress is vulnerable to SQL Injection via stored quiz page data in versions up to, and including, 11.2.0. This is due to insufficient escaping on |
| CVE-2026-13768 | Deferred | 未確認 | CWE-798 | Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection informatio |
| CVE-2026-13769 | Analyzed | 未確認 | CWE-732 | Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the de |
| CVE-2026-13771 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Shortcode Attribute in all versions up to, and including, 5.113.0 |
| CVE-2026-1382 | Deferred | 未確認 | CWE-79 | The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode in all versions up to, and including, 1.0.7 due to insuffic |
| CVE-2026-14029 | Deferred | 未確認 | CWE-89 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'select' parameter in all versions up to, and includ |
| CVE-2026-14158 | Deferred | 未確認 | CWE-434 | The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.52 via the widget_logic_visual_check_visibility function |
| CVE-2026-14165 | Awaiting Analysis | 未確認 | CWE-639 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users w |
| CVE-2026-14167 | Deferred | 未確認 | CWE-863 | A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization. |
| CVE-2026-14168 | Deferred | 未確認 | CWE-862 | A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system acces |
| CVE-2026-14169 | Deferred | 未確認 | CWE-696 | Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could resul |
| CVE-2026-14170 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-14171 | Deferred | 未確認 | CWE-601 | An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of c |
| CVE-2026-14172 | Awaiting Analysis | 未確認 | CWE-250 | Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged u |
| CVE-2026-14181 | Analyzed | 未確認 | CWE-248 | @fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded se |
| CVE-2026-14183 | Deferred | 未確認 | CWE-639 | The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated |
| CVE-2026-14184 | Deferred | 未確認 | CWE-639 | The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of its lesson AJAX handlers, allowing authenticated users with |
| CVE-2026-14185 | Deferred | 未確認 | CWE-862 | The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users w |
| CVE-2026-14188 | Deferred | 未確認 | CWE-200 | The Easy Appointments WordPress plugin before 3.12.28 does not perform a per-request capability or nonce check on one of its customer-listing handlers, allowing authenticated users |
| CVE-2026-14189 | Deferred | 未確認 | CWE-89 | The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to |
| CVE-2026-14190 | Deferred | 未確認 | CWE-79 | The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecti |
| CVE-2026-14191 | Deferred | 未確認 | CWE-129, CWE-787 | An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when th |
| CVE-2026-14193 | Deferred | 未確認 | CWE-129 | DVP80ES300T with Improper Validation of Array Index Vulnerability |
| CVE-2026-14198 | Analyzed | 未確認 | CWE-436 | @fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before matching middleware paths, while Fastify's underlying router preserves |
| CVE-2026-14203 | Deferred | 未確認 | CWE-79 | The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the C |
| CVE-2026-14207 | Deferred | 未確認 | CWE-79 | The LifterLMS WordPress plugin before 10.0.10 does not strip event-handler attributes from a course pricing field before storing and rendering it, allowing users with a course-edi |
| CVE-2026-14221 | Deferred | 未確認 | CWE-284 | The Easy Appointments WordPress plugin through 4.0 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticat |
| CVE-2026-14222 | Deferred | 未確認 | CWE-284 | The Easy Appointments WordPress plugin before 3.12.28 does not perform any capability or nonce check in one of its connection-deletion actions, allowing users with contributor-leve |
| CVE-2026-14223 | Deferred | 未確認 | CWE-639 | The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to |
| CVE-2026-14224 | Deferred | 未確認 | CWE-639 | The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only |
| CVE-2026-14226 | Deferred | 未確認 | CWE-200 | The Easy Appointments WordPress plugin before 3.12.28 does not require a sufficient capability on one of its appointment-listing REST endpoints, restricting it only to a capability |
| CVE-2026-14227 | Deferred | 未確認 | CWE-613 | An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active session |
| CVE-2026-14231 | Deferred | 未確認 | CWE-200 | The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing an |
| CVE-2026-14234 | Deferred | 未確認 | CWE-352, CWE-79 | The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administr |
| CVE-2026-14235 | Deferred | 未確認 | CWE-284 | The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session nor expire it promptly, making the token a long-lived, mult |
| CVE-2026-14236 | Deferred | 未確認 | CWE-601 | The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a Stripe chec |
| CVE-2026-14239 | Deferred | 未確認 | CWE-352, CWE-79 | The tourmaster WordPress plugin before 5.4.8 does not perform a nonce check when storing a custom-filter label taken from a request parameter, and does not escape that label when e |
| CVE-2026-14244 | Deferred | 未確認 | CWE-22 | The Jssor Slider by jssor.com plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.1.24 via the 'url' parameter parameter. This makes i |
| CVE-2026-14245 | Deferred | 未確認 | CWE-862 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions u |
| CVE-2026-14249 | Deferred | 未確認 | CWE-74 | The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the emd_delete_file AJAX action. This is due to the emd_delete_ |
| CVE-2026-14250 | Deferred | 未確認 | CWE-269 | The Themehunk Login Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.2. This is due to the handle_frontend_register() f |
| CVE-2026-14251 | Deferred | 未確認 | CWE-862 | A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD |
| CVE-2026-14253 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-14254 | Awaiting Analysis | 未確認 | CWE-307 | A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. Parallel login |
| CVE-2026-14257 | Analyzed | 未確認 | CWE-400, CWE-770 | brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but d |
| CVE-2026-14258 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery opti |
| CVE-2026-14261 | Deferred | 未確認 | A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall | |
| CVE-2026-14262 | Deferred | 未確認 | CWE-269 | The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Bypass to Privilege Escalation in all versions up to, and inclu |
| CVE-2026-14265 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the s |
| CVE-2026-14266 | Analyzed | 未確認 | CWE-122 | 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-14270 | Deferred | 未確認 | CWE-434 | The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includ |
| CVE-2026-14278 | Rejected | 未確認 | Rejected reason: After further coordination, CVE was determined to not be warranted. | |
| CVE-2026-14282 | Deferred | 未確認 | CWE-434 | The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in version |
| CVE-2026-14286 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-14289 | Deferred | 未確認 | CWE-94 | The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryptographic |
| CVE-2026-14291 | Deferred | 未確認 | CWE-287 | The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenti |
| CVE-2026-14300 | Deferred | 未確認 | CWE-287 | The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin before 7.8.0 does not bind the one-time code used by its optional email-verification |
| CVE-2026-14305 | Deferred | 未確認 | CWE-287 | The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata |
| CVE-2026-14310 | Deferred | 未確認 | CWE-639 | The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A thread belongs to before returning or writing to that thread, allow |
| CVE-2026-14317 | Deferred | 未確認 | CWE-862 | The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, wh |
| CVE-2026-14318 | Deferred | 未確認 | CWE-79 | The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role an |
| CVE-2026-14319 | Deferred | 未確認 | CWE-200 | The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated users to retri |
| CVE-2026-14322 | Deferred | 未確認 | CWE-284 | The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allow |
| CVE-2026-14324 | Awaiting Analysis | 未確認 | CWE-476 | RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return. |
| CVE-2026-14327 | Deferred | 未確認 | CWE-22 | The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible |
| CVE-2026-14328 | Deferred | 未確認 | CWE-269 | The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. |
| CVE-2026-1433 | Awaiting Analysis | 未確認 | CWE-522 | uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration in |
| CVE-2026-14330 | Awaiting Analysis | 未確認 | CWE-770 | Multiple unbounded alloca() calls in the PulseAudio protocol server. |
| CVE-2026-14333 | Deferred | 未確認 | CWE-269 | The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable filename and without access protection, allowing |
| CVE-2026-14336 | Deferred | 未確認 | CWE-918 | PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_known, pia/models.py:139) instead of vali |
| CVE-2026-14340 | Analyzed | 未確認 | CWE-863 | An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write |
| CVE-2026-14341 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-14342 | Deferred | 未確認 | CWE-89 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to time-based SQL Injection via the 'contact_ids' parameter in |
| CVE-2026-14343 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes in all versions up to, and including, |
| CVE-2026-14345 | Deferred | 未確認 | CWE-434 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3. |
| CVE-2026-14351 | Analyzed | 未確認 | CWE-1230 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have al |
| CVE-2026-14352 | Deferred | 未確認 | CWE-22 | The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possib |
| CVE-2026-14354 | Awaiting Analysis | 未確認 | CWE-522 | CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise |
| CVE-2026-14355 | Analyzed | 未確認 | CWE-122 | In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer |
| CVE-2026-14356 | Deferred | 未確認 | CWE-862 | The FleekDash V2 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2.2. This is due to the plugin not properly verifying that a u |
| CVE-2026-14358 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Extension allows Cross-Site Script |
| CVE-2026-14361 | Deferred | 未確認 | CWE-59 | The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside |
| CVE-2026-14362 | Deferred | 未確認 | CWE-770 | HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip po |
| CVE-2026-14363 | Undergoing Analysis | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. Th |
| CVE-2026-14371 | Awaiting Analysis | 未確認 | CWE-78 | The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing re |
| CVE-2026-14372 | Deferred | 未確認 | CWE-22 | The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fil |
| CVE-2026-14373 | Deferred | 未確認 | CWE-862 | HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options. This may allow an authenticated job |
| CVE-2026-14380 | Modified | 未確認 | CWE-470, CWE-95 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it int |
| CVE-2026-14381 | Analyzed | 未確認 | CWE-290, CWE-451 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit |
| CVE-2026-14382 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-14383 | Analyzed | 未確認 | CWE-119, CWE-94 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-14384 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-14385 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium sec |
| CVE-2026-14386 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pag |
| CVE-2026-14387 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sever |
| CVE-2026-14388 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pag |
| CVE-2026-14389 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-14390 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-14391 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive info |
| CVE-2026-14392 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se |
| CVE-2026-14393 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-14394 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: |
| CVE-2026-14395 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-14396 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-14397 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-14398 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-14399 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-14400 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-14401 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-14402 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-14403 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-14404 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: |
| CVE-2026-14405 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-14406 | Analyzed | 未確認 | CWE-125 | Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive informati |
| CVE-2026-14407 | Analyzed | 未確認 | CWE-119, CWE-94 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-14408 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-14409 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary cod |
| CVE-2026-14410 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted |
| CVE-2026-14411 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-14412 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-14413 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-14414 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially |
| CVE-2026-14415 | Analyzed | 未確認 | CWE-122 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit h |
| CVE-2026-14416 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sev |
| CVE-2026-14417 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit |
| CVE-2026-14418 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-14419 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit |
| CVE-2026-14420 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium se |
| CVE-2026-14421 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-14422 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. ( |
| CVE-2026-14423 | Analyzed | 未確認 | CWE-843 | Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severit |
| CVE-2026-14424 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-14425 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-14426 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a san |
| CVE-2026-14427 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-14428 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentia |
| CVE-2026-14429 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-14430 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-14431 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-14432 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-14439 | Deferred | 未確認 | CWE-22, CWE-94 | A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulation |
| CVE-2026-14440 | Awaiting Analysis | 未確認 | CWE-693 | Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This au |
| CVE-2026-14446 | Analyzed | 未確認 | CWE-306 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console. |
| CVE-2026-14448 | Deferred | 未確認 | CWE-78 | An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special element |
| CVE-2026-14449 | Deferred | 未確認 | CWE-79 | u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components |
| CVE-2026-14453 | Awaiting Analysis | 未確認 | CWE-94 | This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is |
| CVE-2026-14454 | Analyzed | 未確認 | CWE-196, CWE-789 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This |
| CVE-2026-14459 | Deferred | 未確認 | CWE-88 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows A |
| CVE-2026-14460 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from |
| CVE-2026-14461 | Awaiting Analysis | 未確認 | CWE-125 | mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returni |
| CVE-2026-14468 | Deferred | 未確認 | CWE-22 | HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that did not correctly enforce the intended boundary on packaged |
| CVE-2026-14471 | Awaiting Analysis | 未確認 | CWE-89 | Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon mcp-gateway-registry before 1.0.13 might allow an authenticated r |
| CVE-2026-14474 | Awaiting Analysis | 未確認 | CWE-1188 | A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects |
| CVE-2026-14475 | Deferred | 未確認 | CWE-89 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scan_id' parameter in all versions up to, and including |
| CVE-2026-14476 | Awaiting Analysis | 未確認 | CWE-23 | A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowin |
| CVE-2026-14480 | Deferred | 未確認 | CWE-73 | OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attacker‑supplied filename |
| CVE-2026-14481 | Deferred | 未確認 | CWE-79 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' parameter in |
| CVE-2026-14482 | Deferred | 未確認 | CWE-269 | The 多说社会化评论框 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. The vulnerability exists due to a missing capability and nonce ch |
| CVE-2026-14483 | Deferred | 未確認 | CWE-434 | The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. T |
| CVE-2026-14487 | Deferred | 未確認 | CWE-22 | The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the removeUploadDir function in all versions up t |
| CVE-2026-14488 | Deferred | 未確認 | CWE-862 | The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatcher in the MB Frontend Submission extension in versions up to, and inc |
| CVE-2026-14489 | Deferred | 未確認 | CWE-434 | The WHMCS Bridge plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the connect() function in all versions up to, and including, 6. |
| CVE-2026-14490 | Deferred | 未確認 | CWE-22 | The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 0.0.7. The vul |
| CVE-2026-14495 | Deferred | 未確認 | CWE-338 | The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists bec |
| CVE-2026-14499 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of |
| CVE-2026-14500 | Deferred | 未確認 | CWE-22 | The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouw_fetch_csv_data() AJAX |
| CVE-2026-14501 | Analyzed | 未確認 | CWE-676 | IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions wi |
| CVE-2026-14503 | Deferred | 未確認 | CWE-200 | The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pcl_ajax_process_request_inner. Thi |
| CVE-2026-14504 | Analyzed | 未確認 | CWE-862 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arb |
| CVE-2026-14512 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or |
| CVE-2026-14515 | Analyzed | 未確認 | CWE-79 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack. |
| CVE-2026-14516 | Deferred | 未確認 | CWE-89 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to time-based SQL Injection via the 'staff_ids' parameter in all versions up to, an |
| CVE-2026-14519 | Analyzed | 未確認 | CWE-22 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability. |
| CVE-2026-14522 | Analyzed | 未確認 | CWE-78 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of |
| CVE-2026-14528 | Analyzed | 未確認 | CWE-532 | IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information. |
| CVE-2026-14529 | Analyzed | 未確認 | CWE-306 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSR |
| CVE-2026-14534 | Analyzed | 未確認 | CWE-184, CWE-502 | Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fic |
| CVE-2026-14535 | Analyzed | 未確認 | CWE-693 | In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it in |
| CVE-2026-14536 | Modified | 未確認 | CWE-863 | Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attacker with valid user credentials to bypass the MFA Required po |
| CVE-2026-14537 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protecte |
| CVE-2026-14538 | Analyzed | 未確認 | CWE-285, CWE-863 | An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authen |
| CVE-2026-14539 | Analyzed | 未確認 | CWE-770 | An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to |
| CVE-2026-14540 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox imple |
| CVE-2026-14541 | Analyzed | 未確認 | CWE-287 | An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initia |
| CVE-2026-14544 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or a |
| CVE-2026-14545 | Deferred | 未確認 | CWE-269 | The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password through one of its front-end account handlers, allowing unauthent |
| CVE-2026-14551 | Deferred | 未確認 | CWE-269, CWE-379, CWE-73 | The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged |
| CVE-2026-14554 | Deferred | 未確認 | CWE-89 | The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privilege |
| CVE-2026-14568 | Deferred | 未確認 | CWE-287 | The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownersh |
| CVE-2026-14570 | Deferred | 未確認 | CWE-330 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom |
| CVE-2026-14586 | Awaiting Analysis | 未確認 | CWE-617 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestam |
| CVE-2026-14592 | Deferred | 未確認 | CWE-79 | The WP Real IP-based Access Control WordPress plugin through 1.3.1 does not perform any capability or nonce checks before storing one of its option values, and does not escape that |
| CVE-2026-14602 | Deferred | 未確認 | CWE-94 | The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, allowing unauthenticated attackers to inject arbitrary PHP obj |
| CVE-2026-14603 | Deferred | 未確認 | CWE-284 | The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site' |
| CVE-2026-14604 | Deferred | 未確認 | CWE-119, CWE-415 | A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp |
| CVE-2026-14605 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the comp |
| CVE-2026-14606 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/ |
| CVE-2026-14607 | Deferred | 未確認 | CWE-119 | A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sys_getaddrinfo of the file components/lwp/lwp_syscall.c. Executing a manipulation of the argumen |
| CVE-2026-14608 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /ind |
| CVE-2026-14609 | Deferred | 未確認 | CWE-384 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results i |
| CVE-2026-14610 | Deferred | 未確認 | CWE-119, CWE-122 | A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of t |
| CVE-2026-14611 | Deferred | 未確認 | CWE-200, CWE-668 | A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the function initProjectMemory of the file src/managers/MemoryManager.ts of the component Per- |
| CVE-2026-14612 | Awaiting Analysis | 未確認 | CWE-787 | Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a config |
| CVE-2026-14613 | Modified | 未確認 | CWE-1220, CWE-284 | A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new |
| CVE-2026-14614 | Analyzed | 未確認 | CWE-284, CWE-639 | A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled. This issue allows a delegated administrator, |
| CVE-2026-14615 | Analyzed | 未確認 | CWE-1220 | A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative services. When FGAP v2 is enabled, the system fails to properly fil |
| CVE-2026-14617 | Deferred | 未確認 | CWE-178, CWE-697 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer._filter_and_accumulate of the file gateway/s |
| CVE-2026-14618 | Deferred | 未確認 | CWE-404 | A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component |
| CVE-2026-14619 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argum |
| CVE-2026-14620 | Analyzed | 未確認 | CWE-352, CWE-749 | webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changi |
| CVE-2026-14621 | Deferred | 未確認 | CWE-488 | A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/f |
| CVE-2026-14622 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/aja |
| CVE-2026-14623 | Deferred | 未確認 | CWE-404 | A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manip |
| CVE-2026-14624 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handle |
| CVE-2026-14625 | Deferred | 未確認 | CWE-693 | A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gateway/server.py. The manipulation r |
| CVE-2026-14626 | Deferred | 未確認 | CWE-404 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgent.run_conversation of the file run_agent.py of the component |
| CVE-2026-14627 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This affects the function DiscordAdapter._is_allowed_user of the file gateway/platforms/discor |
| CVE-2026-14628 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base.py of the component Live Webho |
| CVE-2026-14629 | Deferred | 未確認 | CWE-369, CWE-404 | A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp/lwp_syscall.c of the component Parameter Handler. Executing |
| CVE-2026-14630 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the function get_conversation_history of the file 08_agentic_system/mem |
| CVE-2026-14631 | Analyzed | 未確認 | CWE-20, CWE-248 | webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a |
| CVE-2026-14632 | Deferred | 未確認 | CWE-601 | A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the f |
| CVE-2026-14633 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php/ap |
| CVE-2026-14634 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPostRe |
| CVE-2026-14635 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82c3674c52b. This issue affects some unknown processing of the |
| CVE-2026-14636 | Deferred | 未確認 | CWE-22 | A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 23105f25dadf57b4314fc015a63a7c6e910c89df. Impacted is the function do_upload_others_images of th |
| CVE-2026-14637 | Deferred | 未確認 | CWE-20, CWE-502 | A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCa |
| CVE-2026-14638 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql |
| CVE-2026-14639 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?edit_account. Such ma |
| CVE-2026-14640 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipula |
| CVE-2026-14641 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_course.php. Exe |
| CVE-2026-14642 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.php. The manip |
| CVE-2026-14643 | Analyzed | 未確認 | CWE-436, CWE-524 | undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to befor |
| CVE-2026-14645 | Analyzed | 未確認 | CWE-918 | Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capabi |
| CVE-2026-14646 | Analyzed | 未確認 | CWE-918 | Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with r |
| CVE-2026-14647 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxrun |
| CVE-2026-14648 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authentication.php of the co |
| CVE-2026-14649 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument vot |
| CVE-2026-14650 | Deferred | 未確認 | CWE-404 | A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grass_compiler::raw_to_parse_error of the component UTF-8 Character Handler. Executing |
| CVE-2026-14651 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grass_compiler::selector::extend/grass_compiler::evaluate::visitor. The manip |
| CVE-2026-14652 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. Th |
| CVE-2026-14653 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This mani |
| CVE-2026-14654 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such mani |
| CVE-2026-14655 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipu |
| CVE-2026-14656 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argu |
| CVE-2026-14657 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Quer |
| CVE-2026-14658 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the a |
| CVE-2026-14659 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argumen |
| CVE-2026-14660 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUs |
| CVE-2026-14683 | Deferred | 未確認 | CWE-400, CWE-789 | A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/m |
| CVE-2026-14684 | Deferred | 未確認 | CWE-400, CWE-789 | A flaw has been found in HdrHistogram up to 2.2.2. This affects the function org.HdrHistogram.AbstractHistogram.decodeFromByteBuffer of the file src/main/java/org/HdrHistogram/Abst |
| CVE-2026-14685 | Deferred | 未確認 | CWE-371 | A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function recordValueWithCount of the file src/main/java/org/HdrHistogram/AbstractHistogra |
| CVE-2026-14686 | Deferred | 未確認 | CWE-697 | A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/Doubl |
| CVE-2026-14687 | Deferred | 未確認 | CWE-187, CWE-697 | A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the file InsightEngine/agent.py of the component InsightEngine sear |
| CVE-2026-14688 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. The manipulation of the |
| CVE-2026-14689 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-visitor/add-apartment.p |
| CVE-2026-14690 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipul |
| CVE-2026-14691 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classes/S |
| CVE-2026-14692 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file classes/Master.php of t |
| CVE-2026-14693 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.ph |
| CVE-2026-14694 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Master.p |
| CVE-2026-14695 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component |
| CVE-2026-14698 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload_files.php. |
| CVE-2026-14699 | Deferred | 未確認 | CWE-59, CWE-61 | A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulat |
| CVE-2026-14700 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/login.php of the comp |
| CVE-2026-14701 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.php of the component P |
| CVE-2026-14702 | Deferred | 未確認 | CWE-310, CWE-330 | A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube- |
| CVE-2026-14703 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation of the argument edit |
| CVE-2026-14704 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results |
| CVE-2026-14705 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the a |
| CVE-2026-14706 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Creation Feature. The m |
| CVE-2026-14713 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The m |
| CVE-2026-14714 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects the function verify_server of the file channel/wechatmp/common.py of the component w |
| CVE-2026-14716 | Deferred | 未確認 | CWE-285, CWE-863 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.13.0-beta.2. Impacted is the function MethodRouter.Handle of the file internal/gateway/router.go of th |
| CVE-2026-14717 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Performing a manipulation of |
| CVE-2026-14719 | Deferred | 未確認 | CWE-266, CWE-269 | A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Re |
| CVE-2026-14721 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web Endpoi |
| CVE-2026-14722 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of |
| CVE-2026-14723 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. This |
| CVE-2026-14725 | Deferred | 未確認 | CWE-613 | A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session |
| CVE-2026-14730 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientprofile.php. Performing |
| CVE-2026-14731 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipulation of the argument |
| CVE-2026-14732 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_exam.php. The manipula |
| CVE-2026-14733 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php. The manipulation of |
| CVE-2026-14734 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation of the argument ID c |
| CVE-2026-14735 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the a |
| CVE-2026-14736 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argum |
| CVE-2026-14737 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation |
| CVE-2026-14738 | Deferred | 未確認 | CWE-327, CWE-328 | A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component Vis |
| CVE-2026-14739 | Analyzed | 未確認 | CWE-787 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough m |
| CVE-2026-14740 | Analyzed | 未確認 | CWE-125 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the |
| CVE-2026-14741 | Deferred | 未確認 | CWE-1333 | HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative |
| CVE-2026-14742 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of the c |
| CVE-2026-14743 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argum |
| CVE-2026-14744 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the arg |
| CVE-2026-14745 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipulation of the argumen |
| CVE-2026-14746 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manipulation of the argume |
| CVE-2026-14747 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the file /addprojectsale.php. The manipulation |
| CVE-2026-14748 | Deferred | 未確認 | CWE-918 | A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab. Affected by this issue is some unknown functionality of the file mcp-wiki/src/ |
| CVE-2026-14749 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/ca |
| CVE-2026-14750 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The affected element is the function Notes_controller::accessing_dictiona |
| CVE-2026-14751 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The impacted element is the function Notes_controller::search_scratch_data of |
| CVE-2026-14752 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This affects the function add_definition of the file application/P |
| CVE-2026-14753 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This impacts an unknown function of the file /PHP/objects/notes of the component |
| CVE-2026-14754 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of the argument |
| CVE-2026-14755 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/reservations.php of |
| CVE-2026-14756 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/add_tour.php of the component |
| CVE-2026-14757 | Analyzed | 未確認 | CWE-189, CWE-190 | A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer over |
| CVE-2026-14758 | Analyzed | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpa |
| CVE-2026-14759 | Analyzed | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the c |
| CVE-2026-14760 | Analyzed | 未確認 | CWE-119, CWE-416 | A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. |
| CVE-2026-14761 | Analyzed | 未確認 | CWE-189, CWE-190 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulat |
| CVE-2026-14762 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Mana |
| CVE-2026-14763 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tour_reserves.php of the component Tour Reservations P |
| CVE-2026-14764 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add_event.php of the component Event Manageme |
| CVE-2026-14766 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/search-resu |
| CVE-2026-14767 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST P |
| CVE-2026-14768 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc |
| CVE-2026-14769 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argum |
| CVE-2026-14770 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_room.php. Performing a manipulation of the a |
| CVE-2026-14771 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown function of the file /edit_exam1.php. Executing a manipulati |
| CVE-2026-14772 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an unknown function of the file /edit_course1.php. The manipul |
| CVE-2026-14773 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid resu |
| CVE-2026-14774 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument |
| CVE-2026-14775 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulat |
| CVE-2026-14776 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /uploa |
| CVE-2026-14777 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements |
| CVE-2026-14778 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the co |
| CVE-2026-14781 | Analyzed | 未確認 | CWE-1288 | A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified claim. When an OIDC identity provider is configured with tru |
| CVE-2026-14782 | Deferred | 未確認 | CWE-89 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and including, 2.4.3 du |
| CVE-2026-14783 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in NousResearch hermes-agent 2026.5.29.2. The impacted element is the function skill_view of the file tools/skills_tool.py. Executing a manipulation |
| CVE-2026-14784 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipula |
| CVE-2026-14785 | Deferred | 未確認 | CWE-89 | The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the 'levels' parameter in all versions up to, and including, 1.7.13 due to insufficient escap |
| CVE-2026-14786 | Analyzed | 未確認 | CWE-189, CWE-190 | A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of the file libr/util/str.c. The manipulation results in integer |
| CVE-2026-14787 | Analyzed | 未確認 | CWE-189, CWE-190 | A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler |
| CVE-2026-14788 | Analyzed | 未確認 | CWE-119, CWE-416 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such mani |
| CVE-2026-14789 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of the component Memory6 |
| CVE-2026-14790 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulat |
| CVE-2026-14791 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of the file app/Http/Requests/InvoicesRequest.php of the compo |
| CVE-2026-14792 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Handler |
| CVE-2026-14793 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in Craft CMS up to 4.18.0.1. Affected is the function actionReorderSets of the file src/controllers/GlobalsController.php of the component reorder-sets |
| CVE-2026-14794 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData of the file src/controllers/ChartsController.php of the comp |
| CVE-2026-14795 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/action-visi |
| CVE-2026-14796 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of |
| CVE-2026-14797 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. This vulnerability affects unknown code of the file /apartment-visitor/edit-apartment.php. Exec |
| CVE-2026-14798 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/visitor-entry.php. Th |
| CVE-2026-14799 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /customer/my_account.php?my_wishlist. The manipulation of the ar |
| CVE-2026-14800 | Deferred | 未確認 | CWE-352, CWE-862 | A weakness has been identified in imhamzaazam ecommerceFlask up to cb7d9e24c30a99379651b7493b32048126ef402b. The affected element is an unknown function. This manipulation causes c |
| CVE-2026-14801 | Deferred | 未確認 | CWE-369, CWE-404 | A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c |
| CVE-2026-14802 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-uti |
| CVE-2026-14803 | Deferred | 未確認 | CWE-674 | Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path (`_decode_value` dispatching to `_deco |
| CVE-2026-14807 | Deferred | 未確認 | CWE-798 | ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the databas |
| CVE-2026-14808 | Deferred | 未確認 | CWE-497 | Prog Management System developed by PROG MIS has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obta |
| CVE-2026-14809 | Deferred | 未確認 | CWE-89 | Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents |
| CVE-2026-14819 | Deferred | 未確認 | CWE-79 | The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputting them in a ticket history log, allowing users with the Edit |
| CVE-2026-14820 | Deferred | 未確認 | CWE-200 | The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality |
| CVE-2026-14821 | Deferred | 未確認 | CWE-862 | The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access |
| CVE-2026-14827 | Deferred | 未確認 | CWE-79 | The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing use |
| CVE-2026-14830 | Deferred | 未確認 | CWE-287 | The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was actually paid before marking the associated order as paid, allowing |
| CVE-2026-14833 | Deferred | 未確認 | CWE-79 | The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering it into the image lightbox caption in the browser, all |
| CVE-2026-14834 | Deferred | 未確認 | CWE-284 | The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured |
| CVE-2026-14837 | Deferred | 未確認 | CWE-347 | Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of |
| CVE-2026-14843 | Deferred | 未確認 | CWE-639 | The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change reque |
| CVE-2026-14845 | Deferred | 未確認 | CWE-79 | The NewStatPress WordPress plugin before 1.4.5 does not sanitise and escape data derived from unauthenticated visitor requests before storing it and later outputting it in one of i |
| CVE-2026-14846 | Deferred | 未確認 | CWE-1236 | In version 8.2.1 of PrestaShop, there is a vulnerability relating to the incorrect sanitisation of elements, caused by inadequate validation of the ‘Alias’ parameter in the ‘Update |
| CVE-2026-14847 | Deferred | 未確認 | CWE-639 | The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated |
| CVE-2026-14849 | Deferred | 未確認 | CWE-552 | The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not protect the member and payment export files it writes to a predictable location in the uploads directory, |
| CVE-2026-14852 | Deferred | 未確認 | CWE-78 | Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows a local unprivileged user to execute arbitrary c |
| CVE-2026-14856 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization o |
| CVE-2026-14862 | Deferred | 未確認 | CWE-862 | The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored at |
| CVE-2026-14865 | Analyzed | 未確認 | CWE-776 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated den |
| CVE-2026-14867 | Analyzed | 未確認 | CWE-256 | Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials. Act |
| CVE-2026-14868 | Analyzed | 未確認 | CWE-326 | The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong en |
| CVE-2026-14869 | Deferred | 未確認 | CWE-918 | The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client |
| CVE-2026-14870 | Deferred | 未確認 | CWE-79 | The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page |
| CVE-2026-14871 | Awaiting Analysis | 未確認 | CWE-863 | osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem. |
| CVE-2026-14881 | Analyzed | 未確認 | CWE-78 | When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to pr |
| CVE-2026-14890 | Analyzed | 未確認 | CWE-502 | SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards |
| CVE-2026-14891 | Deferred | 未確認 | CWE-59 | HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even whe |
| CVE-2026-14893 | Awaiting Analysis | 未確認 | CWE-1321 | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through i |
| CVE-2026-14894 | Deferred | 未確認 | CWE-434 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. T |
| CVE-2026-14895 | Deferred | 未確認 | CWE-1333 | String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Bec |
| CVE-2026-14896 | Deferred | 未確認 | CWE-863 | HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume |
| CVE-2026-14898 | Awaiting Analysis | 未確認 | CWE-200 | The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Cod |
| CVE-2026-14899 | Analyzed | 未確認 | CWE-193 | The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read fro |
| CVE-2026-14900 | Deferred | 未確認 | CWE-94 | The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the js_to_php function. This is due to i |
| CVE-2026-14902 | Analyzed | 未確認 | CWE-601 | An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs. |
| CVE-2026-14903 | Analyzed | 未確認 | CWE-22, CWE-23 | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root. |
| CVE-2026-14904 | Awaiting Analysis | 未確認 | CWE-59 | AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on |
| CVE-2026-14906 | Analyzed | 未確認 | CWE-434 | Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability w |
| CVE-2026-14919 | Deferred | 未確認 | CWE-287 | The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with client- |
| CVE-2026-14921 | Deferred | 未確認 | CWE-79 | The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, Ultimate_VC_Addons::uavc_link_init(), |
| CVE-2026-14922 | Deferred | 未確認 | CWE-79 | WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 through a decode-after-sanitize (double-encoding) flaw in the phot |
| CVE-2026-14923 | Deferred | 未確認 | CWE-863 | The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an ope |
| CVE-2026-14924 | Deferred | 未確認 | CWE-862 | The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to c |
| CVE-2026-14926 | Deferred | 未確認 | CWE-284 | The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to the requesting customer in several of its payment-method endpoin |
| CVE-2026-14927 | Deferred | 未確認 | CWE-639 | The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequ |
| CVE-2026-14928 | Deferred | 未確認 | CWE-200 | The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated search handler, allowing |
| CVE-2026-14929 | Deferred | 未確認 | CWE-863 | The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwr |
| CVE-2026-14930 | Deferred | 未確認 | CWE-862 | The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request dispatcher, allowing unauthenticated users to u |
| CVE-2026-14931 | Deferred | 未確認 | CWE-200 | The JS Help Desk WordPress plugin before 3.1.4 grants a support-agent capability to the Contributor role on activation and does not perform a capability check on a user-listing ha |
| CVE-2026-14932 | Analyzed | 未確認 | CWE-321 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-ex |
| CVE-2026-14934 | Awaiting Analysis | 未確認 | CWE-862 | A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May |
| CVE-2026-14935 | Awaiting Analysis | 未確認 | CWE-670 | A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverted boolean condition that causes it to accept remote SDP offe |
| CVE-2026-14940 | Analyzed | 未確認 | CWE-122 | A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) that contains a legacy-quoted value encoding a multivalued n |
| CVE-2026-14955 | Deferred | 未確認 | CWE-22 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.7.7 via the 'thwcfe_legacy_file' p |
| CVE-2026-14956 | Deferred | 未確認 | CWE-269 | The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper validation of the fieldIds paramet |
| CVE-2026-14958 | Analyzed | 未確認 | CWE-78 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation. |
| CVE-2026-14959 | Analyzed | 未確認 | CWE-78 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection. |
| CVE-2026-14960 | Deferred | 未確認 | CWE-269, CWE-284, CWE-668 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` and ` |
| CVE-2026-14961 | Deferred | 未確認 | CWE-20, CWE-269 | Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dispatcher do |
| CVE-2026-14966 | Analyzed | 未確認 | CWE-59 | BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribut |
| CVE-2026-14967 | Analyzed | 未確認 | CWE-22 | BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a craf |
| CVE-2026-14969 | Analyzed | 未確認 | CWE-329 | A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker |
| CVE-2026-14971 | Analyzed | 未確認 | CWE-16 | IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations u |
| CVE-2026-14973 | Analyzed | 未確認 | CWE-22 | IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination. |
| CVE-2026-14974 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data. |
| CVE-2026-14976 | Analyzed | 未確認 | CWE-306 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled. |
| CVE-2026-14979 | Analyzed | 未確認 | CWE-776 | IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS |
| CVE-2026-14980 | Analyzed | 未確認 | CWE-269 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated |
| CVE-2026-14981 | Modified | 未確認 | CWE-400 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of |
| CVE-2026-14985 | Deferred | 未確認 | CWE-22, CWE-250 | The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation |
| CVE-2026-14987 | Deferred | 未確認 | CWE-79 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting in all versio |
| CVE-2026-14996 | Analyzed | 未確認 | CWE-613 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management. |
| CVE-2026-15000 | Deferred | 未確認 | CWE-79 | The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp Merge Field Values in all versions up to, and including, 0. |
| CVE-2026-15003 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-b |
| CVE-2026-15005 | Deferred | 未確認 | CWE-352 | The Loco Translate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validatio |
| CVE-2026-15007 | Deferred | 未確認 | CWE-770 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes |
| CVE-2026-15008 | Deferred | 未確認 | CWE-502 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path |
| CVE-2026-15010 | Deferred | 未確認 | CWE-79 | The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.4.5 via the Topic Form Additional Fields feature. This is d |
| CVE-2026-15011 | Deferred | 未確認 | CWE-94 | The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the u |
| CVE-2026-15012 | Deferred | 未確認 | CWE-200 | The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the hand |
| CVE-2026-15013 | Deferred | 未確認 | CWE-347 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion in all versions up to, and including, 5.4.3. |
| CVE-2026-15014 | Deferred | 未確認 | CWE-288 | The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in |
| CVE-2026-15015 | Deferred | 未確認 | CWE-862 | The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not pr |
| CVE-2026-15016 | Deferred | 未確認 | CWE-79 | The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Readonly User Field vi |
| CVE-2026-15017 | Deferred | 未確認 | CWE-269 | The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and non |
| CVE-2026-15021 | Deferred | 未確認 | CWE-79 | The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'location' Profile Field in all versions up to, and including, 3.1.1 due to insufficient inpu |
| CVE-2026-15022 | Deferred | 未確認 | CWE-89 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via Stored Quiz Answer Array in all versions up to, and including, |
| CVE-2026-15025 | Deferred | 未確認 | CWE-862 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3. |
| CVE-2026-15026 | Deferred | 未確認 | CWE-862 | The Import and export users and customers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.0 via the email_template_se |
| CVE-2026-15028 | Awaiting Analysis | 未確認 | CWE-122, CWE-805 | A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the par |
| CVE-2026-15029 | Deferred | 未確認 | CWE-822 | Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physic |
| CVE-2026-15030 | Deferred | 未確認 | CWE-125 | Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the inte |
| CVE-2026-15033 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/packageUtils.js of the |
| CVE-2026-15034 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by this issue is some unknown functionality. Such manipulation leads to cross-site |
| CVE-2026-15035 | Analyzed | 未確認 | CWE-74, CWE-77, CWE-78 | A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name |
| CVE-2026-15036 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of the file app/api/controller/gitspace/list_all.go of the compo |
| CVE-2026-15037 | Deferred | 未確認 | CWE-91 | Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized b |
| CVE-2026-15041 | Analyzed | 未確認 | CWE-208 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password hashes instead of a constant-time compariso |
| CVE-2026-15043 | Deferred | 未確認 | CWE-480 | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates i |
| CVE-2026-15044 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose th |
| CVE-2026-15048 | Deferred | 未確認 | CWE-200 | The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session met |
| CVE-2026-15053 | Analyzed | 未確認 | CWE-789 | Tanium addressed a denial of service vulnerability in Tanium Server. |
| CVE-2026-15054 | Deferred | 未確認 | CWE-862 | The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entri |
| CVE-2026-15057 | Analyzed | 未確認 | CWE-787 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation. |
| CVE-2026-15058 | Analyzed | 未確認 | CWE-639 | Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a dire |
| CVE-2026-15062 | Awaiting Analysis | 未確認 | CWE-89 | SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond th |
| CVE-2026-15063 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrato |
| CVE-2026-15064 | Modified | 未確認 | CWE-444 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version token |
| CVE-2026-15067 | Awaiting Analysis | 未確認 | CWE-89 | Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitra |
| CVE-2026-15069 | Analyzed | 未確認 | CWE-78 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation. |
| CVE-2026-15070 | Deferred | 未確認 | CWE-352 | The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 10.30.32. This is due to missing or i |
| CVE-2026-15072 | Deferred | 未確認 | CWE-89 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including |
| CVE-2026-15073 | Deferred | 未確認 | CWE-89 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including |
| CVE-2026-15074 | Analyzed | 未確認 | CWE-22 | @fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in request pathnames before the file-resolution stage. This is a bypass of the earlier fix |
| CVE-2026-15075 | Analyzed | 未確認 | CWE-200, CWE-346 | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-ori |
| CVE-2026-15076 | Analyzed | 未確認 | CWE-346 | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute |
| CVE-2026-15077 | Analyzed | 未確認 | CWE-74 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated |
| CVE-2026-15079 | Analyzed | 未確認 | CWE-307 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This issue affects Login Disable versions: from 0.0.0 to 2.1.4. |
| CVE-2026-15080 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from |
| CVE-2026-15081 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Sel |
| CVE-2026-15082 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove Analytics allows Cross-Site Scripting (XSS). This issue aff |
| CVE-2026-15083 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal ECA: Event - Condition - Action allows Object Injection. This issue affects E |
| CVE-2026-15084 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns (SDC in Drupal UI) allows Stored XSS. This issue affects UI |
| CVE-2026-15085 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO An |
| CVE-2026-15086 | Awaiting Analysis | 未確認 | vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw Formatter [Meta Tag Formatter] versions: *.*. | |
| CVE-2026-15087 | Awaiting Analysis | 未確認 | CWE-287 | vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*. |
| CVE-2026-15089 | Awaiting Analysis | 未確認 | CWE-287 | Vulnerability in Drupal Commerce guest registration. This issue affects Commerce guest registration versions: *.*. |
| CVE-2026-15091 | Analyzed | 未確認 | CWE-79 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation. |
| CVE-2026-15093 | Analyzed | 未確認 | CWE-601 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs. |
| CVE-2026-15094 | Deferred | 未確認 | CWE-79 | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' parameter in all versions up to, and including, 2.3.2 due to insuf |
| CVE-2026-15096 | Deferred | 未確認 | CWE-79 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field in all versions up to, and including, 7.7.6 due to insuffic |
| CVE-2026-15097 | Deferred | 未確認 | CWE-79 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module Field in all versions up to, and including, 7.7.6 due to ins |
| CVE-2026-15099 | Deferred | 未確認 | CWE-79 | The Delicious Recipes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps' block attribute in versions up to, and including, 1.10.2. This is due to ins |
| CVE-2026-15100 | Deferred | 未確認 | CWE-79 | The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, |
| CVE-2026-15103 | Deferred | 未確認 | CWE-269 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Privilege Escalation via arbitrary option update in all versio |
| CVE-2026-15104 | Deferred | 未確認 | CWE-89 | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to generic SQL Injection via the 'lang' parameter in all version |
| CVE-2026-15105 | Deferred | 未確認 | CWE-119, CWE-787 | A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7_server.cpp of the component ReadVar Reques |
| CVE-2026-15106 | Deferred | 未確認 | CWE-862 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This i |
| CVE-2026-15107 | Analyzed | 未確認 | CWE-416 | Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-15108 | Analyzed | 未確認 | CWE-190 | Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds me |
| CVE-2026-15109 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pag |
| CVE-2026-15110 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupti |
| CVE-2026-15111 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-15112 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-15113 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-15114 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium |
| CVE-2026-15115 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted |
| CVE-2026-15116 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-15117 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap cor |
| CVE-2026-15118 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-15119 | Analyzed | 未確認 | CWE-362 | Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-15120 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-15121 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-15122 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to poten |
| CVE-2026-15123 | Analyzed | 未確認 | CWE-122 | Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec |
| CVE-2026-15124 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium secu |
| CVE-2026-15125 | Analyzed | 未確認 | CWE-863 | Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromi |
| CVE-2026-15126 | Analyzed | 未確認 | CWE-416 | Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-15127 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromi |
| CVE-2026-15128 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromi |
| CVE-2026-15129 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-15130 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium securit |
| CVE-2026-15131 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security s |
| CVE-2026-15132 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-15133 | Analyzed | 未確認 | CWE-416 | Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-15134 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/ind |
| CVE-2026-15135 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argument u |
| CVE-2026-15136 | Deferred | 未確認 | CWE-352 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.3.7. This is due to |
| CVE-2026-15137 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of the |
| CVE-2026-15138 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function _validate_file_path of the file mcp_text_editor/text_editor.py. Such |
| CVE-2026-15143 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, w |
| CVE-2026-15144 | Analyzed | 未確認 | CWE-307, CWE-770 | @fastify/rate-limit before 11.2.0 keys rate-limit buckets by the verbatim client IP string returned from request.ip. Because a single IPv6 client can control a large address range |
| CVE-2026-15145 | Deferred | 未確認 | CWE-79 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Fancy Text Widget in all versions u |
| CVE-2026-15146 | Awaiting Analysis | 未確認 | GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP U | |
| CVE-2026-15153 | Deferred | 未確認 | CWE-89 | The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holdi |
| CVE-2026-15154 | Modified | 未確認 | CWE-1333 | A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker |
| CVE-2026-15155 | Deferred | 未確認 | CWE-640 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover via Email Header Injection in all ve |
| CVE-2026-15156 | Deferred | 未確認 | CWE-79 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Setti |
| CVE-2026-15157 | Analyzed | 未確認 | CWE-93 | undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, fr |
| CVE-2026-15158 | Deferred | 未確認 | CWE-434 | The Blocksy Companion plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.1.46 via the save_attachments function. This is due to the |
| CVE-2026-15159 | Deferred | 未確認 | CWE-639 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_form_i |
| CVE-2026-15160 | Deferred | 未確認 | CWE-22 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parameter |
| CVE-2026-15161 | Deferred | 未確認 | CWE-79 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.6. This is due to the save_filter() AJAX hand |
| CVE-2026-15163 | Analyzed | 未確認 | CWE-835 | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service |
| CVE-2026-15164 | Analyzed | 未確認 | CWE-122 | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15165 | Analyzed | 未確認 | CWE-122 | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15166 | Analyzed | 未確認 | CWE-121 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15167 | Analyzed | 未確認 | CWE-121 | DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15168 | Analyzed | 未確認 | CWE-457 | BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure |
| CVE-2026-15169 | Analyzed | 未確認 | CWE-122 | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15170 | Analyzed | 未確認 | CWE-122 | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15171 | Analyzed | 未確認 | CWE-476 | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15172 | Analyzed | 未確認 | CWE-606 | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15173 | Analyzed | 未確認 | CWE-122 | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15174 | Analyzed | 未確認 | CWE-122 | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15182 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulatio |
| CVE-2026-15183 | Awaiting Analysis | 未確認 | CWE-441, CWE-89, CWE-918 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, exe |
| CVE-2026-15184 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a m |
| CVE-2026-15185 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/media_tools/vobsub.c of the component MP4Box. Executing a manipulation |
| CVE-2026-15186 | Deferred | 未確認 | CWE-99 | A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation o |
| CVE-2026-15187 | Deferred | 未確認 | CWE-1321, CWE-94 | A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.na |
| CVE-2026-15188 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProfile |
| CVE-2026-15189 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function upload_media of the |
| CVE-2026-15190 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argum |
| CVE-2026-15191 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in mettle sendportal up to 3.0.1. This vulnerability affects unknown code of the file vendor/mettle/sendportal-core/src/Http/Requests/CampaignStoreRequest.php |
| CVE-2026-15192 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sendgrid/postmark/postal/mailjet of the component APIv1 Webhooks. The manipulation |
| CVE-2026-15193 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in AidanPark openclaw-android up to 0.4.0. The affected element is an unknown function of the file android/app/src/main/java/com/openclaw/android/JsB |
| CVE-2026-15194 | Deferred | 未確認 | CWE-119, CWE-416 | A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation resu |
| CVE-2026-15195 | Deferred | 未確認 | CWE-1321, CWE-94 | A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipul |
| CVE-2026-15202 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url of the file /yzmphp/yzmphp.php of the component Header Handler. The manipulation of |
| CVE-2026-15204 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affected by this vulnerability is the function exportOvpn of the file /web/cgi-bin/cs |
| CVE-2026-15209 | Deferred | 未確認 | CWE-639 | The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's |
| CVE-2026-15212 | Deferred | 未確認 | CWE-352 | The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax_Service::verify_ajax_request() h |
| CVE-2026-15226 | Awaiting Analysis | 未確認 | CWE-250 | A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates gener |
| CVE-2026-15227 | Deferred | 未確認 | CWE-862 | Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned |
| CVE-2026-15228 | Awaiting Analysis | 未確認 | CWE-400, CWE-862 | Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collect |
| CVE-2026-15235 | Deferred | 未確認 | CWE-200 | The MotoPress Hotel Booking WordPress plugin before 6.0.4 does not perform a capability check before returning a booking's full customer details in one of its AJAX actions, allowin |
| CVE-2026-15240 | Deferred | 未確認 | CWE-287 | The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account t |
| CVE-2026-15243 | Awaiting Analysis | 未確認 | CWE-297 | Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM pos |
| CVE-2026-15250 | Deferred | 未確認 | CWE-284 | The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated visitor can set through its public booking funnel, allowing |
| CVE-2026-15252 | Deferred | 未確認 | CWE-862 | The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber |
| CVE-2026-15255 | Deferred | 未確認 | CWE-639 | The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before retu |
| CVE-2026-15257 | Deferred | 未確認 | CWE-639 | The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauthenticated |
| CVE-2026-15258 | Deferred | 未確認 | CWE-89 | The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, all |
| CVE-2026-15265 | Analyzed | 未確認 | CWE-22, CWE-347 | A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially |
| CVE-2026-15267 | Deferred | 未確認 | CWE-89 | The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the 'wppm_proj_filter' parameter in versions u |
| CVE-2026-15270 | Analyzed | 未確認 | CWE-266, CWE-272 | A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web I |
| CVE-2026-15271 | Deferred | 未確認 | CWE-266, CWE-272 | A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functi |
| CVE-2026-15274 | Deferred | 未確認 | CWE-404 | A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the file src/pull_parser/v7400/parser.rs of the component Node Header Handler. The manip |
| CVE-2026-15276 | Deferred | 未確認 | CWE-404 | A flaw has been found in pdeljanov Symphonia up to 0.6.0. This vulnerability affects unknown code of the component Metadata Handler. This manipulation causes denial of service. The |
| CVE-2026-15280 | Analyzed | 未確認 | CWE-22 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechan |
| CVE-2026-15282 | Deferred | 未確認 | CWE-434 | The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all |
| CVE-2026-15283 | Deferred | 未確認 | CWE-79 | The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.9.33 due to insufficient |
| CVE-2026-15284 | Deferred | 未確認 | CWE-79 | The King Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_page_id' parameter in versions up to, and including, 51.1.62 This is d |
| CVE-2026-15285 | Deferred | 未確認 | CWE-79 | The Plus Addons for Elementor plugin for WordPress was vulnerable to Authenticated (Contributor+) Stored Cross-Site Scripting via the Button widget's `custom_attributes` setting in |
| CVE-2026-15286 | Deferred | 未確認 | CWE-863 | The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 |
| CVE-2026-15287 | Deferred | 未確認 | CWE-89 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all versions up to, and including, 4. |
| CVE-2026-15288 | Deferred | 未確認 | CWE-20 | The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due to |
| CVE-2026-15289 | Deferred | 未確認 | CWE-89 | The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpdevart_id’ parameter in all versions up to, and including |
| CVE-2026-15290 | Deferred | 未確認 | CWE-89 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to blind SQL Injection via the |
| CVE-2026-15291 | Deferred | 未確認 | CWE-862 | The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoi |
| CVE-2026-15292 | Deferred | 未確認 | CWE-79 | The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and includ |
| CVE-2026-15293 | Deferred | 未確認 | CWE-862 | The WP Business Intelligence Lite plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.0. This is due to the plugin not properly ver |
| CVE-2026-15295 | Deferred | 未確認 | CWE-692 | The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.0.1 due |
| CVE-2026-15296 | Deferred | 未確認 | CWE-79 | The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'atkp_product' shortcode in all versions |
| CVE-2026-15297 | Deferred | 未確認 | CWE-79 | The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter |
| CVE-2026-15298 | Deferred | 未確認 | CWE-79 | The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This is due to insufficient input sanitization whe |
| CVE-2026-15299 | Deferred | 未確認 | CWE-79 | The Animation Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'weather_style' and 'move_direction' parameters of the Weather widget i |
| CVE-2026-15300 | Deferred | 未確認 | CWE-89 | The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and 'lng' parameters in versions up to, and including, 4.5.4. The values were read fro |
| CVE-2026-15301 | Deferred | 未確認 | CWE-79 | The BuddyHolis TableSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder’ parameter in all versions up to, and including, 1.1.0 due to insu |
| CVE-2026-15302 | Deferred | 未確認 | CWE-36 | The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for una |
| CVE-2026-15304 | Deferred | 未確認 | CWE-89 | The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path' parameter in versions up to, and including, 10.2.4. This is due to insufficient es |
| CVE-2026-15305 | Deferred | 未確認 | CWE-351 | Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced serve |
| CVE-2026-15306 | Deferred | 未確認 | CWE-79 | The Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all ver |
| CVE-2026-15308 | Analyzed | 未確認 | CWE-400 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. |
| CVE-2026-15311 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in NousResearch hermes-agent up to 2026.5.29.2. Affected by this issue is the function MatrixAdapter._markdown_to_html of the file gateway/platforms/ |
| CVE-2026-15317 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability is the function WebFetchTool.Execute of the file pkg/tools/integration/web.go of |
| CVE-2026-15318 | Deferred | 未確認 | CWE-285, CWE-863 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Chan |
| CVE-2026-15319 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the compone |
| CVE-2026-15320 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulatio |
| CVE-2026-15321 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in MyEMS up to 6.4.0. The affected element is the function on_post of the file myems-api/core/svg.py of the component Admin Backend. The manipulation of t |
| CVE-2026-15322 | Analyzed | 未確認 | CWE-598 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs. |
| CVE-2026-15324 | Deferred | 未確認 | CWE-79 | The SysBasics Customize My Account for WooCommerce – Live My Account Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'row_type' parameter in al |
| CVE-2026-15325 | Modified | 未確認 | CWE-444 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests. |
| CVE-2026-15326 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the file ThemeUtils.java of the component Theme Installation. Suc |
| CVE-2026-15328 | Modified | 未確認 | CWE-444 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling. |
| CVE-2026-15329 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of the file agent/tools/browser/browser_tool.py of the componen |
| CVE-2026-15330 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function _build_image_content/_download_to_data_url of the file agent/tools/vision/vision.py of the |
| CVE-2026-15331 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in zhayujie CowAgent up to 2.1.0. The affected element is the function _add_url/_add_package of the file agent/skills/service.py of the component Ski |
| CVE-2026-15332 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of the component Message Endpoint. |
| CVE-2026-15333 | Deferred | 未確認 | CWE-79 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cozyCusto |
| CVE-2026-15334 | Deferred | 未確認 | CWE-79 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon.view |
| CVE-2026-15335 | Deferred | 未確認 | CWE-89 | The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up to, and including, 1.7.20 due to insufficien |
| CVE-2026-15336 | Deferred | 未確認 | CWE-862 | The Catch Themes Demo Import plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.3. This is due to the catch_themes_demo_import_activate |
| CVE-2026-15338 | Deferred | 未確認 | CWE-98 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the get_type_template function. T |
| CVE-2026-15342 | Deferred | 未確認 | CWE-552, CWE-639 | Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to |
| CVE-2026-15343 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to |
| CVE-2026-15344 | Deferred | 未確認 | CWE-89 | The WP Photo Album Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'table' parameter in all versions up to, and including, 9.2.04.002 due to insufficient e |
| CVE-2026-15346 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'category_id' parameter in all versions up to, and including, |
| CVE-2026-15348 | Deferred | 未確認 | CWE-287 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 via the `wpdmppdl` par |
| CVE-2026-15349 | Deferred | 未確認 | CWE-862 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.17.6. This is |
| CVE-2026-15350 | Deferred | 未確認 | CWE-862 | The The Cache Purger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.20. This is due to the plugin not properly verifying that |
| CVE-2026-15352 | Awaiting Analysis | 未確認 | CWE-476 | A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processing a |
| CVE-2026-15370 | Analyzed | 未確認 | CWE-121 | A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes t |
| CVE-2026-15373 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Performing a manipulation o |
| CVE-2026-15374 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group Interface. Executing a |
| CVE-2026-15375 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users_ldap.jsp of the component LDAP User Interface. T |
| CVE-2026-15376 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulation results in improp |
| CVE-2026-15377 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulati |
| CVE-2026-15378 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a speciall |
| CVE-2026-15379 | Awaiting Analysis | 未確認 | CWE-269 | The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing file |
| CVE-2026-15380 | Awaiting Analysis | 未確認 | CWE-269 | A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3) |
| CVE-2026-15381 | Deferred | 未確認 | CWE-89 | The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL inje |
| CVE-2026-15382 | Deferred | 未確認 | CWE-73 | The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, |
| CVE-2026-15389 | Deferred | 未確認 | CWE-639 | A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the f |
| CVE-2026-15392 | Deferred | 未確認 | CWE-22, CWE-59 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path |
| CVE-2026-15393 | Deferred | 未確認 | CWE-79 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postMeta. |
| CVE-2026-15394 | Deferred | 未確認 | CWE-79 | The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet Meta in all versions |
| CVE-2026-15395 | Deferred | 未確認 | CWE-79 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, an |
| CVE-2026-15397 | Deferred | 未確認 | CWE-862 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the plugin not properly ve |
| CVE-2026-15401 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vbfX' parameter in all versions up to, and including, 1.8.13 du |
| CVE-2026-15404 | Deferred | 未確認 | CWE-79 | The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitizatio |
| CVE-2026-15407 | Deferred | 未確認 | CWE-862 | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. This is due to the plugin not properly verifying that a |
| CVE-2026-15409 | Analyzed | 掲載 | CWE-918 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the |
| CVE-2026-15410 | Analyzed | 掲載 | CWE-94 | Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific |
| CVE-2026-15411 | Deferred | 未確認 | CWE-862 | The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versi |
| CVE-2026-15415 | Awaiting Analysis | 未確認 | CWE-23 | AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale for clinica |
| CVE-2026-15416 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to |
| CVE-2026-15420 | Deferred | 未確認 | CWE-22 | The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 5.0.0 via th |
| CVE-2026-15422 | Deferred | 未確認 | CWE-122, CWE-787 | The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs duri |
| CVE-2026-15425 | Deferred | 未確認 | CWE-79 | The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug (post_name) in all versions up |
| CVE-2026-15427 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, all |
| CVE-2026-15428 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the releva |
| CVE-2026-15429 | Analyzed | 未確認 | CWE-93 | A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be |
| CVE-2026-15432 | Analyzed | 未確認 | CWE-208 | When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig inf |
| CVE-2026-15435 | Analyzed | 未確認 | CWE-22 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a |
| CVE-2026-15444 | Deferred | 未確認 | CWE-89 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the 'coupon_code' parameter in all versions up to, and includin |
| CVE-2026-15445 | Deferred | 未確認 | CWE-89 | The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping |
| CVE-2026-15448 | Deferred | 未確認 | CWE-89 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_order_status_filter' parameter in all versions up to, and includi |
| CVE-2026-15449 | Deferred | 未確認 | CWE-122, CWE-367 | A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld. drv_io |
| CVE-2026-15457 | Deferred | 未確認 | CWE-22 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.0.13 via the 'fami |
| CVE-2026-15458 | Deferred | 未確認 | CWE-89 | The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_field' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping |
| CVE-2026-15464 | Deferred | 未確認 | CWE-79 | The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute in all versions up to, and including, 2.3.2 due to in |
| CVE-2026-15470 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads |
| CVE-2026-15471 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in improp |
| CVE-2026-15472 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulation |
| CVE-2026-15473 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Record |
| CVE-2026-15474 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handler. |
| CVE-2026-15475 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Driver |
| CVE-2026-15476 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Su |
| CVE-2026-15477 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endp |
| CVE-2026-15478 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport En |
| CVE-2026-15479 | Deferred | 未確認 | CWE-640 | A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password M |
| CVE-2026-15480 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of t |
| CVE-2026-15481 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connectio |
| CVE-2026-15482 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?t=consultar of the component HT |
| CVE-2026-15483 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipula |
| CVE-2026-15484 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulati |
| CVE-2026-15485 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /goform/tools_nslookup of the component DNS Lookup Handler. This m |
| CVE-2026-15486 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component Firmware Update Handler. Such ma |
| CVE-2026-15487 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a |
| CVE-2026-15488 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing |
| CVE-2026-15489 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this vulnerability is an unknown functionality of the file pr |
| CVE-2026-15490 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknown functionality of the file pro |
| CVE-2026-15491 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects an unknown part. This manipulation causes missing authentica |
| CVE-2026-15492 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. This vulnerability affects unknown code of the file dashboard/studentC |
| CVE-2026-15493 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. This issue affects some unknown processing of the file absent.p |
| CVE-2026-15494 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function of the file manager/network/switch_status.php. Executing a manipulation of the a |
| CVE-2026-15495 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSo |
| CVE-2026-15496 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/te |
| CVE-2026-15497 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/controll |
| CVE-2026-15498 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. This impacts an unknown function of the file users.php of the component |
| CVE-2026-15499 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools.py of the component |
| CVE-2026-15500 | Deferred | 未確認 | CWE-918 | A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability is the function get_online_plugins of the file astrbot/dashboard/routes/plugin.py |
| CVE-2026-15501 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astrbot/dashboard/ |
| CVE-2026-15502 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation |
| CVE-2026-15505 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in vnotex vnote up to 3.20.1. Impacted is an unknown function of the file /src/data/extra/web/js/markdownit.js of the component YAML Frontmatter. Thi |
| CVE-2026-15506 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Su |
| CVE-2026-15507 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a |
| CVE-2026-15508 | Deferred | 未確認 | CWE-918 | A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS M |
| CVE-2026-15509 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads t |
| CVE-2026-15510 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The attac |
| CVE-2026-15511 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the |
| CVE-2026-15512 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pi |
| CVE-2026-15513 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function wlink_uci_set_value of the file /cgi-bin/adm.cgi. Performing a manipulation of the argum |
| CVE-2026-15514 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the com |
| CVE-2026-15515 | Deferred | 未確認 | CWE-426, CWE-427 | A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Dr |
| CVE-2026-15516 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/install/controller/Index.php of the component Installation M |
| CVE-2026-15517 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument htt |
| CVE-2026-15518 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLi |
| CVE-2026-15519 | Deferred | 未確認 | CWE-829 | A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the file system_prompt.jinja of the component PyPI Handler. Performing a manipulation r |
| CVE-2026-15520 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Deco |
| CVE-2026-15521 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown function of the file build/server.cjs of the component update_node_from_file. T |
| CVE-2026-15522 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function validatePath of the file build/index.js of the component run_ |
| CVE-2026-15523 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/das |
| CVE-2026-15524 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. This affects an unknown part of the file list-project-files-validation-factory.ts. Such manip |
| CVE-2026-15525 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _validate_urls of the file src/adloop/ads/write.py. Performing a manipulation of t |
| CVE-2026-15526 | Deferred | 未確認 | CWE-22 | A flaw has been found in augmnt augments-mcp-server 7.1.0. This issue affects the function scanProjectDeps of the file src/tools/v4/scan-project-deps.ts of the component scan_proje |
| CVE-2026-15527 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects unknown code of the component scan_project_icons/sync_icon. Such manipulation of |
| CVE-2026-15528 | Deferred | 未確認 | CWE-693 | A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation |
| CVE-2026-15529 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of |
| CVE-2026-15530 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in WuzhiCMS up to 4.1.0. Affected by this vulnerability is the function config/listimage of the file /index.php?m=attachment&f=index&v=upload of the component |
| CVE-2026-15531 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_ner |
| CVE-2026-15532 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation |
| CVE-2026-15533 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in DedeCMS 5.7.118. Impacted is an unknown function of the file /plus/search.php of the component Column Management. Performing a manipulation o |
| CVE-2026-15535 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file ret |
| CVE-2026-15536 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patviewprescription.php. The manipulation of the argument d |
| CVE-2026-15537 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the arg |
| CVE-2026-15538 | Deferred | 未確認 | CWE-1321, CWE-94 | A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the file components/lib/utils/ObjectUtils.js of |
| CVE-2026-15539 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component |
| CVE-2026-15540 | Deferred | 未確認 | CWE-73, CWE-98 | A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrativ |
| CVE-2026-15541 | Deferred | 未確認 | CWE-862, CWE-863 | A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket |
| CVE-2026-15542 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The |
| CVE-2026-15543 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffe |
| CVE-2026-15544 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulati |
| CVE-2026-15545 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd |
| CVE-2026-15546 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is the function sub_2D568 of the component start_jffs2. Performing a manipulation of th |
| CVE-2026-15547 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048 of the component CIFS Mount Handler. Executing a manipulation of the argument c |
| CVE-2026-15548 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS Lis |
| CVE-2026-15551 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects . |
| CVE-2026-15552 | Deferred | 未確認 | CWE-79 | Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code execute |
| CVE-2026-15553 | Deferred | 未確認 | CWE-434 | Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available |
| CVE-2026-15557 | Deferred | 未確認 | CWE-287 | A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is the function getInternalTaskSession/getAuthSession/requireUserAuth/requireProjectAu |
| CVE-2026-15558 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLea |
| CVE-2026-15559 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component P |
| CVE-2026-15574 | Awaiting Analysis | 未確認 | CWE-538 | A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads, which may contain person |
| CVE-2026-15583 | Awaiting Analysis | 未確認 | CWE-610 | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying |
| CVE-2026-15584 | Awaiting Analysis | 未確認 | CWE-250 | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default |
| CVE-2026-15588 | Awaiting Analysis | 未確認 | CWE-770 | A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limit |
| CVE-2026-15594 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler. |
| CVE-2026-15595 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /forsubject.php. This manipulation o |
| CVE-2026-15596 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation of t |
| CVE-2026-15597 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unknown function of the file /edit_exam2.php. Performing a manipu |
| CVE-2026-15598 | Deferred | 未確認 | CWE-1321, CWE-94 | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can l |
| CVE-2026-15605 | Deferred | 未確認 | CWE-327, CWE-328 | A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component A |
| CVE-2026-15607 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path |
| CVE-2026-15610 | Deferred | 未確認 | CWE-862 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This i |
| CVE-2026-15611 | Deferred | 未確認 | CWE-287 | Logto allows unverified email-based SSO account linking, enabling an attacker to register an identity at a permissive IdP using a victim’s email and gain unauthorized access to the |
| CVE-2026-15612 | Deferred | 未確認 | CWE-345 | Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling replay of authentication tokens and weakening session-binding. |
| CVE-2026-15614 | Deferred | 未確認 | CWE-294 | Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse within the session’s validity window. |
| CVE-2026-15615 | Deferred | 未確認 | CWE-345 | Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely. |
| CVE-2026-15616 | Deferred | 未確認 | CWE-308 | Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirements and grants unauthorized access. |
| CVE-2026-15617 | Deferred | 未確認 | CWE-178 | Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identi |
| CVE-2026-15618 | Deferred | 未確認 | CWE-693 | A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool_exec.go of the component exec Safe |
| CVE-2026-15619 | Deferred | 未確認 | CWE-918 | A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the file tools/tool_web_fetch.go of the component IPv4 Handler. Th |
| CVE-2026-1562 | Analyzed | 未確認 | CWE-79 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a |
| CVE-2026-15620 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads to |
| CVE-2026-15621 | Deferred | 未確認 | CWE-59 | A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. Perf |
| CVE-2026-15622 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace |
| CVE-2026-15624 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function bytePlusDownloadVideo of the file internal/tools/create_vide |
| CVE-2026-15625 | Deferred | 未確認 | CWE-183, CWE-184 | A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.CheckCommand of the file internal/tools/exec_approval.go. Th |
| CVE-2026-15626 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file internal/providers/acp/tool_bridge.go of the component ACP |
| CVE-2026-15627 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipula |
| CVE-2026-15628 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function Vision._download_to_data_url of the file agent/tools/vision/ |
| CVE-2026-15629 | Deferred | 未確認 | CWE-59 | A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Worksp |
| CVE-2026-1563 | Analyzed | 未確認 | CWE-79 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user wit |
| CVE-2026-15630 | Deferred | 未確認 | CWE-269, CWE-639, CWE-863 | A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization |
| CVE-2026-15631 | Analyzed | 未確認 | CWE-22 | Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured rewrite prefix. The WebSo |
| CVE-2026-15637 | Analyzed | 未確認 | CWE-639 | Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclose t |
| CVE-2026-15641 | Analyzed | 未確認 | CWE-863 | Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending acc |
| CVE-2026-15642 | Analyzed | 未確認 | CWE-200 | Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to |
| CVE-2026-15643 | Awaiting Analysis | 未確認 | CWE-918 | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-si |
| CVE-2026-15646 | Deferred | 未確認 | CWE-79 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insu |
| CVE-2026-15647 | Deferred | 未確認 | CWE-79 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and including, 3.8.8 due |
| CVE-2026-15648 | Deferred | 未確認 | CWE-79 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'width' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insu |
| CVE-2026-15651 | Deferred | 未確認 | CWE-89 | The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the 'filtersource' parameter in all versions up to, and including, 14.6 due to insu |
| CVE-2026-15652 | Deferred | 未確認 | CWE-79 | The Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'align' Block Attribute in all versions up |
| CVE-2026-15653 | Deferred | 未確認 | CWE-79 | The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'backend-title' parameter in all versi |
| CVE-2026-15657 | Deferred | 未確認 | CWE-522 | A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body. |
| CVE-2026-15658 | Deferred | 未確認 | CWE-639 | A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking tha |
| CVE-2026-15663 | Deferred | 未確認 | CWE-89 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to generic SQL Injection via Import File 'settings' Key in all versions up to, and |
| CVE-2026-15665 | Deferred | 未確認 | CWE-79 | The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute in all versio |
| CVE-2026-15668 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web |
| CVE-2026-15669 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function ExecTool.Execute of the file internal/agent/tools/exec.go of the component exec Tool. The |
| CVE-2026-15670 | Deferred | 未確認 | CWE-89 | The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter |
| CVE-2026-15671 | Deferred | 未確認 | CWE-89 | The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via the 'id' parameter in all v |
| CVE-2026-15672 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/add_judges.php. This manipulation of the ar |
| CVE-2026-15673 | Deferred | 未確認 | CWE-89 | The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via 'checkout_payment_plans' an |
| CVE-2026-15675 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argumen |
| CVE-2026-15676 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipu |
| CVE-2026-15677 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument t |
| CVE-2026-15678 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cros |
| CVE-2026-15680 | Awaiting Analysis | 未確認 | CWE-134 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary c |
| CVE-2026-15681 | Analyzed | 未確認 | CWE-59 | AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations |
| CVE-2026-15682 | Analyzed | 未確認 | CWE-59 | AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installati |
| CVE-2026-15683 | Awaiting Analysis | 未確認 | CWE-295 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitr |
| CVE-2026-15684 | Awaiting Analysis | 未確認 | CWE-59 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Gla |
| CVE-2026-15685 | Analyzed | 未確認 | CWE-129 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affect |
| CVE-2026-15687 | Awaiting Analysis | 未確認 | CWE-22 | A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing |
| CVE-2026-15690 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the compon |
| CVE-2026-15691 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of |
| CVE-2026-15692 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation |
| CVE-2026-15693 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of t |
| CVE-2026-15694 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in s |
| CVE-2026-15695 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument p |
| CVE-2026-15696 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument |
| CVE-2026-15697 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipu |
| CVE-2026-15698 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/updateOne/updateMany of the component Update API. Executing a manipulation of the argu |
| CVE-2026-15699 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The |
| CVE-2026-15700 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishi |
| CVE-2026-15701 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. |
| CVE-2026-15702 | Deferred | 未確認 | CWE-1321, CWE-94 | A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file code/core/web/src/config.ts. Such manipulation leads to improp |
| CVE-2026-15703 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Perf |
| CVE-2026-15704 | Awaiting Analysis | 未確認 | CWE-180, CWE-284, CWE-863 | In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vulnerable to an authorization bypass caused by inconsistent trailing-slash handling |
| CVE-2026-15709 | Deferred | 未確認 | CWE-409 | A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without |
| CVE-2026-15711 | Deferred | 未確認 | CWE-770 | A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSoc |
| CVE-2026-15712 | Deferred | 未確認 | CWE-125 | A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY |
| CVE-2026-15713 | Deferred | 未確認 | CWE-772 | A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, su |
| CVE-2026-15714 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-mu |
| CVE-2026-15715 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /exam.php. Such manip |
| CVE-2026-15718 | Modified | 未確認 | CWE-763 | We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ES |
| CVE-2026-15719 | Modified | 未確認 | We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ES | |
| CVE-2026-15720 | Deferred | 未確認 | CWE-125 | In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service. |
| CVE-2026-15722 | Modified | 未確認 | CWE-121 | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-suppli |
| CVE-2026-15724 | Analyzed | 未確認 | CWE-20, CWE-22, CWE-73 | In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary |
| CVE-2026-15727 | Deferred | 未確認 | CWE-89 | The WP Bulk Delete plugin for WordPress is vulnerable to generic SQL Injection via the 'delete_user_roles' parameter in all versions up to, and including, 1.4.2 due to insufficient |
| CVE-2026-15730 | Deferred | 未確認 | CWE-79 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'heading_size' |
| CVE-2026-15735 | Deferred | 未確認 | CWE-79 | The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta in all versions up to, and including, 3.0.6 due t |
| CVE-2026-15736 | Awaiting Analysis | 未確認 | CWE-73, CWE-89 | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could a |
| CVE-2026-15737 | Awaiting Analysis | 未確認 | CWE-532 | AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging |
| CVE-2026-15738 | Awaiting Analysis | 未確認 | CWE-653 | Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoo |
| CVE-2026-15739 | Deferred | 未確認 | CWE-79 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pagination' Shortcode Attribute in all versions up to, and including, 6. |
| CVE-2026-15746 | Awaiting Analysis | 未確認 | CWE-918 | Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasti |
| CVE-2026-15747 | Deferred | 未確認 | CWE-204, CWE-352 | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_token generates and caches one t |
| CVE-2026-15749 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcp |
| CVE-2026-15750 | Deferred | 未確認 | CWE-918 | A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcp |
| CVE-2026-15751 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is the function execute of the file mastergo/component-workflow.m |
| CVE-2026-15752 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is an unknown function of the file /api/v1/users/ of the compone |
| CVE-2026-15753 | Deferred | 未確認 | CWE-650 | A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?ac |
| CVE-2026-15755 | Deferred | 未確認 | CWE-79 | The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.4.45 |
| CVE-2026-15757 | Deferred | 未確認 | CWE-20 | A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was iden |
| CVE-2026-15759 | Deferred | 未確認 | CWE-79 | The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Short |
| CVE-2026-15761 | Deferred | 未確認 | CWE-89 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event_filter' parameter in all versions up to, and including, 3.6 |
| CVE-2026-15764 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit he |
| CVE-2026-15765 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-15766 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-15767 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (C |
| CVE-2026-15768 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium |
| CVE-2026-15769 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer pro |
| CVE-2026-15770 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-15771 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain |
| CVE-2026-15772 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-15773 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secu |
| CVE-2026-15774 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-15775 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-15776 | Analyzed | 未確認 | CWE-843 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-15777 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap |
| CVE-2026-15778 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navig |
| CVE-2026-15779 | Deferred | 未確認 | CWE-732 | A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system dire |
| CVE-2026-15782 | Deferred | 未確認 | CWE-79 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMons |
| CVE-2026-15783 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from privat |
| CVE-2026-15786 | Deferred | 未確認 | CWE-22 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and |
| CVE-2026-15787 | Deferred | 未確認 | CWE-79 | The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all ve |
| CVE-2026-15788 | Analyzed | 未確認 | CWE-59 | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an |
| CVE-2026-15789 | Analyzed | 未確認 | CWE-22 | A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permiss |
| CVE-2026-15791 | Analyzed | 未確認 | CWE-22 | A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the buil |
| CVE-2026-15792 | Analyzed | 未確認 | CWE-20 | A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. |
| CVE-2026-15793 | Analyzed | 未確認 | CWE-88 | BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a |
| CVE-2026-15794 | Deferred | 未確認 | CWE-79 | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including, 3.0.9 |
| CVE-2026-15799 | Rejected | 未確認 | Rejected reason: This is a duplicate. | |
| CVE-2026-15802 | Deferred | 未確認 | CWE-23 | The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in |
| CVE-2026-15804 | Deferred | 未確認 | CWE-89 | The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidenti |
| CVE-2026-15809 | Deferred | 未確認 | CWE-116, CWE-134 | A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a |
| CVE-2026-15810 | Awaiting Analysis | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7 on Looker-hosted an |
| CVE-2026-15811 | Awaiting Analysis | 未確認 | CWE-212 | A vulnerability was found in kronosnet's (version <=1.34) cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after |
| CVE-2026-15812 | Awaiting Analysis | 未確認 | CWE-290 | A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Version affected: <= 1.34). When the framework is explicitly configured to manage dynami |
| CVE-2026-15813 | Awaiting Analysis | 未確認 | CWE-787 | A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence nu |
| CVE-2026-15821 | Deferred | 未確認 | CWE-79 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including |
| CVE-2026-15827 | Deferred | 未確認 | CWE-862 | The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json |
| CVE-2026-15829 | Analyzed | 未確認 | CWE-863, CWE-89 | A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox. The t |
| CVE-2026-15831 | Analyzed | 未確認 | CWE-1270 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated |
| CVE-2026-15895 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package |
| CVE-2026-15899 | Analyzed | 未確認 | CWE-416 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-15900 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur |
| CVE-2026-15901 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve |
| CVE-2026-15902 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-15903 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-15904 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit he |
| CVE-2026-15905 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: H |
| CVE-2026-15906 | Deferred | 未確認 | CWE-89 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, |
| CVE-2026-15907 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=log_fw_nbc_mail_jsondata. Executing a manipulation of the ar |
| CVE-2026-15909 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is an unknown function of the file proses/add.php. The manipulat |
| CVE-2026-15921 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.1 through 0.40.5, `nvm ls-remote` (and other commands that r |
| CVE-2026-15925 | Awaiting Analysis | 未確認 | CWE-297 | Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostnam |
| CVE-2026-15927 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter withou |
| CVE-2026-15928 | Deferred | 未確認 | CWE-79 | XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component. |
| CVE-2026-15929 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare |
| CVE-2026-15943 | Analyzed | 未確認 | CWE-1288 | A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC id |
| CVE-2026-15945 | Modified | 未確認 | CWE-639 | A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions (FGAP) v2 is enabled, a delegated administrator |
| CVE-2026-15957 | Awaiting Analysis | 未確認 | CWE-674 | Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom servic |
| CVE-2026-15962 | Deferred | 未確認 | CWE-502 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This |
| CVE-2026-15966 | Analyzed | 未確認 | CWE-942 | Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before |
| CVE-2026-15967 | Analyzed | 未確認 | CWE-613 | Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3. |
| CVE-2026-15968 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5 |
| CVE-2026-15969 | Analyzed | 未確認 | CWE-502 | SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted ba |
| CVE-2026-15971 | Analyzed | 未確認 | CWE-95 | SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inferen |
| CVE-2026-15974 | Analyzed | 未確認 | CWE-918 | SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, |
| CVE-2026-15975 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-15976 | Analyzed | 未確認 | CWE-502 | SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., we |
| CVE-2026-15977 | Analyzed | 未確認 | CWE-522 | SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured. |
| CVE-2026-15978 | Analyzed | 未確認 | CWE-306 | SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed w |
| CVE-2026-15981 | Awaiting Analysis | 未確認 | CWE-287 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_sig |
| CVE-2026-15982 | Deferred | 未確認 | CWE-269 | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including |
| CVE-2026-15992 | Deferred | 未確認 | CWE-269 | The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce v |
| CVE-2026-15995 | Analyzed | 未確認 | CWE-362 | IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing fai |
| CVE-2026-15997 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files htt |
| CVE-2026-16002 | Deferred | 未確認 | CWE-125 | The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash the parsing process and cause a denial of service. |
| CVE-2026-16008 | Deferred | 未確認 | CWE-1321, CWE-94 | A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDepende |
| CVE-2026-16009 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argum |
| CVE-2026-16013 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize_symbolic of the |
| CVE-2026-16014 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login Form. Performing a manipulation of the argument U |
| CVE-2026-16015 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of the file executor_manager/app/api/v1/tasks.py of the compone |
| CVE-2026-16016 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument |
| CVE-2026-16017 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. Impacted is the function list/remove of the file tools/tool_cron.go of the component cron Chat Tool. The manipu |
| CVE-2026-16072 | Modified | 未確認 | CWE-284, CWE-497 | A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent |
| CVE-2026-16073 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of the file a |
| CVE-2026-16074 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_plugin/update_all_plugins of the file astrbot/dashboard/routes/plugin.py of the c |
| CVE-2026-16075 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in AstrBotDevs AstrBot up to 4.25.5. This vulnerability affects the function OpenApiRoute.get_chat_sessions of the file astrbot/dashboard/routes/open_api.py o |
| CVE-2026-16076 | Deferred | 未確認 | CWE-287, CWE-290 | A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the c |
| CVE-2026-16077 | Deferred | 未確認 | CWE-59 | A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py of the component File |
| CVE-2026-16078 | Deferred | 未確認 | CWE-22 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' paramete |
| CVE-2026-16081 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown function of the file web/backend/api/auth.go. Executing a manipulation can lead to |
| CVE-2026-16082 | Deferred | 未確認 | CWE-362, CWE-367 | A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation |
| CVE-2026-16083 | Deferred | 未確認 | CWE-287, CWE-294 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of the file pkg/channels/line/line.go of the component LINE Webho |
| CVE-2026-16084 | Deferred | 未確認 | CWE-918 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side re |
| CVE-2026-16085 | Deferred | 未確認 | CWE-829 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to i |
| CVE-2026-16088 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup |
| CVE-2026-16089 | Modified | 未確認 | CWE-384, CWE-472 | A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 authorization codes are not properly bound to the client that o |
| CVE-2026-1609 | Analyzed | 未確認 | CWE-284 | A flaw was found in Keycloak. When the JSON Web Token (JWT) authorization grant preview feature is enabled and a user account is disabled, Keycloak fails to validate the user’s dis |
| CVE-2026-16092 | Deferred | 未確認 | CWE-89 | The Improved Save Button plugin for WordPress is vulnerable to second-order SQL Injection via 'meta_key' Custom Field via 'Save and Duplicate' Action in all versions up to, and inc |
| CVE-2026-16093 | Modified | 未確認 | CWE-807 | Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovere |
| CVE-2026-16095 | Deferred | 未確認 | CWE-119, CWE-787 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the ar |
| CVE-2026-16096 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_domains. The manipulation leads t |
| CVE-2026-16097 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name Handler. The manipulation of the argument a1 res |
| CVE-2026-16103 | Modified | 未確認 | CWE-305, CWE-841 | A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Ini |
| CVE-2026-16104 | Modified | 未確認 | CWE-212, CWE-522 | A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access managem |
| CVE-2026-16105 | Modified | 未確認 | CWE-639, CWE-862 | A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorizati |
| CVE-2026-16106 | Modified | 未確認 | CWE-1220, CWE-862 | A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role f |
| CVE-2026-16107 | Awaiting Analysis | 未確認 | CWE-295 | IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive infor |
| CVE-2026-16108 | Modified | 未確認 | CWE-1220, CWE-200 | A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new |
| CVE-2026-16117 | Analyzed | 未確認 | CWE-20 | Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for ro |
| CVE-2026-16118 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacke |
| CVE-2026-16119 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/exec_approval.go of the component WebSocket |
| CVE-2026-16120 | Deferred | 未確認 | CWE-706 | A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/exec_approval.go. Ex |
| CVE-2026-16121 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec_approval.go. The manipulation leads to im |
| CVE-2026-16122 | Deferred | 未確認 | CWE-285, CWE-863 | A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file |
| CVE-2026-16123 | Deferred | 未確認 | CWE-862, CWE-863 | A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is the function ToolsInvokeHandler.ServeHTTP of the file internal/http/tools_invoke.g |
| CVE-2026-16124 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/web_shared.go |
| CVE-2026-16125 | Deferred | 未確認 | CWE-918 | A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http |
| CVE-2026-16126 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function handle_rpc_request of the file claw/services/swarm/swarm.c of the component Swarm |
| CVE-2026-16127 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of the file claw/tools/tool_net.c of the component http_request. |
| CVE-2026-16128 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file claw/services/swarm/swarm.c of the component http_request. |
| CVE-2026-16129 | Deferred | 未確認 | CWE-183, CWE-184 | A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the function ShellAction._validate_command of the file src/safestclaw/actions/shell. |
| CVE-2026-16130 | Deferred | 未確認 | CWE-59 | A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs of the component writ |
| CVE-2026-16131 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argume |
| CVE-2026-16133 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function child_process.spawn of the file mcp.ts. Executing a manipulation can lead to c |
| CVE-2026-16150 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the function extendDefaults/extendDefinitions/extendAliases in the library lib/dependency |
| CVE-2026-16151 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilter of the file src/filters.ts. Such manipulation of the argument column leads to |
| CVE-2026-16152 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit_rooma.php. Performing a manipulation of the arg |
| CVE-2026-16154 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit_room1.php |
| CVE-2026-16155 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /schoolyr.php. The manipula |
| CVE-2026-16156 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /forexam.php. The manipulation of the argument |
| CVE-2026-16157 | Deferred | 未確認 | CWE-732 | Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory |
| CVE-2026-16158 | Analyzed | 未確認 | CWE-441 | Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter |
| CVE-2026-1617 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injec |
| CVE-2026-16184 | Analyzed | 未確認 | CWE-862 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request. |
| CVE-2026-16192 | Analyzed | 未確認 | CWE-674 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled. |
| CVE-2026-16194 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web_fetch/web_fetch.py. Executing a manipulation |
| CVE-2026-16195 | Deferred | 未確認 | CWE-285, CWE-863 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group |
| CVE-2026-16196 | Deferred | 未確認 | CWE-918 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. |
| CVE-2026-16197 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of |
| CVE-2026-16198 | Deferred | 未確認 | CWE-287, CWE-288 | A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access_control.go of the component First |
| CVE-2026-16199 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed_exec.go. Executing a |
| CVE-2026-16200 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file claw/services/swarm/swarm.c of the component RPC Handler. The m |
| CVE-2026-16201 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. Th |
| CVE-2026-16202 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipu |
| CVE-2026-16203 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulat |
| CVE-2026-16204 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_run_script_execute of the file claw/services/tools/script.c of the component Teleg |
| CVE-2026-16205 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php of the co |
| CVE-2026-16206 | Deferred | 未確認 | CWE-613 | A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_validators. |
| CVE-2026-16207 | Deferred | 未確認 | CWE-598 | A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use |
| CVE-2026-16208 | Deferred | 未確認 | CWE-362 | A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes |
| CVE-2026-16209 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. |
| CVE-2026-16210 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_action of the file simpleui/admin.py of the component AjaxAdmin AJAX Endpoint. Perfo |
| CVE-2026-16211 | Deferred | 未確認 | CWE-362 | A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.increment_hostname of the file src/ralph/asset |
| CVE-2026-16212 | Deferred | 未確認 | CWE-362 | A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The |
| CVE-2026-16213 | Deferred | 未確認 | CWE-310, CWE-312 | A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry_pr |
| CVE-2026-16214 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such mani |
| CVE-2026-16215 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulatio |
| CVE-2026-16216 | Deferred | 未確認 | CWE-352, CWE-862 | A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAuth Handler. Executing a manipulation can lead to cross-site |
| CVE-2026-16217 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the componen |
| CVE-2026-16218 | Deferred | 未確認 | CWE-703 | A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage |
| CVE-2026-16219 | Deferred | 未確認 | CWE-22 | A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File M |
| CVE-2026-16220 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the arg |
| CVE-2026-16221 | Analyzed | 未確認 | CWE-436 | Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an autho |
| CVE-2026-16222 | Deferred | 未確認 | CWE-918 | A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/sso/servic |
| CVE-2026-16223 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlBotSrc of the file backend/crm/src/main/java/cn/cordys/crm/system/service/Integra |
| CVE-2026-16224 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The m |
| CVE-2026-16225 | Deferred | 未確認 | CWE-119, CWE-787 | A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The man |
| CVE-2026-16226 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings of the file /admin/admin_class_novo.php. This manipulation of |
| CVE-2026-16227 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /edit_subject.php. Such manipulatio |
| CVE-2026-16228 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit_schoolyr.php. Performing a manipulation of t |
| CVE-2026-16229 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulati |
| CVE-2026-16232 | Analyzed | 掲載 | CWE-287 | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to au |
| CVE-2026-16235 | Deferred | 未確認 | CWE-338 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cr |
| CVE-2026-16236 | Deferred | 未確認 | CWE-434 | The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content vali |
| CVE-2026-16242 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based |
| CVE-2026-16243 | Analyzed | 未確認 | CWE-125 | In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero. |
| CVE-2026-16244 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /prescriptionorder |
| CVE-2026-16246 | Awaiting Analysis | 未確認 | CWE-276 | In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% ins |
| CVE-2026-16247 | Awaiting Analysis | 未確認 | CWE-276 | In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and rep |
| CVE-2026-16248 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The |
| CVE-2026-16252 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/sy |
| CVE-2026-16254 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in claircore's apk package scanner. Malformed package-database data in a container layer can cause an out-of-bounds access that panics the scanner. If that panic i |
| CVE-2026-16266 | Awaiting Analysis | 未確認 | CWE-1321 | Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in util.js. An attacker can modify the JavaScript prototype cha |
| CVE-2026-16270 | Deferred | 未確認 | CWE-1333 | Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can r |
| CVE-2026-16277 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`, address information returned by the server is copied |
| CVE-2026-16280 | Analyzed | 未確認 | CWE-190 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect |
| CVE-2026-16287 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update al |
| CVE-2026-16308 | Awaiting Analysis | 未確認 | CWE-770 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded ac |
| CVE-2026-16312 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-16313 | Awaiting Analysis | 未確認 | CWE-93 | A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name stri |
| CVE-2026-16317 | Awaiting Analysis | 未確認 | CWE-354 | Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records |
| CVE-2026-16318 | Awaiting Analysis | 未確認 | CWE-401 | The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store the peer's transport parameters. When a TLS 1.3 connection goe |
| CVE-2026-16324 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation o |
| CVE-2026-16326 | Deferred | 未確認 | CWE-488 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for s |
| CVE-2026-16327 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web_file/upload.php. Executing a manipulation of the argument Fi |
| CVE-2026-16328 | Deferred | 未確認 | CWE-918 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consu |
| CVE-2026-16329 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photo_center/php/uploadify.php. The manipulation of the argument Malicious Hand |
| CVE-2026-16330 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argumen |
| CVE-2026-16331 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/save_ajax.php. Such manipulation of the argument Mali |
| CVE-2026-16332 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi_uploadify.php. Performing a manipulation of the argument Filedata[ |
| CVE-2026-16334 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the |
| CVE-2026-16336 | Deferred | 未確認 | CWE-601 | A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAut |
| CVE-2026-16337 | Awaiting Analysis | 未確認 | CWE-269 | Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated ba |
| CVE-2026-16339 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-16347 | Deferred | 未確認 | CWE-307 | MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessive login attempts. The system does not enforce meaningful ra |
| CVE-2026-16349 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 14 |
| CVE-2026-16350 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunder |
| CVE-2026-16351 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thu |
| CVE-2026-16352 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, |
| CVE-2026-16353 | Analyzed | 未確認 | CWE-416, CWE-476, CWE-824 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1 |
| CVE-2026-16354 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 14 |
| CVE-2026-16355 | Analyzed | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 14 |
| CVE-2026-16356 | Analyzed | 未確認 | CWE-416, CWE-693 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, |
| CVE-2026-16357 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1 |
| CVE-2026-16358 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140 |
| CVE-2026-16359 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbi |
| CVE-2026-16360 | Modified | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the |
| CVE-2026-16361 | Analyzed | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been e |
| CVE-2026-16362 | Analyzed | 未確認 | CWE-416 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16363 | Analyzed | 未確認 | CWE-682, CWE-843 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16364 | Analyzed | 未確認 | CWE-119, CWE-120 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16365 | Modified | 未確認 | CWE-269, CWE-284 | Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15. |
| CVE-2026-16366 | Modified | 未確認 | CWE-269 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16367 | Analyzed | 未確認 | CWE-119, CWE-416, CWE-787 | Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16368 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16369 | Analyzed | 未確認 | CWE-190 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16370 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16371 | Modified | 未確認 | CWE-269 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and |
| CVE-2026-16372 | Modified | 未確認 | CWE-269 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16373 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153. |
| CVE-2026-16374 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16375 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16376 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16377 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16378 | Analyzed | 未確認 | CWE-20 | Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16379 | Modified | 未確認 | CWE-269 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16380 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16381 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16382 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16383 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16384 | Analyzed | 未確認 | CWE-908 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16385 | Analyzed | 未確認 | CWE-908 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16386 | Analyzed | 未確認 | CWE-908 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16387 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-346 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16388 | Analyzed | 未確認 | CWE-693 | Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16389 | Modified | 未確認 | CWE-190 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16390 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16391 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16392 | Analyzed | 未確認 | CWE-670, CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16393 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16394 | Modified | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16395 | Modified | 未確認 | CWE-190 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16396 | Modified | 未確認 | CWE-269 | Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16397 | Analyzed | 未確認 | CWE-1021 | Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153. |
| CVE-2026-16398 | Analyzed | 未確認 | CWE-200, CWE-346 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16399 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16400 | Analyzed | 未確認 | CWE-200 | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16401 | Modified | 未確認 | CWE-269 | Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16402 | Analyzed | 未確認 | CWE-190 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16403 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16404 | Analyzed | 未確認 | CWE-290 | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. |
| CVE-2026-16405 | Modified | 未確認 | CWE-200 | Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
| CVE-2026-16406 | Modified | 未確認 | CWE-693 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16407 | Analyzed | 未確認 | CWE-284, CWE-693 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16408 | Modified | 未確認 | CWE-190 | Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16409 | Analyzed | 未確認 | CWE-824 | Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16410 | Analyzed | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
| CVE-2026-16411 | Modified | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite |
| CVE-2026-16412 | Modified | 未確認 | CWE-119 | Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the |
| CVE-2026-16413 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-16414 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious net |
| CVE-2026-16415 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a cra |
| CVE-2026-16416 | Modified | 未確認 | CWE-190 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium se |
| CVE-2026-16417 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-16418 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-16419 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-16420 | Analyzed | 未確認 | CWE-843 | Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-16421 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr |
| CVE-2026-16422 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain s |
| CVE-2026-16423 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruptio |
| CVE-2026-16424 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-16439 | Analyzed | 未確認 | CWE-124 | In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow. |
| CVE-2026-16441 | Analyzed | 未確認 | CWE-758 | In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated |
| CVE-2026-16445 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, nex |
| CVE-2026-16447 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multi_uploadify.php. The manipulation of the argument Filed |
| CVE-2026-16448 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, D |
| CVE-2026-16449 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file |
| CVE-2026-16450 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page o |
| CVE-2026-16451 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This impacts an unknown function of the file /api/system/file/upload of |
| CVE-2026-16454 | Analyzed | 未確認 | CWE-284, CWE-862 | In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identified in the Direct Device Integration (DDI) Controller. This |
| CVE-2026-16461 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remote RPCBPROC_DUMP reply are written |
| CVE-2026-16462 | Deferred | 未確認 | CWE-89 | In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands. |
| CVE-2026-16463 | Analyzed | 未確認 | CWE-122 | A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a cr |
| CVE-2026-16465 | Analyzed | 未確認 | CWE-125 | A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cau |
| CVE-2026-16473 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. Th |
| CVE-2026-16481 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unv |
| CVE-2026-16484 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_subjecta.php. This manip |
| CVE-2026-16485 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /class.php. Such manipulati |
| CVE-2026-16486 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument day |
| CVE-2026-16488 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Project |
| CVE-2026-16489 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. |
| CVE-2026-16490 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument |
| CVE-2026-16492 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the componen |
| CVE-2026-16493 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-op |
| CVE-2026-16496 | Deferred | 未確認 | CWE-384 | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user |
| CVE-2026-16498 | Deferred | 未確認 | CWE-488 | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terra |
| CVE-2026-16503 | Awaiting Analysis | 未確認 | CWE-1188, CWE-1327, CWE-1393 | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "post |
| CVE-2026-16504 | Deferred | 未確認 | CWE-1188, CWE-1393, CWE-321 | Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True. |
| CVE-2026-16517 | Awaiting Analysis | 未確認 | CWE-190 | A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is ena |
| CVE-2026-16519 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe searc |
| CVE-2026-16524 | Awaiting Analysis | 未確認 | CWE-78 | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute ar |
| CVE-2026-16526 | Awaiting Analysis | 未確認 | CWE-403 | A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitra |
| CVE-2026-16527 | Awaiting Analysis | 未確認 | CWE-284, CWE-306 | An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, |
| CVE-2026-16529 | Awaiting Analysis | 未確認 | CWE-190 | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affec |
| CVE-2026-16530 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specially crafte |
| CVE-2026-16531 | Awaiting Analysis | 未確認 | CWE-22 | An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory c |
| CVE-2026-16543 | Awaiting Analysis | 未確認 | CWE-400, CWE-862 | Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denia |
| CVE-2026-16544 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer_access() function (job_events, workfl |
| CVE-2026-16551 | Deferred | 未確認 | CWE-20, CWE-835 | Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only. |
| CVE-2026-16552 | Rejected | 未確認 | Rejected reason: The reported issue is invalid, as it requires root privileges to reproduce, and it is out of scope of the threat model of the affected component. | |
| CVE-2026-16553 | Analyzed | 未確認 | CWE-522 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allo |
| CVE-2026-16554 | Analyzed | 未確認 | CWE-190 | cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap aroun |
| CVE-2026-16560 | Awaiting Analysis | 未確認 | CWE-1220 | A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing another call |
| CVE-2026-16581 | Deferred | 未確認 | CWE-540 | In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access function |
| CVE-2026-16584 | Awaiting Analysis | 未確認 | CWE-455 | Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS A |
| CVE-2026-16585 | Deferred | 未確認 | CWE-22 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation |
| CVE-2026-16587 | Deferred | 未確認 | CWE-862 | The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to th |
| CVE-2026-16597 | Deferred | 未確認 | CWE-79 | The GTM4WP – A Google Tag Manager (GTM) plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Billing Fields in all versions up to, |
| CVE-2026-16606 | Deferred | 未確認 | CWE-94 | A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) o |
| CVE-2026-16607 | Deferred | 未確認 | CWE-269 | A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authe |
| CVE-2026-16610 | Deferred | 未確認 | CWE-434 | The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. T |
| CVE-2026-16615 | Awaiting Analysis | 未確認 | CWE-338 | A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. |
| CVE-2026-16624 | Awaiting Analysis | 未確認 | CWE-639 | Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booki |
| CVE-2026-16628 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec of the component JIT Plugin Entry Handler. Performing a manip |
| CVE-2026-16629 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the compon |
| CVE-2026-16630 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipul |
| CVE-2026-16631 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/pack.js of the component package-manager Command Handler. The |
| CVE-2026-16632 | Deferred | 未確認 | CWE-20 | A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the library lib/facil/http/parsers/websocket_parser.h of the compon |
| CVE-2026-16634 | Deferred | 未確認 | CWE-1104 | TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vuln |
| CVE-2026-16653 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the file lib/facil/http/http.c of the component Public Folder Ha |
| CVE-2026-16655 | Deferred | 未確認 | CWE-79 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Field Nested ` |
| CVE-2026-1667 | Deferred | 未確認 | CWE-862 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a l |
| CVE-2026-16723 | Deferred | 未確認 | CWE-20, CWE-502 | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType e |
| CVE-2026-16727 | Deferred | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privil |
| CVE-2026-16728 | Analyzed | 未確認 | CWE-444 | undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial respons |
| CVE-2026-16729 | Analyzed | 未確認 | CWE-74 | undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is |
| CVE-2026-16730 | Awaiting Analysis | 未確認 | CWE-755 | A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, cau |
| CVE-2026-16733 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in bahmutov find-cypress-specs up to 1.54.12. The impacted element is the function shell.exec of the file src/index.js of the component Branch Handle |
| CVE-2026-16735 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changel |
| CVE-2026-16743 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the c |
| CVE-2026-16745 | Awaiting Analysis | 未確認 | CWE-346 | A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the cluster can bypass auth |
| CVE-2026-16751 | Deferred | 未確認 | Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contac | |
| CVE-2026-16756 | Awaiting Analysis | 未確認 | CWE-770 | Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve() path of Amazon aws-smithy-http-server might allow remote attackers |
| CVE-2026-16763 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration |
| CVE-2026-16764 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the component API/Web. Such mani |
| CVE-2026-16765 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a |
| CVE-2026-16766 | Deferred | 未確認 | CWE-78 | Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options. Options are passed directly to the wkhtmltopdf command witho |
| CVE-2026-16767 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a man |
| CVE-2026-16768 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper b |
| CVE-2026-16771 | Deferred | 未確認 | CWE-306 | In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/*.ha management endpoints, relying solely on cl |
| CVE-2026-16773 | Deferred | 未確認 | CWE-200 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5 |
| CVE-2026-16774 | Deferred | 未確認 | CWE-862 | The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcs_send_email() AJAX handler. This is due to the wpcs_send |
| CVE-2026-16796 | Awaiting Analysis | 未確認 | CWE-88 | Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute |
| CVE-2026-16797 | Deferred | 未確認 | CWE-639 | The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin |
| CVE-2026-16798 | Analyzed | 未確認 | CWE-201 | Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with scoped job o |
| CVE-2026-16799 | Analyzed | 未確認 | CWE-862 | Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader ro |
| CVE-2026-16800 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedul |
| CVE-2026-16801 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with variab |
| CVE-2026-16802 | Analyzed | 未確認 | CWE-312 | Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read se |
| CVE-2026-16804 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-16805 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-16806 | Analyzed | 未確認 | CWE-416 | Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-16807 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-16811 | Deferred | 未確認 | CWE-89 | The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions |
| CVE-2026-16812 | Analyzed | 掲載 | CWE-78 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf |
| CVE-2026-16843 | Deferred | 未確認 | CWE-78 | Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by |
| CVE-2026-16870 | Awaiting Analysis | 未確認 | CWE-121, CWE-787, CWE-918 | Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overfl |
| CVE-2026-16910 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a r |
| CVE-2026-16969 | Deferred | 未確認 | CWE-79 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function. |
| CVE-2026-16970 | Deferred | 未確認 | CWE-613 | The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time |
| CVE-2026-16971 | Deferred | 未確認 | CWE-770 | The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks. |
| CVE-2026-17039 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing a |
| CVE-2026-17048 | Modified | 未確認 | CWE-200 | A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets |
| CVE-2026-17059 | Modified | 未確認 | CWE-639 | A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs |
| CVE-2026-17072 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM contain |
| CVE-2026-17107 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy ap |
| CVE-2026-17161 | Deferred | 未確認 | CWE-79 | The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'filterMobileText' Block Attribute in all versio |
| CVE-2026-17162 | Deferred | 未確認 | CWE-79 | The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'currentPostId' Block Attribute in all versions |
| CVE-2026-17166 | Deferred | 未確認 | CWE-862 | The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to |
| CVE-2026-17191 | Awaiting Analysis | 未確認 | CWE-89 | An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in una |
| CVE-2026-17192 | Awaiting Analysis | 未確認 | CWE-918 | A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are not otherw |
| CVE-2026-17346 | Analyzed | 未確認 | CWE-89 | The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates to it, but missed several sinks that had been |
| CVE-2026-17347 | Analyzed | 未確認 | CWE-78, CWE-88 | The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a per-user encryption key, with %u in the configured |
| CVE-2026-17348 | Analyzed | 未確認 | CWE-306 | In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator; the application's before_request hook only handles desktop-mode auto-login and th |
| CVE-2026-17349 | Analyzed | 未確認 | CWE-522, CWE-639 | /misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing server, clones that server via Server.clone(), w |
| CVE-2026-17350 | Analyzed | 未確認 | CWE-862 | The per-tool permission system (custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3) did not enforce its permission check consistently. In SERVER mode, pgAdmin |
| CVE-2026-17351 | Analyzed | 未確認 | CWE-115, CWE-89 | The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-transact |
| CVE-2026-17432 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/ad |
| CVE-2026-17433 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP |
| CVE-2026-17434 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Ex |
| CVE-2026-17457 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts |
| CVE-2026-17458 | Deferred | 未確認 | CWE-918 | A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Cont |
| CVE-2026-17459 | Deferred | 未確認 | CWE-59, CWE-61 | A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/Externa |
| CVE-2026-17496 | Analyzed | 未確認 | CWE-79 | NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without |
| CVE-2026-17497 | Analyzed | 未確認 | CWE-1249, CWE-276, CWE-78 | NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaS |
| CVE-2026-17500 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation results |
| CVE-2026-17501 | Deferred | 未確認 | CWE-404, CWE-674 | A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to |
| CVE-2026-17512 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds |
| CVE-2026-17513 | Deferred | 未確認 | CWE-617 | A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype res |
| CVE-2026-17514 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerability is the function Extract of the file lib/extract.js. This manipulation causes p |
| CVE-2026-17523 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet This patch switches the timer to HRTIME | |
| CVE-2026-17524 | Deferred | 未確認 | CWE-22 | Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypa |
| CVE-2026-17527 | Awaiting Analysis | 未確認 | CWE-639 | In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the |
| CVE-2026-17528 | Deferred | 未確認 | CWE-79 | Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting (XSS) via the <select> element. An attacker can supply a malicious payload that is rendered |
| CVE-2026-17529 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr_main_agent.py. The manipulation of the argument re |
| CVE-2026-17530 | Deferred | 未確認 | CWE-285, CWE-863 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/astr |
| CVE-2026-17531 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Uns |
| CVE-2026-17534 | Awaiting Analysis | 未確認 | CWE-918 | Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or |
| CVE-2026-17543 | Analyzed | 未確認 | CWE-89 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4. |
| CVE-2026-17544 | Analyzed | 未確認 | CWE-787 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. |
| CVE-2026-17550 | Analyzed | 未確認 | CWE-125 | A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cau |
| CVE-2026-17552 | Deferred | 未確認 | CWE-918 | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call. When the rewrite base is a plain string, the |
| CVE-2026-17561 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. T |
| CVE-2026-17566 | Analyzed | 未確認 | CWE-115, CWE-78 | pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql vi |
| CVE-2026-17567 | Deferred | 未確認 | CWE-639 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up |
| CVE-2026-17568 | Analyzed | 未確認 | CWE-863 | Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group membership managemen |
| CVE-2026-17569 | Analyzed | 未確認 | CWE-522 | Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the par |
| CVE-2026-17570 | Analyzed | 未確認 | CWE-639 | Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to disclose plaintext credential secrets via crafted |
| CVE-2026-17572 | Analyzed | 未確認 | CWE-125, CWE-787 | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HD |
| CVE-2026-17573 | Analyzed | 未確認 | CWE-415 | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to ab |
| CVE-2026-17574 | Analyzed | 未確認 | CWE-476, CWE-617 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the app |
| CVE-2026-17592 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-17612 | Awaiting Analysis | 未確認 | CWE-200 | Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an a |
| CVE-2026-17650 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-17651 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafte |
| CVE-2026-17652 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17653 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-17654 | Analyzed | 未確認 | CWE-362 | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: |
| CVE-2026-17655 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-17656 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-17657 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-17658 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17659 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi |
| CVE-2026-17660 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perf |
| CVE-2026-17661 | Analyzed | 未確認 | CWE-416 | Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-17662 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17663 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potential |
| CVE-2026-17664 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-17665 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17666 | Analyzed | 未確認 | CWE-325 | Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious n |
| CVE-2026-17667 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-17668 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-17669 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p |
| CVE-2026-17670 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17671 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-17672 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-17673 | Analyzed | 未確認 | CWE-190 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-17674 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security |
| CVE-2026-17675 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-17676 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-17677 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-17678 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-17679 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross |
| CVE-2026-17680 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-17681 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce |
| CVE-2026-17682 | Analyzed | 未確認 | CWE-190 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-17683 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-17684 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to po |
| CVE-2026-17685 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-17686 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site is |
| CVE-2026-17687 | Analyzed | 未確認 | CWE-843 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17688 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17689 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-17690 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Ch |
| CVE-2026-17691 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-17692 | Analyzed | 未確認 | CWE-416 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-17693 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit |
| CVE-2026-17694 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-17695 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr |
| CVE-2026-17696 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-17697 | Analyzed | 未確認 | CWE-843 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-17698 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chr |
| CVE-2026-17699 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: |
| CVE-2026-17700 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-17701 | Analyzed | 未確認 | CWE-125 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially |
| CVE-2026-17702 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf |
| CVE-2026-17703 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page |
| CVE-2026-17704 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17705 | Analyzed | 未確認 | CWE-190 | Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-17706 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cr |
| CVE-2026-17707 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive inf |
| CVE-2026-17708 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17709 | Analyzed | 未確認 | CWE-362 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-1771 | Deferred | 未確認 | CWE-20 | The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 |
| CVE-2026-17710 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san |
| CVE-2026-17711 | Analyzed | 未確認 | CWE-362 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-17712 | Analyzed | 未確認 | CWE-362 | Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severit |
| CVE-2026-17713 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to |
| CVE-2026-17714 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-17715 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-ori |
| CVE-2026-17716 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. (Chromium security |
| CVE-2026-17717 | Analyzed | 未確認 | CWE-190 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security seve |
| CVE-2026-17718 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-17719 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-17720 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi |
| CVE-2026-17721 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-17722 | Analyzed | 未確認 | CWE-416 | Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san |
| CVE-2026-17723 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-17724 | Analyzed | 未確認 | CWE-362 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium securi |
| CVE-2026-17725 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17726 | Analyzed | 未確認 | CWE-190 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium se |
| CVE-2026-17727 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-17728 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Ch |
| CVE-2026-17729 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access v |
| CVE-2026-17730 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross- |
| CVE-2026-17731 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-17732 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-17733 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-17734 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chro |
| CVE-2026-17735 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perf |
| CVE-2026-17736 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten |
| CVE-2026-17737 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-17738 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per |
| CVE-2026-17739 | Analyzed | 未確認 | CWE-79 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary |
| CVE-2026-17740 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17741 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a cra |
| CVE-2026-17742 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17743 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium |
| CVE-2026-17744 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-17745 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-17746 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-17747 | Analyzed | 未確認 | CWE-20, CWE-451 | Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perf |
| CVE-2026-17748 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a |
| CVE-2026-17749 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potent |
| CVE-2026-17750 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-17751 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in AdFilter in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chro |
| CVE-2026-17752 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-17753 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17754 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sev |
| CVE-2026-17755 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a c |
| CVE-2026-17756 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromi |
| CVE-2026-17757 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17758 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-17759 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pag |
| CVE-2026-17760 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-17761 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via |
| CVE-2026-17762 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-17763 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craft |
| CVE-2026-17764 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sev |
| CVE-2026-17765 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via |
| CVE-2026-17766 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML pag |
| CVE-2026-17767 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak |
| CVE-2026-17768 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-17769 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-17770 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-17771 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17772 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-17773 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-17774 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap co |
| CVE-2026-17775 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-17776 | Analyzed | 未確認 | CWE-693 | Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-17777 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17778 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium |
| CVE-2026-17779 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium securit |
| CVE-2026-17780 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chro |
| CVE-2026-17781 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin da |
| CVE-2026-17782 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML p |
| CVE-2026-17783 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-17784 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-17785 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17786 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform |
| CVE-2026-17787 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-17788 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-17789 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via maliciou |
| CVE-2026-17790 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-17791 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoo |
| CVE-2026-17792 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17793 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secu |
| CVE-2026-17794 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof |
| CVE-2026-17795 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi |
| CVE-2026-17796 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cr |
| CVE-2026-17797 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-17798 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit |
| CVE-2026-17799 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious |
| CVE-2026-17800 | Analyzed | 未確認 | CWE-1300 | Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via |
| CVE-2026-17801 | Analyzed | 未確認 | CWE-125 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-17802 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-17803 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentiall |
| CVE-2026-17804 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17805 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chr |
| CVE-2026-17806 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-17807 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17808 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-17809 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-17810 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17811 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secu |
| CVE-2026-17812 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secur |
| CVE-2026-17813 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page |
| CVE-2026-17814 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafte |
| CVE-2026-17815 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17816 | Analyzed | 未確認 | CWE-269 | Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege |
| CVE-2026-17817 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-17818 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chrom |
| CVE-2026-17819 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security |
| CVE-2026-17820 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17821 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation |
| CVE-2026-17822 | Analyzed | 未確認 | CWE-362 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17823 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-17824 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium s |
| CVE-2026-17825 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-17826 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to le |
| CVE-2026-17827 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-17828 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17829 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17830 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. ( |
| CVE-2026-17831 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spo |
| CVE-2026-17832 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17833 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-17834 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially pe |
| CVE-2026-17835 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17836 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17837 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per |
| CVE-2026-17838 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium secur |
| CVE-2026-17839 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17840 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity |
| CVE-2026-17841 | Modified | 未確認 | CWE-362 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17842 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to by |
| CVE-2026-17843 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-17844 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious |
| CVE-2026-17845 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-17846 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin po |
| CVE-2026-17847 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-17848 | Analyzed | 未確認 | CWE-20 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security se |
| CVE-2026-17849 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via malicious |
| CVE-2026-17850 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium securi |
| CVE-2026-17851 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi |
| CVE-2026-17852 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium secur |
| CVE-2026-17853 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a |
| CVE-2026-17854 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-17855 | Analyzed | 未確認 | CWE-362 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-17856 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-17857 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-17858 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-17859 | Analyzed | 未確認 | CWE-1300 | Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17860 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via |
| CVE-2026-17861 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file |
| CVE-2026-17862 | Analyzed | 未確認 | CWE-416 | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium secur |
| CVE-2026-17863 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium |
| CVE-2026-17864 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chro |
| CVE-2026-17865 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sa |
| CVE-2026-17866 | Analyzed | 未確認 | CWE-843 | Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-17867 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page |
| CVE-2026-17868 | Analyzed | 未確認 | CWE-269 | Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security |
| CVE-2026-17869 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-17870 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious |
| CVE-2026-17871 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-ori |
| CVE-2026-17872 | Analyzed | 未確認 | CWE-347 | Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. (C |
| CVE-2026-17873 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-17874 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17875 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-17876 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17877 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network |
| CVE-2026-17878 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-17879 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17880 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-17881 | Analyzed | 未確認 | CWE-416 | Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-17882 | Analyzed | 未確認 | CWE-693 | Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted |
| CVE-2026-17883 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-17884 | Analyzed | 未確認 | CWE-416 | Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securit |
| CVE-2026-17885 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-17886 | Analyzed | 未確認 | CWE-416 | Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security se |
| CVE-2026-17887 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corr |
| CVE-2026-17888 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network |
| CVE-2026-17889 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-17890 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per |
| CVE-2026-17891 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-17892 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-17893 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potential |
| CVE-2026-17894 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securit |
| CVE-2026-17895 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross- |
| CVE-2026-17896 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-17897 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-17898 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sand |
| CVE-2026-17899 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege e |
| CVE-2026-17900 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. (Chromium se |
| CVE-2026-17901 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious n |
| CVE-2026-17902 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Editing in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu |
| CVE-2026-17903 | Analyzed | 未確認 | CWE-79 | Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged p |
| CVE-2026-17904 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec |
| CVE-2026-17905 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi |
| CVE-2026-17906 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially pe |
| CVE-2026-17907 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17908 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pote |
| CVE-2026-17909 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network tr |
| CVE-2026-17910 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium sec |
| CVE-2026-17911 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-17912 | Analyzed | 未確認 | CWE-601 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. ( |
| CVE-2026-17913 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17914 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra |
| CVE-2026-17915 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secur |
| CVE-2026-17916 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalati |
| CVE-2026-17917 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-17918 | Analyzed | 未確認 | CWE-416 | Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-17919 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access to the dev |
| CVE-2026-17920 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox vi |
| CVE-2026-17921 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass naviga |
| CVE-2026-17922 | Analyzed | 未確認 | CWE-94 | Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s |
| CVE-2026-17923 | Analyzed | 未確認 | CWE-693 | Policy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted domain name. (Chromium security severi |
| CVE-2026-17924 | Analyzed | 未確認 | CWE-416 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-17925 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-17926 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to b |
| CVE-2026-17927 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin d |
| CVE-2026-17928 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-17929 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Ch |
| CVE-2026-17930 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privi |
| CVE-2026-17931 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secu |
| CVE-2026-17932 | Analyzed | 未確認 | CWE-416 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a cra |
| CVE-2026-17933 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-17934 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
| CVE-2026-17935 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-17936 | Analyzed | 未確認 | CWE-352, CWE-693 | Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigati |
| CVE-2026-17937 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
| CVE-2026-17938 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17939 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chr |
| CVE-2026-17940 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce |
| CVE-2026-17941 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted |
| CVE-2026-17942 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-17943 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium securi |
| CVE-2026-17944 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. ( |
| CVE-2026-17945 | Analyzed | 未確認 | CWE-451 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI sp |
| CVE-2026-17946 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-17947 | Analyzed | 未確認 | CWE-416 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-17948 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox vi |
| CVE-2026-17949 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-17950 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium secu |
| CVE-2026-17951 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security |
| CVE-2026-17952 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code insid |
| CVE-2026-17953 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. ( |
| CVE-2026-17954 | Analyzed | 未確認 | CWE-346 | Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. (Chromium security severity: Low) |
| CVE-2026-17955 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium s |
| CVE-2026-17956 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch |
| CVE-2026-17957 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf |
| CVE-2026-17958 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-17959 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-17960 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Ch |
| CVE-2026-17961 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Session in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chr |
| CVE-2026-17962 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromiu |
| CVE-2026-17963 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-17964 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security seve |
| CVE-2026-17965 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security |
| CVE-2026-17966 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a |
| CVE-2026-17967 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-17968 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-17969 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr |
| CVE-2026-17970 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via mali |
| CVE-2026-17971 | Analyzed | 未確認 | CWE-125 | Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. |
| CVE-2026-17972 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17973 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a |
| CVE-2026-17974 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se |
| CVE-2026-17975 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a c |
| CVE-2026-17976 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretion |
| CVE-2026-17977 | Analyzed | 未確認 | CWE-346 | Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-17978 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via |
| CVE-2026-17979 | Analyzed | 未確認 | CWE-362 | Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-17980 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross |
| CVE-2026-17981 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-17982 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium |
| CVE-2026-17983 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-17984 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium sec |
| CVE-2026-17985 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security sev |
| CVE-2026-17986 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy |
| CVE-2026-17987 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentiall |
| CVE-2026-17988 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass naviga |
| CVE-2026-17989 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-17990 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per |
| CVE-2026-17991 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-17992 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-17993 | Analyzed | 未確認 | CWE-362 | Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low) |
| CVE-2026-17994 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chrom |
| CVE-2026-17995 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security sev |
| CVE-2026-17996 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium se |
| CVE-2026-17997 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a |
| CVE-2026-17998 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a c |
| CVE-2026-17999 | Analyzed | 未確認 | CWE-362 | Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severit |
| CVE-2026-18000 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin da |
| CVE-2026-18001 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-18002 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially |
| CVE-2026-18003 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-18004 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a |
| CVE-2026-18005 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-18006 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a |
| CVE-2026-18007 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium securit |
| CVE-2026-18008 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security |
| CVE-2026-18009 | Analyzed | 未確認 | CWE-20, CWE-451 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chr |
| CVE-2026-18010 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security |
| CVE-2026-18011 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memo |
| CVE-2026-18012 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-18013 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-18014 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Ch |
| CVE-2026-18015 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chro |
| CVE-2026-18016 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-18017 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-18018 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security |
| CVE-2026-18019 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-18022 | Analyzed | 未確認 | CWE-190, CWE-787 | Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit sys |
| CVE-2026-18028 | Awaiting Analysis | 未確認 | CWE-639 | The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly c |
| CVE-2026-18029 | Awaiting Analysis | 未確認 | CWE-841 | Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supp |
| CVE-2026-18038 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/tools_invoke.go of t |
| CVE-2026-18047 | Awaiting Analysis | 未確認 | CWE-288 | A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a traili |
| CVE-2026-18060 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-18064 | Awaiting Analysis | 未確認 | CWE-476 | An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions thro |
| CVE-2026-18072 | Deferred | 未確認 | CWE-506 | The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress is vulnerable to Authentication Bypass via a Hardcoded Backdoor in version 10 |
| CVE-2026-18084 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affe |
| CVE-2026-18085 | Analyzed | 未確認 | CWE-74 | An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service. |
| CVE-2026-18107 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hij |
| CVE-2026-18140 | Analyzed | 未確認 | CWE-674 | Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deser |
| CVE-2026-18141 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthenticated remote attacker can bypass mutual Transport Layer Secur |
| CVE-2026-18157 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT backend. This |
| CVE-2026-18174 | Analyzed | 未確認 | CWE-184, CWE-20 | @fastify/forwarded resolves client addresses from the X-Forwarded-For header. In versions before 3.0.2, when the header contains two or more comma separated entries, the parser tri |
| CVE-2026-18186 | Analyzed | 未確認 | CWE-134 | A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task l |
| CVE-2026-18187 | Analyzed | 未確認 | CWE-134 | A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and proc |
| CVE-2026-18188 | Analyzed | 未確認 | CWE-134 | A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed thr |
| CVE-2026-18191 | Deferred | 未確認 | CWE-912 | VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administra |
| CVE-2026-18192 | Deferred | 未確認 | CWE-23 | VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system |
| CVE-2026-18197 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS). This issue affects Link Libra |
| CVE-2026-18201 | Modified | 未確認 | CWE-862 | Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identi |
| CVE-2026-18203 | Analyzed | 未確認 | CWE-863 | A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the |
| CVE-2026-18206 | Analyzed | 未確認 | CWE-20 | A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard |
| CVE-2026-18207 | Analyzed | 未確認 | CWE-285 | A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacke |
| CVE-2026-18208 | Analyzed | 未確認 | CWE-862 | A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management solution used to secure mode |
| CVE-2026-18209 | Modified | 未確認 | CWE-1288 | A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to p |
| CVE-2026-18211 | Analyzed | 未確認 | CWE-20 | A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configu |
| CVE-2026-18214 | Modified | 未確認 | CWE-862 | Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange fe |
| CVE-2026-18215 | Modified | 未確認 | CWE-287 | Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is i |
| CVE-2026-18217 | Analyzed | 未確認 | CWE-20 | A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication |
| CVE-2026-18218 | Modified | 未確認 | CWE-862 | A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application (client) usin |
| CVE-2026-18220 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types t |
| CVE-2026-18236 | Awaiting Analysis | 未確認 | CWE-863 | A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session hi |
| CVE-2026-18245 | Analyzed | 未確認 | CWE-94 | Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, de |
| CVE-2026-18255 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with |
| CVE-2026-18257 | Awaiting Analysis | 未確認 | CWE-295 | Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate issued by this root issuer to be considered trusted |
| CVE-2026-18266 | Awaiting Analysis | 未確認 | CWE-601 | Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. Use |
| CVE-2026-1832 | Deferred | 未確認 | CWE-862 | The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrive |
| CVE-2026-18321 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd |
| CVE-2026-18353 | Awaiting Analysis | 未確認 | CWE-918 | PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against an issuer allowlist using Python's `urlparse` before performing OIDC di |
| CVE-2026-18358 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasse |
| CVE-2026-18360 | Deferred | 未確認 | CWE-79 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function. |
| CVE-2026-18361 | Deferred | 未確認 | CWE-79 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function. |
| CVE-2026-18362 | Deferred | 未確認 | CWE-770 | The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks. |
| CVE-2026-18363 | Deferred | 未確認 | CWE-640 | A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the applic |
| CVE-2026-18369 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating t |
| CVE-2026-18378 | Modified | 未確認 | CWE-918 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authe |
| CVE-2026-18381 | Modified | 未確認 | CWE-918 | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbi |
| CVE-2026-18382 | Modified | 未確認 | CWE-918 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint |
| CVE-2026-18394 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attackers to obtain credentials configured via HTTP_REQUEST_TOKEN_CONFIG by |
| CVE-2026-18436 | Deferred | 未確認 | CWE-862 | The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailp |
| CVE-2026-18437 | Deferred | 未確認 | CWE-862 | The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/co |
| CVE-2026-18446 | Analyzed | 未確認 | CWE-436 | fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it ( |
| CVE-2026-18452 | Deferred | 未確認 | CWE-798 | DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all |
| CVE-2026-18481 | Awaiting Analysis | 未確認 | CWE-79 | Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to steal session tokens and escalate to full |
| CVE-2026-1918 | Analyzed | 未確認 | CWE-532 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 thr |
| CVE-2026-1946 | Deferred | 未確認 | CWE-862 | The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebu_gravitywrite_disconnect_handler( |
| CVE-2026-1982 | Deferred | 未確認 | CWE-472 | The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a use |
| CVE-2026-1989 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects |
| CVE-2026-20146 | Analyzed | 未確認 | CWE-22 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal a |
| CVE-2026-20150 | Undergoing Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20153 | Undergoing Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20156 | Undergoing Analysis | 未確認 | CWE-119 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20157 | Undergoing Analysis | 未確認 | CWE-311 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20158 | Undergoing Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20187 | Undergoing Analysis | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This revi |
| CVE-2026-20191 | Analyzed | 未確認 | CWE-22 | A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to |
| CVE-2026-20213 | Analyzed | 未確認 | CWE-120 | A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from |
| CVE-2026-20214 | Analyzed | 未確認 | CWE-120 | A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from |
| CVE-2026-20215 | Analyzed | 未確認 | CWE-120 | A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from |
| CVE-2026-20216 | Analyzed | 未確認 | CWE-770 | A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerabil |
| CVE-2026-20217 | Analyzed | 未確認 | CWE-120 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting f |
| CVE-2026-20243 | Analyzed | 未確認 | CWE-120 | A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from |
| CVE-2026-20244 | Analyzed | 未確認 | CWE-120 | A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from |
| CVE-2026-20296 | Analyzed | 未確認 | CWE-352 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507 |
| CVE-2026-20297 | Analyzed | 未確認 | CWE-22 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a |
| CVE-2026-20298 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507 |
| CVE-2026-20316 | Analyzed | 掲載 | CWE-259 | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using |
| CVE-2026-20457 | Deferred | 未確認 | CWE-476 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20458 | Deferred | 未確認 | CWE-787 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station cont |
| CVE-2026-20459 | Deferred | 未確認 | CWE-288 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20460 | Deferred | 未確認 | CWE-288 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected to a rogue base stati |
| CVE-2026-20461 | Deferred | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controll |
| CVE-2026-20462 | Deferred | 未確認 | CWE-122 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20463 | Deferred | 未確認 | CWE-280 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20672 | Modified | 未確認 | CWE-200 | An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.3. An app may be able |
| CVE-2026-20706 | Deferred | 未確認 | CWE-284 | Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint. |
| CVE-2026-20744 | Deferred | 未確認 | CWE-284 | The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. |
| CVE-2026-20779 | Deferred | 未確認 | CWE-294 | Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication f |
| CVE-2026-20896 | Deferred | 未確認 | CWE-284 | Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authenticatio |
| CVE-2026-20909 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries. |
| CVE-2026-21039 | Deferred | 未確認 | Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings. | |
| CVE-2026-21040 | Deferred | 未確認 | Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs. | |
| CVE-2026-21041 | Deferred | 未確認 | Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21042 | Deferred | 未確認 | Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code. | |
| CVE-2026-21043 | Deferred | 未確認 | Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege. | |
| CVE-2026-21044 | Deferred | 未確認 | Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application. | |
| CVE-2026-21045 | Deferred | 未確認 | Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory. | |
| CVE-2026-21046 | Deferred | 未確認 | Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code. | |
| CVE-2026-21047 | Deferred | 未確認 | CWE-787 | Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code. |
| CVE-2026-21048 | Deferred | 未確認 | Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory. | |
| CVE-2026-21049 | Deferred | 未確認 | Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. | |
| CVE-2026-21050 | Deferred | 未確認 | Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21051 | Deferred | 未確認 | Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings. | |
| CVE-2026-21052 | Deferred | 未確認 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege. | |
| CVE-2026-21053 | Deferred | 未確認 | Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox. | |
| CVE-2026-21054 | Deferred | 未確認 | Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data. | |
| CVE-2026-21055 | Deferred | 未確認 | Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. | |
| CVE-2026-21056 | Deferred | 未確認 | Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information. | |
| CVE-2026-21057 | Deferred | 未確認 | Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory. | |
| CVE-2026-21368 | Analyzed | 未確認 | CWE-787 | Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks. |
| CVE-2026-21369 | Analyzed | 未確認 | CWE-787 | Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification. |
| CVE-2026-21370 | Analyzed | 未確認 | CWE-787 | Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values. |
| CVE-2026-21379 | Analyzed | 未確認 | CWE-126 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. |
| CVE-2026-21383 | Analyzed | 未確認 | CWE-323 | Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security. |
| CVE-2026-21384 | Analyzed | 未確認 | CWE-787 | Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. |
| CVE-2026-21575 | Analyzed | 未確認 | CWE-94 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Remote Code Execution) |
| CVE-2026-21577 | Analyzed | 未確認 | CWE-400 | This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. |
| CVE-2026-21579 | Analyzed | 未確認 | CWE-200 | This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data |
| CVE-2026-21653 | Awaiting Analysis | 未確認 | CWE-918 | Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application ser |
| CVE-2026-21655 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. |
| CVE-2026-21662 | Analyzed | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before |
| CVE-2026-21723 | Deferred | 未確認 | CWE-400 | The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short p |
| CVE-2026-21729 | Awaiting Analysis | 未確認 | CWE-770 | Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. |
| CVE-2026-21760 | Analyzed | 未確認 | CWE-425 | HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access r |
| CVE-2026-21761 | Analyzed | 未確認 | CWE-942 | HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposi |
| CVE-2026-21762 | Analyzed | 未確認 | CWE-644 | HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-ty |
| CVE-2026-21764 | Analyzed | 未確認 | CWE-754 | HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior unde |
| CVE-2026-21770 | Deferred | 未確認 | CWE-427 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. |
| CVE-2026-21824 | Awaiting Analysis | 未確認 | CWE-266 | HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative oper |
| CVE-2026-21840 | Awaiting Analysis | 未確認 | CWE-208 | HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some leve |
| CVE-2026-21901 | Analyzed | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deacti |
| CVE-2026-21953 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 21.0.3. Eas |
| CVE-2026-21954 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 21.0.3. Eas |
| CVE-2026-22049 | Analyzed | 未確認 | CWE-288 | ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successful |
| CVE-2026-22068 | Analyzed | 未確認 | CWE-777 | Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users |
| CVE-2026-22093 | Deferred | 未確認 | CWE-295 | The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. This allows an attacker on the network path be |
| CVE-2026-22095 | Deferred | 未確認 | CWE-77 | The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection. |
| CVE-2026-22096 | Deferred | 未確認 | CWE-306 | The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different |
| CVE-2026-22097 | Deferred | 未確認 | CWE-347 | The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which |
| CVE-2026-22098 | Deferred | 未確認 | CWE-532 | Various sensitive information such as passwords and charging card UIDs are written to log files. |
| CVE-2026-22099 | Deferred | 未確認 | CWE-287 | The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots |
| CVE-2026-22100 | Deferred | 未確認 | CWE-78 | The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root. |
| CVE-2026-22102 | Deferred | 未確認 | CWE-20 | A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header |
| CVE-2026-22103 | Deferred | 未確認 | CWE-77 | The NPC start endpoint on the web server at port 8090 is vulnerable to command injection. |
| CVE-2026-22104 | Deferred | 未確認 | CWE-639 | Improper access control in Hashtopolis server web-interface chunk activity component for versions prior to 0.14.8 allows any created account to read all cracked hashes of a Hashtop |
| CVE-2026-22547 | Deferred | 未確認 | CWE-20 | Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values. |
| CVE-2026-22555 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets. |
| CVE-2026-22620 | Awaiting Analysis | 未確認 | CWE-89 | Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gai |
| CVE-2026-22621 | Awaiting Analysis | 未確認 | CWE-78 | Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary comm |
| CVE-2026-22622 | Awaiting Analysis | 未確認 | CWE-78 | Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in |
| CVE-2026-22659 | Deferred | 未確認 | CWE-863 | FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in for |
| CVE-2026-22660 | Deferred | 未確認 | CWE-697 | FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiti |
| CVE-2026-22752 | Analyzed | 未確認 | CWE-287 | Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, f |
| CVE-2026-22874 | Deferred | 未確認 | CWE-918 | Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering. |
| CVE-2026-22927 | Analyzed | 未確認 | CWE-22 | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. |
| CVE-2026-2342 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OceanicSoft Informatics Systems Ltd. ValeApp allows Stored XSS. This issue af |
| CVE-2026-23537 | Awaiting Analysis | 未確認 | CWE-862 | A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the serv |
| CVE-2026-23538 | Awaiting Analysis | 未確認 | CWE-770 | A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authenticati |
| CVE-2026-2354 | Deferred | 未確認 | CWE-434 | The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all v |
| CVE-2026-23556 | Deferred | 未確認 | CWE-281 | When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked. When the domain ID is eventually reused, the new domain can create fewer nod |
| CVE-2026-23559 | Deferred | 未確認 | CWE-250 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different |
| CVE-2026-23560 | Deferred | 未確認 | CWE-250 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different r |
| CVE-2026-23561 | Deferred | 未確認 | CWE-250 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different r |
| CVE-2026-23562 | Deferred | 未確認 | CWE-250 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different r |
| CVE-2026-23573 | Modified | 未確認 | CWE-79 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 al |
| CVE-2026-23697 | Deferred | 未確認 | CWE-434 | Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing a |
| CVE-2026-23698 | Deferred | 未確認 | CWE-434 | Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitr |
| CVE-2026-2387 | Deferred | 未確認 | CWE-79 | The Event Organiser plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.12.9. This is due to the 'eo_events' shortcode accepti |
| CVE-2026-23904 | Analyzed | 未確認 | CWE-923 | Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause th |
| CVE-2026-2395 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injectio |
| CVE-2026-2397 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows SQL Injection. This issue aff |
| CVE-2026-2398 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Adam Retail Automation Ltd. MobilMen 20T allows Privilege Escalation. This issue affects MobilMen 20T: from v3 th |
| CVE-2026-23981 | Analyzed | 未確認 | CWE-285 | An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updati |
| CVE-2026-23985 | Analyzed | 未確認 | CWE-1333 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py component, spe |
| CVE-2026-24012 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attac |
| CVE-2026-24013 | Analyzed | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requ |
| CVE-2026-24014 | Analyzed | 未確認 | CWE-284, CWE-434 | Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal |
| CVE-2026-24033 | Analyzed | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 thro |
| CVE-2026-2406 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System al |
| CVE-2026-24220 | Analyzed | 未確認 | CWE-502 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. |
| CVE-2026-24226 | Deferred | 未確認 | CWE-829 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to c |
| CVE-2026-24227 | Analyzed | 未確認 | CWE-502 | NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution. |
| CVE-2026-24229 | Deferred | 未確認 | CWE-306 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending |
| CVE-2026-24232 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to c |
| CVE-2026-24233 | Deferred | 未確認 | CWE-502 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deseri |
| CVE-2026-24234 | Deferred | 未確認 | CWE-918 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A su |
| CVE-2026-24238 | Analyzed | 未確認 | CWE-129 | NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code exec |
| CVE-2026-24240 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24242 | Analyzed | 未確認 | CWE-918 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to inform |
| CVE-2026-24243 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24244 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24245 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24246 | Analyzed | 未確認 | CWE-470 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnera |
| CVE-2026-24247 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24248 | Analyzed | 未確認 | CWE-94 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead t |
| CVE-2026-24249 | Analyzed | 未確認 | CWE-94 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to |
| CVE-2026-24250 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead |
| CVE-2026-24251 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnera |
| CVE-2026-24252 | Analyzed | 未確認 | CWE-78 | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tamperi |
| CVE-2026-24259 | Deferred | 未確認 | CWE-306 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability migh |
| CVE-2026-24260 | Awaiting Analysis | 未確認 | CWE-367 | NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability mig |
| CVE-2026-24264 | Analyzed | 未確認 | CWE-409 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerabilit |
| CVE-2026-24266 | Analyzed | 未確認 | CWE-416 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denia |
| CVE-2026-24268 | Analyzed | 未確認 | CWE-122 | NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution. |
| CVE-2026-24270 | Awaiting Analysis | 未確認 | CWE-290 | NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalat |
| CVE-2026-24271 | Deferred | 未確認 | CWE-770 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A succe |
| CVE-2026-24272 | Analyzed | 未確認 | CWE-122 | NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution. |
| CVE-2026-2445 | Analyzed | 未確認 | CWE-79 | The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition |
| CVE-2026-24451 | Deferred | 未確認 | CWE-200, CWE-284 | Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public to private, exposing data to a fork that should no longer be authorized. |
| CVE-2026-24537 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions. |
| CVE-2026-24552 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in John-Michael L'Allier Create mediavine-create allows Blind SQL Injection.This |
| CVE-2026-24628 | Deferred | 未確認 | CWE-79 | Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. |
| CVE-2026-24639 | Deferred | 未確認 | CWE-918 | Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions. |
| CVE-2026-24690 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches. |
| CVE-2026-24697 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2. |
| CVE-2026-24698 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmwa |
| CVE-2026-24699 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / |
| CVE-2026-24700 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / |
| CVE-2026-24727 | Deferred | 未確認 | CWE-434 | An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote aut |
| CVE-2026-2482 | Analyzed | 未確認 | CWE-352 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized |
| CVE-2026-25038 | Deferred | 未確認 | CWE-200, CWE-862 | Gitea 1.26.2 allows unauthorized users to access labels of private organizations. |
| CVE-2026-25039 | Deferred | 未確認 | CWE-40 | Parsec is a cloud-based application for simple and cryptographically secure file sharing. The application does not sanitize the workspace name, creating a vulnerability if that wor |
| CVE-2026-25268 | Analyzed | 未確認 | CWE-121 | Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. |
| CVE-2026-25271 | Analyzed | 未確認 | CWE-367 | Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use. |
| CVE-2026-25405 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in eRoom <= 1.7.1 versions. |
| CVE-2026-25424 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions. |
| CVE-2026-25427 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in eRoom <= 1.7.1 versions. |
| CVE-2026-25466 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions. |
| CVE-2026-25552 | Deferred | 未確認 | CWE-348 | Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For head |
| CVE-2026-25712 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations. |
| CVE-2026-25714 | Deferred | 未確認 | CWE-862 | Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941. |
| CVE-2026-25718 | Deferred | 未確認 | CWE-59 | Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regul |
| CVE-2026-25779 | Deferred | 未確認 | CWE-601 | Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values. |
| CVE-2026-25782 | Deferred | 未確認 | CWE-639 | Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from a |
| CVE-2026-25800 | Deferred | 未確認 | CWE-770 | Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that as |
| CVE-2026-2594 | Deferred | 未確認 | CWE-79 | The Smart Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.7. This is due to insufficient input sanitization an |
| CVE-2026-26032 | Analyzed | 未確認 | CWE-22 | The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. This repackaging is done by an Ant scrip |
| CVE-2026-26053 | Analyzed | 未確認 | CWE-266 | An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they |
| CVE-2026-26080 | Analyzed | 未確認 | CWE-252 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected. |
| CVE-2026-26081 | Analyzed | 未確認 | CWE-130 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. |
| CVE-2026-26145 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-26197 | Analyzed | 未確認 | CWE-125 | HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the number of ele |
| CVE-2026-26199 | Analyzed | 未確認 | CWE-124 | HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, i |
| CVE-2026-26231 | Deferred | 未確認 | CWE-863 | Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able |
| CVE-2026-26232 | Deferred | 未確認 | CWE-294 | Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange. |
| CVE-2026-26247 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check. |
| CVE-2026-26292 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS |
| CVE-2026-26307 | Deferred | 未確認 | CWE-400 | Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources. |
| CVE-2026-26355 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-26396 | Deferred | 未確認 | CWE-22 | OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is u |
| CVE-2026-26483 | Deferred | 未確認 | CWE-79 | Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in the template management functionality. The application fails to properly sanitize |
| CVE-2026-26718 | Deferred | 未確認 | CWE-352 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shel |
| CVE-2026-26719 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script |
| CVE-2026-27060 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6. |
| CVE-2026-27064 | Deferred | 未確認 | CWE-434 | Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. |
| CVE-2026-27355 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions. |
| CVE-2026-27372 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. |
| CVE-2026-27377 | Deferred | 未確認 | CWE-862 | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. |
| CVE-2026-27391 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in uListing <= 2.2.0 versions. |
| CVE-2026-27392 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in uListing <= 2.2.0 versions. |
| CVE-2026-27399 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. |
| CVE-2026-27402 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions. |
| CVE-2026-27403 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from |
| CVE-2026-27404 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions. |
| CVE-2026-27408 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects Na |
| CVE-2026-27409 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from |
| CVE-2026-27412 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions. |
| CVE-2026-27414 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions. |
| CVE-2026-27418 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. |
| CVE-2026-27419 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. |
| CVE-2026-27422 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a t |
| CVE-2026-27423 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. |
| CVE-2026-27425 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions. |
| CVE-2026-27426 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions. |
| CVE-2026-27430 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions. |
| CVE-2026-27433 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a befo |
| CVE-2026-27435 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.3 |
| CVE-2026-27436 | Deferred | 未確認 | CWE-94 | Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions. |
| CVE-2026-27657 | Deferred | 未確認 | CWE-639 | Gitea versions before 1.25.5 allow a user to change another user's primary email address. |
| CVE-2026-27660 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission. |
| CVE-2026-27690 | Analyzed | 未確認 | CWE-444 | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchroniz |
| CVE-2026-27761 | Deferred | 未確認 | CWE-863 | Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope checks, exposing private repository commit data to tokens wi |
| CVE-2026-27771 | Deferred | 未確認 | CWE-862 | Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. |
| CVE-2026-27775 | Deferred | 未確認 | CWE-863 | Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for oth |
| CVE-2026-27779 | Deferred | 未確認 | CWE-284 | Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation. |
| CVE-2026-27780 | Deferred | 未確認 | CWE-863 | Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks. |
| CVE-2026-27783 | Deferred | 未確認 | CWE-862 | Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints. |
| CVE-2026-27790 | Analyzed | 未確認 | CWE-248 | Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial o |
| CVE-2026-27823 | Deferred | 未確認 | CWE-285 | A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the serv |
| CVE-2026-27844 | Analyzed | 未確認 | CWE-248 | Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a Controller restart by |
| CVE-2026-28144 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6 |
| CVE-2026-28145 | Deferred | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State. This issue affects MasterStudy LMS: from n/a through |
| CVE-2026-28220 | Analyzed | 未確認 | CWE-502 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allow a |
| CVE-2026-28302 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requir |
| CVE-2026-28304 | Analyzed | 未確認 | CWE-284 | SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Wind |
| CVE-2026-28305 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and |
| CVE-2026-28306 | Analyzed | 未確認 | CWE-284 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower |
| CVE-2026-28307 | Analyzed | 未確認 | CWE-284 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows dep |
| CVE-2026-28308 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impac |
| CVE-2026-28309 | Analyzed | 未確認 | CWE-862 | SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows de |
| CVE-2026-28310 | Analyzed | 未確認 | CWE-862 | SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact i |
| CVE-2026-28312 | Analyzed | 未確認 | CWE-285 | SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is l |
| CVE-2026-28313 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower |
| CVE-2026-28314 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Window |
| CVE-2026-28315 | Analyzed | 未確認 | CWE-79 | SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator accou |
| CVE-2026-28316 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execut |
| CVE-2026-28317 | Analyzed | 未確認 | CWE-639 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. Th |
| CVE-2026-28321 | Analyzed | 未確認 | CWE-284 | SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute cod |
| CVE-2026-28323 | Analyzed | 未確認 | CWE-287 | SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled. |
| CVE-2026-28378 | Analyzed | 未確認 | CWE-284 | The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organ |
| CVE-2026-28564 | Deferred | 未確認 | CWE-294, CWE-613 | Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication Accepts Stale Cached Credentials This issue affe |
| CVE-2026-28698 | Deferred | 未確認 | CWE-497 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying ho |
| CVE-2026-28699 | Deferred | 未確認 | CWE-284, CWE-863 | Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication. |
| CVE-2026-28705 | Deferred | 未確認 | CWE-22 | Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output |
| CVE-2026-28737 | Deferred | 未確認 | CWE-79 | Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer. |
| CVE-2026-28740 | Deferred | 未確認 | CWE-639, CWE-863 | Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access. |
| CVE-2026-28744 | Deferred | 未確認 | CWE-863 | Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks. |
| CVE-2026-28811 | Analyzed | 未確認 | CWE-1295 | Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue. |
| CVE-2026-28812 | Analyzed | 未確認 | CWE-290 | UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 |
| CVE-2026-28813 | Analyzed | 未確認 | CWE-352 | Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue. |
| CVE-2026-28814 | Analyzed | 未確認 | CWE-306 | Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recomme |
| CVE-2026-28849 | Modified | 未確認 | CWE-290, CWE-693 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatek |
| CVE-2026-28896 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visi |
| CVE-2026-28900 | Modified | 未確認 | CWE-290, CWE-693 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive |
| CVE-2026-2891 | Awaiting Analysis | 未確認 | CWE-400 | The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mit |
| CVE-2026-28911 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system proce |
| CVE-2026-28912 | Modified | 未確認 | CWE-693 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges |
| CVE-2026-28926 | Modified | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4. An app may be able to elevate privi |
| CVE-2026-28928 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able |
| CVE-2026-28931 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious |
| CVE-2026-28932 | Analyzed | 未確認 | CWE-400 | A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tah |
| CVE-2026-28945 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to by |
| CVE-2026-28973 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-28981 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted |
| CVE-2026-28982 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpec |
| CVE-2026-29007 | Analyzed | 未確認 | CWE-125 | U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read bey |
| CVE-2026-29008 | Analyzed | 未確認 | CWE-191 | U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine() function (net/tcp.c) that allows a network-adjacent attacker to crash the bootl |
| CVE-2026-29009 | Modified | 未確認 | CWE-120 | U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NF |
| CVE-2026-29519 | Deferred | 未確認 | CWE-79 | Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenti |
| CVE-2026-3014 | Awaiting Analysis | 未確認 | CWE-78 | Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes user |
| CVE-2026-3031 | Deferred | 未確認 | CWE-1104 | Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG t |
| CVE-2026-30618 | Deferred | 未確認 | CWE-94 | xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling. A remote attacker can access the publicly exposed |
| CVE-2026-30623 | Awaiting Analysis | 未確認 | CWE-77 | LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration sp |
| CVE-2026-30631 | Deferred | 未確認 | CWE-78 | An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_wri |
| CVE-2026-30632 | Deferred | 未確認 | CWE-22 | Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool. |
| CVE-2026-30633 | Deferred | 未確認 | CWE-22 | Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools. |
| CVE-2026-3093 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-31267 | Deferred | 未確認 | CWE-121 | Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administrative web interface. A stack buffer overflow vulnerability in the administrative |
| CVE-2026-31309 | Deferred | 未確認 | CWE-862 | Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node |
| CVE-2026-3144 | Analyzed | 未確認 | CWE-1392 | IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credent |
| CVE-2026-3157 | Analyzed | 未確認 | CWE-615 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 thr |
| CVE-2026-3158 | Analyzed | 未確認 | CWE-615 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 thr |
| CVE-2026-3182 | Awaiting Analysis | 未確認 | CWE-319 | Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability. |
| CVE-2026-3183 | Awaiting Analysis | 未確認 | CWE-290 | Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass. |
| CVE-2026-31981 | Modified | 未確認 | CWE-79 | A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation function being insufficiently restrictive. An authenticated |
| CVE-2026-31982 | Modified | 未確認 | CWE-601 | An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated |
| CVE-2026-31983 | Modified | 未確認 | CWE-306 | A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpo |
| CVE-2026-31984 | Modified | 未確認 | CWE-770 | A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audi |
| CVE-2026-31985 | Awaiting Analysis | 未確認 | CWE-671 | When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided |
| CVE-2026-3251 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul Web Design Mezunum Satiyorum allows Stored XSS. This issue |
| CVE-2026-32665 | Analyzed | 未確認 | CWE-1284 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (stream_id 0 a |
| CVE-2026-32718 | Deferred | 未確認 | CWE-863 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, mutating API validation endpoints are guarded by read a |
| CVE-2026-32806 | Deferred | 未確認 | CWE-285 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32807 | Deferred | 未確認 | CWE-285 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32819 | Deferred | 未確認 | CWE-285 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32820 | Deferred | 未確認 | CWE-22 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32821 | Deferred | 未確認 | CWE-285 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32822 | Deferred | 未確認 | CWE-80 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32823 | Deferred | 未確認 | CWE-352 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32824 | Deferred | 未確認 | CWE-601 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-32825 | Deferred | 未確認 | CWE-307 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framewo |
| CVE-2026-33213 | Analyzed | 未確認 | CWE-601 | Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's authentication module stripped the scheme and netloc from use |
| CVE-2026-33264 | Analyzed | 未確認 | CWE-502 | A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG |
| CVE-2026-33267 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recom |
| CVE-2026-33327 | Analyzed | 未確認 | CWE-190 | libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions lead |
| CVE-2026-33328 | Analyzed | 未確認 | CWE-190 | libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation could incorrectly determine dim |
| CVE-2026-33382 | Analyzed | 未確認 | CWE-400 | Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force exc |
| CVE-2026-33385 | Deferred | 未確認 | CWE-89 | A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration pan |
| CVE-2026-33390 | Modified | 未確認 | CWE-266 | An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited |
| CVE-2026-33434 | Analyzed | 未確認 | CWE-799 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddlewa |
| CVE-2026-33443 | Modified | 未確認 | CWE-400 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a |
| CVE-2026-33444 | Analyzed | 未確認 | CWE-119, CWE-400 | CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cre |
| CVE-2026-33445 | Analyzed | 未確認 | CWE-400 | CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can |
| CVE-2026-33592 | Awaiting Analysis | 未確認 | CWE-770, CWE-789 | An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field of FindServersRequest is not validated for len |
| CVE-2026-33655 | Analyzed | 未確認 | CWE-918 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not |
| CVE-2026-3367 | Deferred | 未確認 | CWE-79 | The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App ID' setting in all versions up to, and including, 2.11.0. Thi |
| CVE-2026-33684 | Deferred | 未確認 | CWE-862 | WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameters in signUp API, which allows any user w |
| CVE-2026-33692 | Deferred | 未確認 | CWE-20 | WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official dock |
| CVE-2026-33731 | Deferred | 未確認 | CWE-345 | WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypa |
| CVE-2026-33734 | Deferred | 未確認 | CWE-89 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a SQL injection vulnerability in the `Massmailer` module filter functiona |
| CVE-2026-33754 | Analyzed | 未確認 | CWE-400 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exh |
| CVE-2026-33794 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows |
| CVE-2026-33799 | Analyzed | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker sending specific va |
| CVE-2026-33800 | Analyzed | 未確認 | CWE-606 | An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to |
| CVE-2026-33801 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, una |
| CVE-2026-33802 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). On EX2300, |
| CVE-2026-33803 | Analyzed | 未確認 | CWE-923 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause |
| CVE-2026-33842 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-33930 | Modified | 未確認 | CWE-121 | Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when re |
| CVE-2026-34034 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, the sentinel_token setting is used in shell commands wi |
| CVE-2026-34035 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolat |
| CVE-2026-34037 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the cloneTo() Livewire action in ResourceOperations.php |
| CVE-2026-34038 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerability |
| CVE-2026-34044 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, the Logs::mount() component looks up resources by UUID |
| CVE-2026-34047 | Deferred | 未確認 | CWE-863 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal WebSocket bootstrap routes did not enforce the |
| CVE-2026-34048 | Deferred | 未確認 | CWE-285, CWE-862 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal websocket bootstrap routes only check authenti |
| CVE-2026-34049 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.451 through 4.0.0-beta.470, database backup handling for MongoDB |
| CVE-2026-34050 | Deferred | 未確認 | CWE-862 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Settings/Updates Livewire component does not check |
| CVE-2026-34057 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the database import Livewire component (app/Livewire/Pr |
| CVE-2026-34058 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public |
| CVE-2026-34096 | Deferred | 未確認 | CWE-79 | Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can c |
| CVE-2026-34097 | Deferred | 未確認 | CWE-79 | Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in text_file.php (lines 94, 101, 323, 403, 826, 852). |
| CVE-2026-34098 | Deferred | 未確認 | CWE-79 | Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). An authenticated atta |
| CVE-2026-34099 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET['id'].\"'. No authent |
| CVE-2026-34100 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private F |
| CVE-2026-34101 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in text_file.php (line 17): SELECT id, filename, extension, type, duration, owner, priva |
| CVE-2026-34102 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '\".$_GET['id'].\"'. An |
| CVE-2026-34103 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FROM files where id = ' |
| CVE-2026-34104 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\".$_GET['name'].\"'. An |
| CVE-2026-34105 | Deferred | 未確認 | CWE-89 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where i |
| CVE-2026-34106 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec(\"php jobs/subtitle_rendering.php \".$log |
| CVE-2026-34107 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_sessio |
| CVE-2026-34108 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec(\"php jobs/text.php \".$login_session.\" \".$_ |
| CVE-2026-34109 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\"php jobs/speech_audio.php \".$login_sessio |
| CVE-2026-34110 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_sess |
| CVE-2026-34111 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac_text.php |
| CVE-2026-34112 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac.php \".$login |
| CVE-2026-34113 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_text.php \".$lo |
| CVE-2026-34114 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) without sanitization: exec(\"php jobs/translate_text.php \".$lo |
| CVE-2026-34115 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15) without sanitization: exec(\"php jobs/transcribe_amazon.php |
| CVE-2026-34116 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without sanitization: exec(\"php jobs/transcribe.php \".$login_sess |
| CVE-2026-34117 | Deferred | 未確認 | CWE-78 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec(\"php jobs/text_to_subtitles.php |
| CVE-2026-34149 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, DatabaseBackupJob interpolates user-controlled database |
| CVE-2026-34150 | Analyzed | 未確認 | CWE-122 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysis |
| CVE-2026-34152 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, pre-deployment and post-deployment commands are single- |
| CVE-2026-34153 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, LocalFileVolume::saveStorageOnServer builds shell comma |
| CVE-2026-34158 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, the executeInDocker() helper wraps user-controlled comm |
| CVE-2026-34167 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the ActivityMonitor Livewire component exposes a public |
| CVE-2026-34168 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the LocalPersistentVolume.name field is interpolated di |
| CVE-2026-34170 | Deferred | 未確認 | CWE-918 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp api_url field is used as the base URL for |
| CVE-2026-34171 | Deferred | 未確認 | CWE-352 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GET /invitations/{uuid} endpoint can perform a stat |
| CVE-2026-34196 | Analyzed | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical addres |
| CVE-2026-34198 | Deferred | 未確認 | CWE-346, CWE-640 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the TrustProxies middleware trusts all proxies ($proxie |
| CVE-2026-34239 | Deferred | 未確認 | CWE-285 | Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax.php path. This endpoint is protected only by `api_protect_c |
| CVE-2026-34316 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. Easily expl |
| CVE-2026-34328 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
| CVE-2026-34346 | Analyzed | 未確認 | CWE-319 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
| CVE-2026-34348 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. |
| CVE-2026-34349 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
| CVE-2026-34490 | Analyzed | 未確認 | CWE-312 | Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retri |
| CVE-2026-34495 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM |
| CVE-2026-34496 | Awaiting Analysis | 未確認 | CWE-269 | Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1. |
| CVE-2026-34497 | Analyzed | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue a |
| CVE-2026-34599 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, there is an authenticated command injection vulnerabili |
| CVE-2026-34641 | Analyzed | 未確認 | CWE-787 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-3482 | Analyzed | 未確認 | CWE-639 | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user |
| CVE-2026-35048 | Deferred | 未確認 | CWE-20 | The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitiz |
| CVE-2026-35140 | Analyzed | 未確認 | CWE-200 | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The application fails to set the "secure" attribute on session cookies g |
| CVE-2026-35141 | Analyzed | 未確認 | CWE-294 | HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication d |
| CVE-2026-35142 | Analyzed | 未確認 | CWE-200 | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which c |
| CVE-2026-35143 | Analyzed | 未確認 | CWE-200, CWE-352 | HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to set the "SameSite" attribute on session cookies generated during authentication |
| CVE-2026-35145 | Analyzed | 未確認 | CWE-200 | HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security (HSTS) policy w |
| CVE-2026-35146 | Analyzed | 未確認 | CWE-326 | HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, whi |
| CVE-2026-35147 | Analyzed | 未確認 | CWE-639 | HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific A |
| CVE-2026-35148 | Analyzed | 未確認 | CWE-284 | HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another b |
| CVE-2026-35149 | Analyzed | 未確認 | CWE-294 | HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by interc |
| CVE-2026-35152 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0. Report parameter values are incorporate |
| CVE-2026-35159 | Awaiting Analysis | 未確認 | CWE-305 | Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulne |
| CVE-2026-35198 | Deferred | 未確認 | CWE-79 | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, a stored cross-site scripting (XSS) vulnerability in the form builder allows a low-privileged team member to in |
| CVE-2026-35210 | Analyzed | 未確認 | CWE-639, CWE-863 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows an |
| CVE-2026-35211 | Analyzed | 未確認 | CWE-863, CWE-94 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator i |
| CVE-2026-35217 | Deferred | 未確認 | CWE-125 | NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the final 1-byte `Subscription Options` field, the broker may stil |
| CVE-2026-35226 | Deferred | 未確認 | CWE-787 | An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data |
| CVE-2026-35287 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo |
| CVE-2026-35290 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo |
| CVE-2026-35425 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. |
| CVE-2026-3552 | Deferred | 未確認 | CWE-862 | The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajax_import_410() function in all |
| CVE-2026-35552 | Deferred | 未確認 | CWE-862 | In CAXperts UPVWebServices 2.4.2212.603 through 2.7.6 and UDiTH Portal 2026.0.0 through 2026.2.0, an authenticated remote user can invoke an administrative API endpoint intended fo |
| CVE-2026-35590 | Analyzed | 未確認 | CWE-122 | libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag group |
| CVE-2026-35591 | Analyzed | 未確認 | CWE-122 | libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of |
| CVE-2026-3576 | Deferred | 未確認 | CWE-20 | The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. Th |
| CVE-2026-35847 | Deferred | 未確認 | CWE-77 | An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file |
| CVE-2026-36027 | Deferred | 未確認 | CWE-1313 | An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (ADB) and Android Debug Bridge components |
| CVE-2026-36028 | Deferred | 未確認 | CWE-288 | A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset |
| CVE-2026-36035 | Deferred | 未確認 | CWE-284 | Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level pri |
| CVE-2026-36162 | Deferred | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via in |
| CVE-2026-36163 | Deferred | 未確認 | CWE-79 | An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attackers to execute arbitrary JavaScript in the context of the victim's browse |
| CVE-2026-36214 | Deferred | 未確認 | CWE-79 | osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitizat |
| CVE-2026-36425 | Awaiting Analysis | 未確認 | CWE-269 | An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests w |
| CVE-2026-36590 | Analyzed | 未確認 | CWE-400, CWE-772 | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component |
| CVE-2026-36669 | Deferred | 未確認 | CWE-434 | An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the w |
| CVE-2026-3688 | Deferred | 未確認 | CWE-639 | The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin |
| CVE-2026-36909 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted |
| CVE-2026-36910 | Deferred | 未確認 | CWE-119 | An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. |
| CVE-2026-36911 | Deferred | 未確認 | CWE-369 | A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Servi |
| CVE-2026-36912 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a c |
| CVE-2026-37270 | Deferred | 未確認 | CWE-287, CWE-798 | Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in t |
| CVE-2026-37271 | Deferred | 未確認 | CWE-287 | Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4 is vulnerable to Improper Authentication, The device accepts GATT Write Request commands without sufficient authentication |
| CVE-2026-38057 | Awaiting Analysis | 未確認 | CWE-352 | The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a sessi |
| CVE-2026-38059 | Awaiting Analysis | 未確認 | CWE-306 | The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve sensitive device infor |
| CVE-2026-38076 | Deferred | 未確認 | CWE-190 | An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-38142 | Deferred | 未確認 | CWE-77 | An unauthenticated command injection vulnerability in the /goform/fast_setting_internet_set endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a |
| CVE-2026-38158 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive database information via crafted SQL statement |
| CVE-2026-3821 | Awaiting Analysis | 未確認 | CWE-78 | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data i |
| CVE-2026-3842 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memory_ |
| CVE-2026-38450 | Deferred | 未確認 | CWE-94 | An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project functio |
| CVE-2026-38708 | Deferred | 未確認 | CWE-77 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a comma |
| CVE-2026-38709 | Deferred | 未確認 | CWE-77 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a comma |
| CVE-2026-38710 | Deferred | 未確認 | CWE-77 | TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbi |
| CVE-2026-38711 | Deferred | 未確認 | CWE-77 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a comma |
| CVE-2026-38713 | Deferred | 未確認 | CWE-77 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a comma |
| CVE-2026-38752 | Undergoing Analysis | 未確認 | CWE-121, CWE-674 | A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. |
| CVE-2026-38753 | Modified | 未確認 | CWE-416 | A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. |
| CVE-2026-38754 | Modified | 未確認 | CWE-122, CWE-125 | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
| CVE-2026-38755 | Modified | 未確認 | CWE-122, CWE-674 | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
| CVE-2026-38763 | Deferred | 未確認 | CWE-400, CWE-404, CWE-703 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828 |
| CVE-2026-38764 | Deferred | 未確認 | CWE-269, CWE-782 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys |
| CVE-2026-38765 | Deferred | 未確認 | CWE-269, CWE-782 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys |
| CVE-2026-38766 | Deferred | 未確認 | CWE-269, CWE-782 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_186f4 function |
| CVE-2026-38891 | Deferred | 未確認 | CWE-20 | An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted geometr |
| CVE-2026-38968 | Analyzed | 未確認 | CWE-341 | ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-r |
| CVE-2026-38969 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-38970 | Deferred | 未確認 | CWE-674 | pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, includin |
| CVE-2026-38971 | Modified | 未確認 | CWE-125 | ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control(). |
| CVE-2026-38972 | Analyzed | 未確認 | CWE-427 | Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibrary(L"MSFTEDIT.DLL") |
| CVE-2026-38973 | Deferred | 未確認 | CWE-125 | mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method(). |
| CVE-2026-38974 | Deferred | 未確認 | CWE-295 | Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py. |
| CVE-2026-38976 | Deferred | 未確認 | CWE-476 | mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super. |
| CVE-2026-38979 | Deferred | 未確認 | CWE-1021 | ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/http.py, the core HTTP response path initializes an empty he |
| CVE-2026-39042 | Deferred | 未確認 | CWE-190 | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten() f |
| CVE-2026-3907 | Deferred | 未確認 | CWE-79 | The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wphostel-book' shortcode in all versions up to and including 1.1.7. This is due to insufficien |
| CVE-2026-39155 | Deferred | 未確認 | CWE-345 | Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad |
| CVE-2026-39178 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter of the allContactSearch endpoint. |
| CVE-2026-39179 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword parameter in the password change functionalit |
| CVE-2026-39243 | Analyzed | 未確認 | CWE-59 | decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries (type === |
| CVE-2026-39244 | Deferred | 未確認 | CWE-400 | adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103, Buffer.alloc(_centralHea |
| CVE-2026-39245 | Analyzed | 未確認 | CWE-22 | decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write. The safeMakeDir function (index.js line 29) and the e |
| CVE-2026-39246 | Analyzed | 未確認 | CWE-59 | decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries (type === 'symlink'), the x.linkname field from the archive is |
| CVE-2026-39359 | Analyzed | 未確認 | CWE-22 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.14.4, a logic flaw affects the W |
| CVE-2026-39385 | Deferred | 未確認 | CWE-288 | Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been p |
| CVE-2026-39448 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions. |
| CVE-2026-39822 | Analyzed | 未確認 | CWE-61 | On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the pa |
| CVE-2026-39873 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may |
| CVE-2026-39874 | Analyzed | 未確認 | CWE-276 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to g |
| CVE-2026-39875 | Modified | 未確認 | CWE-276 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to g |
| CVE-2026-39877 | Modified | 未確認 | CWE-119 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS |
| CVE-2026-39878 | Deferred | 未確認 | CWE-79 | Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user registration form that allows any unauthenticated attacker to execute arbit |
| CVE-2026-39879 | Deferred | 未確認 | CWE-150 | Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslo |
| CVE-2026-39903 | Deferred | 未確認 | CWE-863 | Simple Machines Forum 2.1 prior to commit 7d048f8 and 3.0 prior to commit a7875e8 contains an authorization bypass vulnerability in Sources/Actions/AttachmentApprove.php where a si |
| CVE-2026-40000 | Deferred | 未確認 | CWE-22 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activit |
| CVE-2026-40005 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacker can write arbitrary files anywhere the IoTDB process has w |
| CVE-2026-40006 | Deferred | 未確認 | CWE-306, CWE-770, CWE-789 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for Critical Function vulnerability in Apache IoTDB. When |
| CVE-2026-40007 | Deferred | 未確認 | CWE-400, CWE-674 | Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipe_air_gap_receiver_enabled=true, the IoTDB AirGap receiver's readLength method call |
| CVE-2026-40008 | Deferred | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and ins |
| CVE-2026-40009 | Deferred | 未確認 | CWE-269, CWE-284 | Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full tree-path access by renaming themselves to __internal |
| CVE-2026-40047 | Analyzed | 未確認 | CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling component. The camel-docling component invokes the externa |
| CVE-2026-40106 | Analyzed | 未確認 | CWE-122 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerab |
| CVE-2026-40138 | Analyzed | 未確認 | CWE-287 | A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication |
| CVE-2026-40139 | Analyzed | 未確認 | CWE-287 | A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauth |
| CVE-2026-40140 | Analyzed | 未確認 | CWE-400 | BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of |
| CVE-2026-40141 | Analyzed | 未確認 | CWE-943 | A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters |
| CVE-2026-4017 | Deferred | 未確認 | CWE-121 | Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX |
| CVE-2026-4018 | Deferred | 未確認 | CWE-367 | TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause informat |
| CVE-2026-40187 | Deferred | 未確認 | CWE-78, CWE-95 | In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (`.xet`) to the |
| CVE-2026-40257 | Analyzed | 未確認 | CWE-787 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-40272 | Awaiting Analysis | 未確認 | CWE-1284 | Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code |
| CVE-2026-40378 | Analyzed | 未確認 | CWE-789 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-40400 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. |
| CVE-2026-40422 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-40430 | Deferred | 未確認 | CWE-256 | Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API. |
| CVE-2026-40452 | Deferred | 未確認 | CWE-284, CWE-863 | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated |
| CVE-2026-40454 | Deferred | 未確認 | CWE-125, CWE-20 | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malform |
| CVE-2026-40467 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below |
| CVE-2026-40468 | Analyzed | 未確認 | CWE-190 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to ove |
| CVE-2026-40469 | Analyzed | 未確認 | CWE-190 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing t |
| CVE-2026-40501 | Deferred | 未確認 | CWE-829 | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitra |
| CVE-2026-40553 | Analyzed | 未確認 | CWE-121 | Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achie |
| CVE-2026-40633 | Analyzed | 未確認 | CWE-532 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privil |
| CVE-2026-40691 | Analyzed | 未確認 | CWE-122, CWE-787 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the de |
| CVE-2026-40712 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access cou |
| CVE-2026-40714 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially e |
| CVE-2026-40859 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel. The camel-vertx-http component deserializes HTTP response bodies carrying the Content-Type application/x-java-seri |
| CVE-2026-40952 | Modified | 未確認 | CWE-276 | CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or |
| CVE-2026-40953 | Modified | 未確認 | CWE-787 | CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create |
| CVE-2026-40954 | Modified | 未確認 | CWE-191 | CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control |
| CVE-2026-40955 | Modified | 未確認 | CWE-191 | CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control |
| CVE-2026-40956 | Modified | 未確認 | CWE-200 | CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol |
| CVE-2026-40957 | Modified | 未確認 | CWE-1021 | o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potent |
| CVE-2026-40958 | Modified | 未確認 | CWE-20 | CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non |
| CVE-2026-41041 | Analyzed | 未確認 | CWE-177 | URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended |
| CVE-2026-41042 | Deferred | 未確認 | CWE-20 | Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability i |
| CVE-2026-41087 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-41106 | Analyzed | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-41121 | Analyzed | 未確認 | CWE-59 | Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with |
| CVE-2026-41122 | Analyzed | 未確認 | CWE-79 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-41123 | Analyzed | 未確認 | CWE-284 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-41124 | Analyzed | 未確認 | CWE-22 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-41154 | Analyzed | 未確認 | CWE-787 | Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing lo |
| CVE-2026-41186 | Analyzed | 未確認 | CWE-200, CWE-489 | When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authen |
| CVE-2026-41187 | Analyzed | 未確認 | CWE-285, CWE-863 | Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their |
| CVE-2026-41252 | Analyzed | 未確認 | CWE-122 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The i |
| CVE-2026-41434 | Analyzed | 未確認 | CWE-121 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-41482 | Deferred | 未確認 | CWE-22 | Frappe is a full-stack web application framework. Prior to 16.18.3, possible path traversal and local file inclusion were possible through secure local resource access in the Chrom |
| CVE-2026-41514 | Analyzed | 未確認 | CWE-208 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-41515 | Analyzed | 未確認 | CWE-208 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-41516 | Analyzed | 未確認 | CWE-208 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-41521 | Analyzed | 未確認 | CWE-190 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A |
| CVE-2026-41579 | Analyzed | 未確認 | CWE-61 | runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when set |
| CVE-2026-41580 | Analyzed | 未確認 | CWE-79 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, Stirling-PDF's /get-info-on-pdf endpoint rendered PDF Title and A |
| CVE-2026-41608 | Modified | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomm |
| CVE-2026-41637 | Analyzed | 未確認 | CWE-772 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflation of the |
| CVE-2026-41703 | Awaiting Analysis | 未確認 | CWE-125 | VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially le |
| CVE-2026-41709 | Awaiting Analysis | 未確認 | CWE-778 | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. |
| CVE-2026-41857 | Analyzed | 未確認 | CWE-78 | A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default |
| CVE-2026-41874 | Deferred | 未確認 | CWE-256 | Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication detai |
| CVE-2026-41876 | Deferred | 未確認 | CWE-78 | R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters. T |
| CVE-2026-41877 | Deferred | 未確認 | CWE-79 | R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS into the name of the file being uploaded, which will be |
| CVE-2026-41878 | Deferred | 未確認 | CWE-639 | R-SOFT DMS is vulnerable to Insecure Direct Object Reference (IDOR) attack in multiple file download endpoints. The application fetches files from the database by ID and serves the |
| CVE-2026-41879 | Deferred | 未確認 | CWE-328 | R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this pas |
| CVE-2026-41880 | Deferred | 未確認 | CWE-78 | R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution functions accept user-controllable file paths without |
| CVE-2026-41899 | Deferred | 未確認 | CWE-306, CWE-770 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, POST /api/feedback has no authentication, no rate limit |
| CVE-2026-41920 | Analyzed | 未確認 | CWE-284 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.14, from 10.0.0 through 10.1.3. Users are recomme |
| CVE-2026-41939 | Deferred | 未確認 | CWE-1392 | Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers |
| CVE-2026-41993 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file |
| CVE-2026-42016 | Analyzed | 掲載 | CWE-863 | JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s |
| CVE-2026-42017 | Analyzed | 未確認 | CWE-200 | An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions. |
| CVE-2026-42049 | Deferred | 未確認 | CWE-94 | jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without pro |
| CVE-2026-42143 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, user-controlled persistent volume names are interpolate |
| CVE-2026-42145 | Deferred | 未確認 | CWE-434, CWE-770 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint (app/Http/Controllers/UploadCo |
| CVE-2026-42147 | Deferred | 未確認 | CWE-918 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, S3 storage endpoint validation only checks URL format a |
| CVE-2026-42148 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the buildHelperImage method in app/Livewire/Settings/In |
| CVE-2026-42153 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, PostgreSQL healthcheck command generation used attacker |
| CVE-2026-42168 | Deferred | 未確認 | CWE-78 | django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model. These fields are passed directly to os.system() in py |
| CVE-2026-42172 | Deferred | 未確認 | CWE-613 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked to |
| CVE-2026-42200 | Deferred | 未確認 | CWE-22 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, PostgreSQL initialization script (generate_init_scripts |
| CVE-2026-42201 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, database credential fields (redis_password, keydb_passw |
| CVE-2026-42204 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.471 through 4.0.0-beta.473, a regression in SHELL_SAFE_COMMAND_P |
| CVE-2026-42210 | Deferred | 未確認 | CWE-287 | Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.640, for Webmin accounts that require a second authentication factor (typically TOTP), an |
| CVE-2026-42218 | Analyzed | 未確認 | CWE-204 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, |
| CVE-2026-42219 | Deferred | 未確認 | CWE-22 | Frappe is a full-stack web application framework. Prior to 16.19.0 and 15.109.0, path traversal via download_backups was possible due to lack of hardening. This issue is fixed in v |
| CVE-2026-42331 | Deferred | 未確認 | CWE-306, CWE-863 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in |
| CVE-2026-42341 | Deferred | 未確認 | CWE-306, CWE-346 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have an unauthenticated payment bypass vulnerability in FOSSBilling's IPN call |
| CVE-2026-42382 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Audrey <= 1.5 versions. |
| CVE-2026-42397 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a sp |
| CVE-2026-42447 | Analyzed | 未確認 | CWE-79 | jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCoun |
| CVE-2026-42486 | Deferred | 未確認 | CWE-250 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different r |
| CVE-2026-4249 | Analyzed | 未確認 | CWE-707 | The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and content. This allows an u |
| CVE-2026-42492 | Deferred | 未確認 | CWE-459 | Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state was |
| CVE-2026-42493 | Deferred | 未確認 | CWE-400 | Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternative |
| CVE-2026-42494 | Deferred | 未確認 | CWE-125 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsi |
| CVE-2026-42495 | Deferred | 未確認 | CWE-191 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsi |
| CVE-2026-42505 | Analyzed | 未確認 | CWE-201 | Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. |
| CVE-2026-42527 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserializ |
| CVE-2026-42533 | Analyzed | 未確認 | CWE-122 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before refe |
| CVE-2026-42546 | Analyzed | 未確認 | CWE-770 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-4256 | Deferred | 未確認 | CWE-90 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects Pas |
| CVE-2026-42566 | Analyzed | 未確認 | CWE-20 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name that contains a malformed character encoding can |
| CVE-2026-4275 | Deferred | 未確認 | CWE-352 | The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is |
| CVE-2026-42792 | Analyzed | 未確認 | CWE-755, CWE-770 | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon |
| CVE-2026-42900 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a networ |
| CVE-2026-42933 | Deferred | 未確認 | CWE-441 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT se |
| CVE-2026-42936 | Deferred | 未確認 | CWE-427 | The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be ex |
| CVE-2026-42952 | Deferred | 未確認 | CWE-307 | Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack. |
| CVE-2026-42953 | Awaiting Analysis | 未確認 | CWE-787 | The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. Th |
| CVE-2026-42955 | Analyzed | 未確認 | CWE-672 | In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that coul |
| CVE-2026-42958 | Awaiting Analysis | 未確認 | CWE-416 | The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to exec |
| CVE-2026-42975 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-4298 | Deferred | 未確認 | CWE-862 | The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvo_reset_policy_service_func( |
| CVE-2026-42982 | Analyzed | 未確認 | CWE-1288 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42990 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-4321 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows SQL In |
| CVE-2026-4322 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows Reflec |
| CVE-2026-43636 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43637 | Deferred | 未確認 | CWE-22 | Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TA |
| CVE-2026-43665 | Analyzed | 未確認 | CWE-862 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy |
| CVE-2026-43672 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may |
| CVE-2026-43673 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m |
| CVE-2026-43681 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read |
| CVE-2026-43682 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpe |
| CVE-2026-43693 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root pri |
| CVE-2026-43694 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected sy |
| CVE-2026-43698 | Modified | 未確認 | CWE-88 | An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.7. An app may be a |
| CVE-2026-43710 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpect |
| CVE-2026-43711 | Modified | 未確認 | CWE-119 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS |
| CVE-2026-43714 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8 |
| CVE-2026-43723 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14 |
| CVE-2026-43728 | Analyzed | 未確認 | CWE-362 | This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain. |
| CVE-2026-43729 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS |
| CVE-2026-43730 | Analyzed | 未確認 | CWE-200 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app ma |
| CVE-2026-43733 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Proc |
| CVE-2026-43738 | Modified | 未確認 | CWE-125 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macO |
| CVE-2026-43739 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. |
| CVE-2026-43744 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-43747 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted |
| CVE-2026-43748 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be abl |
| CVE-2026-43749 | Analyzed | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. |
| CVE-2026-4375 | Deferred | 未確認 | The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for exam | |
| CVE-2026-43750 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arb |
| CVE-2026-43752 | Analyzed | 未確認 | CWE-434 | An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Adm |
| CVE-2026-43753 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An |
| CVE-2026-43754 | Modified | 未確認 | CWE-200 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS T |
| CVE-2026-43755 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges. |
| CVE-2026-43756 | Analyzed | 未確認 | CWE-200, CWE-285 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitiv |
| CVE-2026-43757 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26. |
| CVE-2026-43758 | Analyzed | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be |
| CVE-2026-43759 | Analyzed | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data. |
| CVE-2026-43760 | Modified | 未確認 | CWE-284 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-s |
| CVE-2026-43763 | Modified | 未確認 | CWE-284 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tah |
| CVE-2026-43764 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause un |
| CVE-2026-43765 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify protec |
| CVE-2026-43766 | Analyzed | 未確認 | CWE-287 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical a |
| CVE-2026-43767 | Analyzed | 未確認 | CWE-119, CWE-125, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected sy |
| CVE-2026-43768 | Analyzed | 未確認 | CWE-400 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected sy |
| CVE-2026-43769 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-43770 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to acce |
| CVE-2026-43771 | Analyzed | 未確認 | CWE-121 | A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a den |
| CVE-2026-43772 | Analyzed | 未確認 | CWE-22 | A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break |
| CVE-2026-43773 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafte |
| CVE-2026-43774 | Analyzed | 未確認 | CWE-787 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access |
| CVE-2026-43775 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to access sensitive user data |
| CVE-2026-43776 | Modified | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26 |
| CVE-2026-43777 | Analyzed | 未確認 | CWE-20 | This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause |
| CVE-2026-43778 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS S |
| CVE-2026-43779 | Analyzed | 未確認 | CWE-284 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network |
| CVE-2026-43780 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS |
| CVE-2026-43781 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensit |
| CVE-2026-43782 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data. |
| CVE-2026-43792 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data. |
| CVE-2026-43793 | Analyzed | 未確認 | CWE-20 | An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macO |
| CVE-2026-43796 | Modified | 未確認 | CWE-200 | This issue was addressed with improved data protection. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, |
| CVE-2026-43797 | Modified | 未確認 | CWE-200 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access infor |
| CVE-2026-43799 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS S |
| CVE-2026-43800 | Modified | 未確認 | CWE-200 | An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tv |
| CVE-2026-43801 | Modified | 未確認 | CWE-200 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tah |
| CVE-2026-43802 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Ta |
| CVE-2026-43803 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-43804 | Analyzed | 未確認 | CWE-400 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may le |
| CVE-2026-43805 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 2 |
| CVE-2026-43806 | Analyzed | 未確認 | CWE-400 | A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service. |
| CVE-2026-43807 | Modified | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sono |
| CVE-2026-43809 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26. |
| CVE-2026-43810 | Modified | 未確認 | CWE-119, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m |
| CVE-2026-43811 | Modified | 未確認 | CWE-362 | A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to modify protected parts o |
| CVE-2026-43812 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS T |
| CVE-2026-43813 | Analyzed | 未確認 | CWE-20 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A mali |
| CVE-2026-43814 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able |
| CVE-2026-43816 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. |
| CVE-2026-43817 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app |
| CVE-2026-43818 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-43819 | Analyzed | 未確認 | CWE-284 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data. |
| CVE-2026-43820 | Analyzed | 未確認 | CWE-125 | NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not al |
| CVE-2026-43821 | Modified | 未確認 | CWE-284 | An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvO |
| CVE-2026-43822 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS S |
| CVE-2026-43823 | Analyzed | 未確認 | CWE-415 | When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on |
| CVE-2026-43825 | Analyzed | 未確認 | CWE-502 | Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 (libsvm document categorization module; introduced in OPENNLP-1808 and only |
| CVE-2026-43829 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enab |
| CVE-2026-43830 | Deferred | 未確認 | CWE-77 | A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands. |
| CVE-2026-43831 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution. |
| CVE-2026-43832 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enab |
| CVE-2026-43833 | Deferred | 未確認 | A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution. | |
| CVE-2026-43865 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. The camel-hazelcast component creates and manages Hazelcast instances using a default configur |
| CVE-2026-43866 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel, Apache Camel JMS component. JmsBinding.extractBodyFromJms() in camel-jms - and the equivalent JmsBinding in camel- |
| CVE-2026-43867 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecy |
| CVE-2026-43871 | Analyzed | 未確認 | CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are |
| CVE-2026-43910 | Analyzed | 未確認 | CWE-441, CWE-918 | Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnect(true) is enabled, A |
| CVE-2026-43918 | Deferred | 未確認 | CWE-613 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked inactive, existing auth |
| CVE-2026-43921 | Deferred | 未確認 | CWE-94 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability in FOSSBilling's `Config::prettyPrint |
| CVE-2026-43925 | Deferred | 未確認 | CWE-915 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, an unauthenticated mass assignment vulnerability in the client self-registration en |
| CVE-2026-43927 | Deferred | 未確認 | CWE-367 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the cart checkout flow allows an authenticated client to apply |
| CVE-2026-43928 | Deferred | 未確認 | CWE-1284, CWE-754 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-su |
| CVE-2026-43945 | Deferred | 未確認 | CWE-284, CWE-288, CWE-863, CWE-94 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution |
| CVE-2026-43946 | Deferred | 未確認 | CWE-863 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access t |
| CVE-2026-43947 | Deferred | 未確認 | CWE-863 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an unauthenticated Remote Code Execution vulnerability when `secureEnabled` is set to `t |
| CVE-2026-43977 | Deferred | 未確認 | CWE-639, CWE-863 | wger is a free, open-source workout and fitness manager. In versions prior to 2.6, any authenticated user can read another user's private workout session notes, exercise history, a |
| CVE-2026-43978 | Deferred | 未確認 | CWE-269 | wger is a free, open-source workout and fitness manager. In versions prior to 2.6, a gym trainer can escalate their session to any higher-privileged account (gym manager, general m |
| CVE-2026-44019 | Deferred | 未確認 | CWE-400, CWE-73 | Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow loc |
| CVE-2026-44023 | Analyzed | 未確認 | CWE-22, CWE-918 | Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not suffici |
| CVE-2026-44024 | Analyzed | 未確認 | CWE-22 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing fil |
| CVE-2026-44025 | Analyzed | 未確認 | CWE-306 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor Agent plugin in_monitor_a |
| CVE-2026-44040 | Modified | 未確認 | CWE-338 | UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC authentication challenge bytes. In rfb/vncauth.c:119-129, the vncRandomBytes() |
| CVE-2026-44041 | Modified | 未確認 | CWE-125 | UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function passes a caller-supplied WCHAR |
| CVE-2026-44042 | Modified | 未確認 | CWE-193 | UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper used for HTTP Basic authentication. In repeater/webgui/webutils.c:817, the wi_uudecode() |
| CVE-2026-44090 | Deferred | 未確認 | CWE-306 | Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the devic |
| CVE-2026-44091 | Deferred | 未確認 | CWE-501 | An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to int |
| CVE-2026-44092 | Deferred | 未確認 | CWE-93 | An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integr |
| CVE-2026-44093 | Deferred | 未確認 | CWE-78 | A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full syst |
| CVE-2026-44094 | Deferred | 未確認 | CWE-636 | An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the at |
| CVE-2026-44095 | Deferred | 未確認 | CWE-78 | A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system c |
| CVE-2026-44096 | Deferred | 未確認 | CWE-78 | A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise. |
| CVE-2026-44097 | Deferred | 未確認 | CWE-434 | A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker- |
| CVE-2026-44098 | Deferred | 未確認 | CWE-78 | This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution o |
| CVE-2026-44099 | Deferred | 未確認 | CWE-78 | A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise. |
| CVE-2026-44100 | Deferred | 未確認 | CWE-306 | The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files |
| CVE-2026-44101 | Deferred | 未確認 | CWE-306 | Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and c |
| CVE-2026-44102 | Deferred | 未確認 | CWE-362 | An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid firmware file. This will cause the file to remain accessible |
| CVE-2026-44103 | Deferred | 未確認 | CWE-434 | An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integr |
| CVE-2026-44104 | Deferred | 未確認 | CWE-347 | The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthentic |
| CVE-2026-44105 | Deferred | 未確認 | CWE-532 | The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local attacker with access to the logs to authenticate via SSH as t |
| CVE-2026-44106 | Deferred | 未確認 | CWE-78 | A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system com |
| CVE-2026-44107 | Deferred | 未確認 | CWE-749 | A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbus |
| CVE-2026-44108 | Deferred | 未確認 | CWE-696 | Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal se |
| CVE-2026-44160 | Analyzed | 未確認 | CWE-409 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's in_http and in_forward plugins su |
| CVE-2026-44161 | Analyzed | 未確認 | CWE-918 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows p |
| CVE-2026-44174 | Deferred | 未確認 | CWE-470 | Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes that were used in its collection queries, allowing attacker |
| CVE-2026-44175 | Deferred | 未確認 | CWE-79 | Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did not securely sanitize the contents of the list field on save, leaving it vulnerab |
| CVE-2026-44176 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. Versions prior to 4.9.1 and 5.4.1 do not check the `pages.access` permission during page draft rendering. Permissions are define |
| CVE-2026-44177 | Deferred | 未確認 | CWE-22, CWE-98 | Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traver |
| CVE-2026-44178 | Analyzed | 未確認 | CWE-122 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding dat |
| CVE-2026-44180 | Analyzed | 未確認 | CWE-20 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior t |
| CVE-2026-44181 | Analyzed | 未確認 | CWE-1336 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, pri |
| CVE-2026-44182 | Analyzed | 未確認 | CWE-74 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the ser |
| CVE-2026-44187 | Awaiting Analysis | 未確認 | CWE-256 | A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the |
| CVE-2026-44189 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious p |
| CVE-2026-44190 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on |
| CVE-2026-44191 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnviron |
| CVE-2026-44192 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through in |
| CVE-2026-44210 | Analyzed | 未確認 | CWE-88 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship wi |
| CVE-2026-44227 | Analyzed | 未確認 | CWE-79 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An a |
| CVE-2026-44228 | Analyzed | 未確認 | CWE-79 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting (XSS) vulnerability, where |
| CVE-2026-44229 | Analyzed | 未確認 | CWE-79 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to both 5.0.10 and 6.0.3 contain a Cross-Site Scripting (XSS) vul |
| CVE-2026-44230 | Analyzed | 未確認 | CWE-79 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflec |
| CVE-2026-44231 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-863 | RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege e |
| CVE-2026-44251 | Analyzed | 未確認 | CWE-122, CWE-191 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/ |
| CVE-2026-44268 | Analyzed | 未確認 | CWE-732 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-44269 | Analyzed | 未確認 | CWE-59 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-44276 | Analyzed | 未確認 | CWE-200 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privilege |
| CVE-2026-44332 | Analyzed | 未確認 | CWE-203 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-c |
| CVE-2026-44342 | Analyzed | 未確認 | CWE-352 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the email and WeChat account binding endpoints GET |
| CVE-2026-44359 | Deferred | 未確認 | CWE-829, CWE-94 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_request_tar |
| CVE-2026-44362 | Analyzed | 未確認 | CWE-285 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-44383 | Deferred | 未確認 | CWE-613 | Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwh |
| CVE-2026-44387 | Deferred | 未確認 | CWE-79 | ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may b |
| CVE-2026-44433 | Analyzed | 未確認 | CWE-400, CWE-770 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, an adversarial peer could send a STREAM frame carryin |
| CVE-2026-44434 | Analyzed | 未確認 | CWE-345, CWE-665 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dccf5d4, Quicly was vulnerable to stateless reset injection th |
| CVE-2026-44435 | Analyzed | 未確認 | CWE-400, CWE-617 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number |
| CVE-2026-44436 | Analyzed | 未確認 | CWE-120, CWE-787 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack th |
| CVE-2026-44452 | Analyzed | 未確認 | CWE-125, CWE-170 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length |
| CVE-2026-44453 | Analyzed | 未確認 | CWE-770, CWE-789 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Denial of Service attack when calling alloca under certain condi |
| CVE-2026-44454 | Analyzed | 未確認 | CWE-78 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the `dotfiles` registry module passed unsanitized user i |
| CVE-2026-44507 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43617. Reason: This candidate is a duplicate of CVE-2026-43617. Notes: All CVE users should ref | |
| CVE-2026-44508 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should ref | |
| CVE-2026-44509 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should ref | |
| CVE-2026-44510 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a duplicate of CVE-2026-43620. Notes: All CVE users should ref | |
| CVE-2026-44512 | Analyzed | 未確認 | CWE-476 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0 before 1.22.0, onnx.version_converter.convert_version() can dereference a |
| CVE-2026-44583 | Deferred | 未確認 | CWE-918 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the PayPal webhook endpoint /extensions/paypal/webhook processe |
| CVE-2026-44584 | Deferred | 未確認 | CWE-345 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing |
| CVE-2026-44585 | Deferred | 未確認 | CWE-639, CWE-862 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service id |
| CVE-2026-44595 | Modified | 未確認 | CWE-862 | Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege |
| CVE-2026-44596 | Analyzed | 未確認 | CWE-307 | Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandl |
| CVE-2026-44613 | Modified | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodi |
| CVE-2026-44615 | Analyzed | 未確認 | CWE-22 | Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder operatio |
| CVE-2026-44616 | Analyzed | 未確認 | CWE-90 | LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacke |
| CVE-2026-44617 | Analyzed | 未確認 | CWE-90 | LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escapin |
| CVE-2026-44621 | Analyzed | 未確認 | CWE-754 | With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if |
| CVE-2026-44632 | Analyzed | 未確認 | CWE-94 | Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgo |
| CVE-2026-44687 | Analyzed | 未確認 | CWE-193 | In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the int |
| CVE-2026-44690 | Analyzed | 未確認 | CWE-345 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC proce |
| CVE-2026-44722 | Deferred | 未確認 | CWE-480 | pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfile_aes.py caused t |
| CVE-2026-44739 | Deferred | 未確認 | CWE-89 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigAction endpoint in bundles/CustomReportsBundle/src/Controller/Re |
| CVE-2026-44745 | Analyzed | 未確認 | CWE-601 | SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft |
| CVE-2026-44747 | Awaiting Analysis | 未確認 | CWE-787 | SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized |
| CVE-2026-44752 | Awaiting Analysis | 未確認 | CWE-79 | SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. When a victim accesses such a URL, the script executes |
| CVE-2026-44753 | Awaiting Analysis | 未確認 | CWE-204 | SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid |
| CVE-2026-44759 | Awaiting Analysis | 未確認 | CWE-79 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed i |
| CVE-2026-44760 | Awaiting Analysis | 未確認 | CWE-79 | Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into th |
| CVE-2026-44761 | Awaiting Analysis | 未確認 | CWE-1392 | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. |
| CVE-2026-44767 | Awaiting Analysis | 未確認 | CWE-79 | setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled absolute cross-origin URL could be stored and used directly to construct a <link re |
| CVE-2026-44768 | Awaiting Analysis | 未確認 | CWE-15 | SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuratio |
| CVE-2026-44769 | Awaiting Analysis | 未確認 | CWE-89 | SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low |
| CVE-2026-44770 | Awaiting Analysis | 未確認 | CWE-862 | SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure |
| CVE-2026-44771 | Awaiting Analysis | 未確認 | CWE-862 | SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in esc |
| CVE-2026-44787 | Analyzed | 未確認 | CWE-269 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the signup flow could allow newly registered users to set primary_group_id and |
| CVE-2026-44795 | Analyzed | 未確認 | CWE-470, CWE-502 | Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization whe |
| CVE-2026-44800 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-44806 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-44840 | Deferred | 未確認 | CWE-943 | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Query Language) injecti |
| CVE-2026-44877 | Awaiting Analysis | 未確認 | CWE-200 | An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability cou |
| CVE-2026-44878 | Awaiting Analysis | 未確認 | CWE-377, CWE-732 | A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful |
| CVE-2026-44879 | Awaiting Analysis | 未確認 | CWE-77 | A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. S |
| CVE-2026-44880 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to exe |
| CVE-2026-44891 | Analyzed | 未確認 | CWE-400, CWE-770 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder |
| CVE-2026-44907 | Awaiting Analysis | 未確認 | A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the | |
| CVE-2026-44909 | Deferred | 未確認 | Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticated attacker could exploit HTTP/2 flow-control by setting SETT | |
| CVE-2026-44918 | Deferred | 未確認 | CWE-862 | OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization. |
| CVE-2026-44934 | Awaiting Analysis | 未確認 | CWE-215 | A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, |
| CVE-2026-44935 | Analyzed | 未確認 | CWE-1287 | Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be us |
| CVE-2026-44936 | Analyzed | 未確認 | CWE-918 | Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fleet's bundle reader in 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13. |
| CVE-2026-44937 | Analyzed | 未確認 | CWE-918 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 |
| CVE-2026-44938 | Analyzed | 未確認 | CWE-522 | A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.option |
| CVE-2026-44941 | Analyzed | 未確認 | CWE-23 | A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overw |
| CVE-2026-44943 | Awaiting Analysis | 未確認 | CWE-22 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the d |
| CVE-2026-44944 | Awaiting Analysis | 未確認 | CWE-863 | An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668 |
| CVE-2026-44955 | Deferred | 未確認 | CWE-497 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discover |
| CVE-2026-44968 | Analyzed | 未確認 | CWE-88 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized node_selection and res |
| CVE-2026-44969 | Analyzed | 未確認 | CWE-532 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO le |
| CVE-2026-44970 | Analyzed | 未確認 | CWE-201 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized ev |
| CVE-2026-44974 | Deferred | 未確認 | CWE-436 | @hapi/content provided HTTP Content-* headers parsing. Prior to 6.0.2, Content.disposition() retained the last occurrence of each duplicate parameter while Content.type() retained |
| CVE-2026-44978 | Analyzed | 未確認 | CWE-125, CWE-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not aff |
| CVE-2026-44979 | Deferred | 未確認 | CWE-200, CWE-522 | @hapi/wreck is an HTTP client utility. Prior to 18.1.1, when @hapi/wreck follows a 3xx redirect to a different hostname, only the Authorization and Cookie headers are stripped, and |
| CVE-2026-44981 | Deferred | 未確認 | CWE-409 | CrowdSec offers crowdsourced protection against malicious IPs. From 1.7.0 until 1.7.8, the LAPI router used gin-contrib/gzip with DefaultDecompressHandle globally in pkg/apiserver/ |
| CVE-2026-44982 | Deferred | 未確認 | CWE-693 | CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request body buffer from max(r. |
| CVE-2026-44986 | Deferred | 未確認 | CWE-287, CWE-639 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.14.5, Penpot exposed teams_invitations.clj invitation tokens from create-team-invitations, embedd |
| CVE-2026-45045 | Analyzed | 未確認 | CWE-290 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0 and 2.52.14, the BalancerForward proxy helper in middleware/proxy/proxy.go uses Header.Add() instead of Hea |
| CVE-2026-45063 | Analyzed | 未確認 | CWE-290 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user i |
| CVE-2026-45064 | Analyzed | 未確認 | CWE-1007, CWE-451 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse() passes Un |
| CVE-2026-45065 | Analyzed | 未確認 | CWE-185, CWE-601 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, UrlGenerator validates route paramete |
| CVE-2026-45066 | Analyzed | 未確認 | CWE-184, CWE-436 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSanitizer URL sanitization |
| CVE-2026-45067 | Awaiting Analysis | 未確認 | CWE-93 | ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply-to) flows through; its constructor is documented as validat |
| CVE-2026-45068 | Analyzed | 未確認 | CWE-88 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended |
| CVE-2026-45069 | Analyzed | 未確認 | CWE-1287, CWE-345 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered a |
| CVE-2026-45070 | Analyzed | 未確認 | CWE-93 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Mime\Header\Paramet |
| CVE-2026-45071 | Analyzed | 未確認 | CWE-611 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Crawler::addXmlContent() set DOMDocum |
| CVE-2026-45072 | Analyzed | 未確認 | CWE-79 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler file_excerp |
| CVE-2026-45073 | Analyzed | 未確認 | CWE-89 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() builds a DELETE |
| CVE-2026-45074 | Analyzed | 未確認 | CWE-290 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 until 7.4.12 and 8.0.12, Cas2Handler builds the CAS service parameter f |
| CVE-2026-45075 | Analyzed | 未確認 | CWE-863 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped #[IsGranted], #[IsSignatureValid], and # |
| CVE-2026-45077 | Analyzed | 未確認 | CWE-502, CWE-668 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener (Symfony\Brid |
| CVE-2026-45086 | Deferred | 未確認 | CWE-862 | Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/edit_qu |
| CVE-2026-45112 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommen |
| CVE-2026-45133 | Analyzed | 未確認 | CWE-1333, CWE-674, CWE-776 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacke |
| CVE-2026-45138 | Deferred | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom `html_purify` validation rule used to sanitize blog post bodies relies on b |
| CVE-2026-45139 | Deferred | 未確認 | CWE-73 | CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the Fileeditor module enforces an extension allowlist (`['css','js','html','txt','json |
| CVE-2026-45150 | Deferred | 未確認 | CWE-451 | Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing |
| CVE-2026-45162 | Deferred | 未確認 | CWE-502 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple Pimcore locations call PHP's unserialize() on data from database column |
| CVE-2026-45196 | Analyzed | 未確認 | CWE-280 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation. |
| CVE-2026-45203 | Analyzed | 未確認 | CWE-367 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host k |
| CVE-2026-45260 | Deferred | 未確認 | CWE-862 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's WebDAV asset endpoint exposes a MOVE operation through /asset/webdav{p |
| CVE-2026-45270 | Deferred | 未確認 | CWE-79 | CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the `Pages` backend module registers the `html_purify` validation rule on language-key |
| CVE-2026-45293 | Awaiting Analysis | 未確認 | CWE-95 | WordPress Coding Standards is a set of PHP_CodeSniffer rules (sniffs) that enforce WordPress coding conventions. From 0.14.1 until 3.4.1, the WordPress.WP.EnqueuedResourceParameter |
| CVE-2026-45295 | Deferred | 未確認 | CWE-639, CWE-862 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint `GET /thread/read/{conversation_id}/{thread_ |
| CVE-2026-45304 | Analyzed | 未確認 | CWE-776 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser resolve |
| CVE-2026-45305 | Analyzed | 未確認 | CWE-1333 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cleanu |
| CVE-2026-45309 | Analyzed | 未確認 | CWE-22 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH |
| CVE-2026-45313 | Deferred | 未確認 | CWE-284 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker- |
| CVE-2026-45320 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as ${deptId} are processed by SqlparserUtils.transFilter(), |
| CVE-2026-45325 | Deferred | 未確認 | CWE-1321 | Gestor de Oferta is a web application for managing mobility service offerings. Prior to 20260509.0340.15, @tmlmobilidade/utils has a prototype pollution vulnerability in setValueAt |
| CVE-2026-45330 | Deferred | 未確認 | CWE-639, CWE-862 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin controller |
| CVE-2026-45334 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the content-locking feature returned lock information without checking the requesting user' |
| CVE-2026-45336 | Deferred | 未確認 | CWE-798 | HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Fl |
| CVE-2026-45337 | Analyzed | 未確認 | CWE-285, CWE-345 | Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner of |
| CVE-2026-45363 | Deferred | 未確認 | CWE-1391, CWE-287, CWE-326 | ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forg |
| CVE-2026-45367 | Awaiting Analysis | 未確認 | CWE-1333 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.7, the FHIRPathEngine implementation passes user-controlled re |
| CVE-2026-45368 | Deferred | 未確認 | CWE-79 | Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underlying URL methods for the KirbyTags and image blocks components did not filter out |
| CVE-2026-45376 | Deferred | 未確認 | CWE-89 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the GET /admin/organization/users search interpolat |
| CVE-2026-45377 | Deferred | 未確認 | CWE-200, CWE-284 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the normal download_your_data flow requires the req |
| CVE-2026-45382 | Deferred | 未確認 | CWE-125 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrR |
| CVE-2026-45383 | Deferred | 未確認 | CWE-125 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_sli |
| CVE-2026-45417 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema() into getTables |
| CVE-2026-45419 | Deferred | 未確認 | CWE-22 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template saves call TemplateManageService#save, StaticResourceServer#saveFilesToServe, a |
| CVE-2026-45488 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-45489 | Modified | 未確認 | CWE-290, CWE-749 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-45496 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-45499 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-45533 | Deferred | 未確認 | CWE-22 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delet |
| CVE-2026-45534 | Deferred | 未確認 | CWE-94 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration fr |
| CVE-2026-45535 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as ${ |
| CVE-2026-45568 | Analyzed | 未確認 | CWE-22 | zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL in the request path |
| CVE-2026-45576 | Analyzed | 未確認 | CWE-22 | zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive paths such as /../out |
| CVE-2026-45612 | Deferred | 未確認 | CWE-125 | rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure |
| CVE-2026-45623 | Analyzed | 未確認 | CWE-200, CWE-22 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap p |
| CVE-2026-45646 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-45695 | Deferred | 未確認 | CWE-306, CWE-78 | Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to |
| CVE-2026-45703 | Deferred | 未確認 | CWE-862 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordExport export flow in bundles/WordExportBundle/src/Controller/Translatio |
| CVE-2026-45704 | Deferred | 未確認 | CWE-862 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomReports uses inconsistent authorization between the report listing endpoin |
| CVE-2026-45709 | Analyzed | 未確認 | CWE-918 | Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side Request Forgery (SSRF) via HTML Check API"), shipped in mailp |
| CVE-2026-45711 | Analyzed | 未確認 | CWE-22, CWE-829 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote Mai |
| CVE-2026-45712 | Analyzed | 未確認 | CWE-362, CWE-770 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?data=…) maintains a package-level assets map[string]MessageAsse |
| CVE-2026-45713 | Analyzed | 未確認 | CWE-400, CWE-770 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA payl |
| CVE-2026-45737 | Analyzed | 未確認 | CWE-200, CWE-212 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values emb |
| CVE-2026-45738 | Analyzed | 未確認 | CWE-79 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argopr |
| CVE-2026-45753 | Analyzed | 未確認 | CWE-184, CWE-79 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlAttributeSanitizer::getSuppo |
| CVE-2026-45754 | Analyzed | 未確認 | CWE-287, CWE-306 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, the Mailjet mailer bridge and LOX24 notifier |
| CVE-2026-45755 | Analyzed | 未確認 | CWE-306, CWE-347 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse() received the configur |
| CVE-2026-45756 | Analyzed | 未確認 | CWE-1333, CWE-400 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker |
| CVE-2026-45780 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attenda |
| CVE-2026-45784 | Analyzed | 未確認 | CWE-131, CWE-787 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectly s |
| CVE-2026-45785 | Deferred | 未確認 | CWE-835 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in Dire |
| CVE-2026-45788 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads could be exposed by pull_hotlinked_images when an attacker knew |
| CVE-2026-45793 | Awaiting Analysis | 未確認 | CWE-200 | Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration() validates GitHub OAuth tokens with the regex ^[. |
| CVE-2026-45795 | Deferred | 未確認 | CWE-347 | The Janssen Project is an open-source identity and access management (IAM) platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationR |
| CVE-2026-45796 | Analyzed | 未確認 | CWE-918 | Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable to unau |
| CVE-2026-45797 | Deferred | 未確認 | CWE-434, CWE-79 | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated file uploads including SVG files. Uploaded SVGs are stored in |
| CVE-2026-45799 | Analyzed | 未確認 | CWE-129 | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() in wi |
| CVE-2026-45804 | Analyzed | 未確認 | CWE-367 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because downlo |
| CVE-2026-45805 | Deferred | 未確認 | CWE-749 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and |
| CVE-2026-45806 | Deferred | 未確認 | CWE-918 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data |
| CVE-2026-45811 | Analyzed | 未確認 | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit |
| CVE-2026-45812 | Analyzed | 未確認 | CWE-131 | Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI advertising report event bundles multipl |
| CVE-2026-45813 | Analyzed | 未確認 | CWE-191, CWE-787 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add Source" and "Modify Sou |
| CVE-2026-45815 | Analyzed | 未確認 | CWE-617 | Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser. Severi |
| CVE-2026-45816 | Analyzed | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts (otherwise assert would trigger before NULL dereference) |
| CVE-2026-45820 | Analyzed | 未確認 | CWE-400, CWE-835 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFF |
| CVE-2026-4604 | Deferred | 未確認 | CWE-862 | The Klubraum Membership Request plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `kr_mr_store_settings()` function i |
| CVE-2026-46336 | Deferred | 未確認 | CWE-22, CWE-73 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.96.0 until 0.140.0, authenticated users |
| CVE-2026-46338 | Analyzed | 未確認 | CWE-22 | PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPr |
| CVE-2026-46339 | Deferred | 未確認 | CWE-306, CWE-78 | 9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registr |
| CVE-2026-46341 | Deferred | 未確認 | CWE-183, CWE-20 | The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.9.21, the fe |
| CVE-2026-46351 | Deferred | 未確認 | CWE-330 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values with insufficiently secure randomness in bbb-common-web/src/mai |
| CVE-2026-46353 | Deferred | 未確認 | CWE-284 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API |
| CVE-2026-46354 | Analyzed | 未確認 | CWE-347 | Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity.Val |
| CVE-2026-46377 | Deferred | 未確認 | CWE-129 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the escape sequence handler in (*Tokenizer).parseCurRun |
| CVE-2026-46378 | Deferred | 未確認 | CWE-835 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the selector lexer matchRegexPattern closure in (*Token |
| CVE-2026-46388 | Deferred | 未確認 | CWE-279, CWE-378, CWE-379 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file c |
| CVE-2026-46403 | Deferred | 未確認 | CWE-693 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithTypedArguments` as a read-only execution mechanism. The hook |
| CVE-2026-46404 | Deferred | 未確認 | CWE-918 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, the presentation URL validation did not properly restrict access to site local and link local addresses. The red |
| CVE-2026-46410 | Deferred | 未確認 | CWE-200 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1. |
| CVE-2026-46412 | Awaiting Analysis | 未確認 | CWE-506 | @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker us |
| CVE-2026-46413 | Analyzed | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, regular users could route direct S3 multipart uploads through ExternalUploadMa |
| CVE-2026-46415 | Deferred | 未確認 | CWE-284, CWE-348 | The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used |
| CVE-2026-46420 | Analyzed | 未確認 | CWE-78 | setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP |
| CVE-2026-46421 | Deferred | 未確認 | CWE-506 | The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. |
| CVE-2026-46428 | Deferred | 未確認 | CWE-295 | lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug in lettre's `boring-tls` integration silently disables TLS h |
| CVE-2026-46452 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstab |
| CVE-2026-46453 | Analyzed | 未確認 | CWE-20, CWE-639 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component |
| CVE-2026-46454 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd component maps inbound Bayeux (CometD) message headers into the Camel Exchange without a |
| CVE-2026-46455 | Analyzed | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keyc |
| CVE-2026-46456 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a componen |
| CVE-2026-46457 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component maps inbound NATS message headers into the Camel Exchange but defaulted its header |
| CVE-2026-46458 | Deferred | 未確認 | CWE-522 | ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attack |
| CVE-2026-46459 | Deferred | 未確認 | CWE-862 | ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility conf |
| CVE-2026-46463 | Analyzed | 未確認 | CWE-190 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46464 | Analyzed | 未確認 | CWE-59 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46465 | Analyzed | 未確認 | CWE-134 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46466 | Analyzed | 未確認 | CWE-348 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46467 | Analyzed | 未確認 | CWE-532 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46468 | Analyzed | 未確認 | CWE-59 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-4648 | Deferred | 未確認 | CWE-326 | Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. (version used at Resurrection Fest 2025), w |
| CVE-2026-46485 | Deferred | 未確認 | CWE-15, CWE-284, CWE-287, CWE-602 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the m |
| CVE-2026-46512 | Deferred | 未確認 | CWE-94 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template parameters including greeting, dest, url, extension, code, and f |
| CVE-2026-46513 | Deferred | 未確認 | CWE-256 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes(32 |
| CVE-2026-46514 | Deferred | 未確認 | CWE-532 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword.php:48-53 returned a plaintext password and fm_add_extensio |
| CVE-2026-46515 | Deferred | 未確認 | CWE-862 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERM_READ access was sufficient to call fm_list_managers, fm_list_pinsets, fm_show_context, fm_get_m |
| CVE-2026-46516 | Deferred | 未確認 | CWE-79 | Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter (`assets/js/chat.js`'s `formatMarkdown`) inserted regex capture groups |
| CVE-2026-4653 | Deferred | 未確認 | CWE-79 | The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter in versions up to and including 3.6.4. This is |
| CVE-2026-46555 | Analyzed | 未確認 | CWE-22, CWE-306, CWE-346 | WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP AP |
| CVE-2026-46556 | Deferred | 未確認 | CWE-918 | FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows |
| CVE-2026-46562 | Analyzed | 未確認 | CWE-470, CWE-94, CWE-95 | Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algor |
| CVE-2026-46582 | Analyzed | 未確認 | CWE-358 | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG val |
| CVE-2026-46584 | Analyzed | 未確認 | CWE-20, CWE-200 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Mail Component. The camel-mail producer (MailProducer.getSender |
| CVE-2026-46585 | Analyzed | 未確認 | CWE-20, CWE-639 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Lucene Component. The camel-lucene producer reads the search phrase from |
| CVE-2026-46587 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recomm |
| CVE-2026-46588 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recomm |
| CVE-2026-46590 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecy |
| CVE-2026-46591 | Analyzed | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Apache Camel Neo4J component. The camel-neo4j producer builds the Cypher WHERE clause for its matc |
| CVE-2026-46592 | Analyzed | 未確認 | CWE-20, CWE-441 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component. The camel-cxf producer selects which SOAP operati |
| CVE-2026-46593 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint al |
| CVE-2026-46594 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when ope |
| CVE-2026-46600 | Deferred | 未確認 | CWE-125 | Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. |
| CVE-2026-4661 | Deferred | 未確認 | CWE-89 | The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up |
| CVE-2026-46621 | Analyzed | 未確認 | CWE-94 | Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text us |
| CVE-2026-46627 | Analyzed | 未確認 | CWE-400 | Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not prevent a template from consuming CPU, memory, or wall-clock time, even under the strictest allow-li |
| CVE-2026-46628 | Analyzed | 未確認 | CWE-116 | Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup u |
| CVE-2026-46629 | Analyzed | 未確認 | CWE-770 | Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter instances in arrays keyed by template-controlled filter argumen |
| CVE-2026-46633 | Analyzed | 未確認 | CWE-94 | Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template name from a {% use %} tag is placed inside a PHP single-quote |
| CVE-2026-46634 | Analyzed | 未確認 | CWE-693 | Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a synthesized __string_template__<hash> name that can fall out |
| CVE-2026-46635 | Analyzed | 未確認 | CWE-863 | Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), which reads public and magic properties without reaching CoreExt |
| CVE-2026-46637 | Analyzed | 未確認 | CWE-116, CWE-79 | Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinliner-extra are registered with is_safe => [all], causing Twig to treat p |
| CVE-2026-46638 | Analyzed | 未確認 | CWE-693 | Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previously loaded outside the sandbox without re-invoking checkSecu |
| CVE-2026-46639 | Analyzed | 未確認 | CWE-693 | Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::getAttribute() with the sandbox argument hardcoded to false, |
| CVE-2026-46640 | Analyzed | 未確認 | CWE-94 | Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a Macro |
| CVE-2026-46644 | Awaiting Analysis | 未確認 | CWE-1289 | Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- labels whos |
| CVE-2026-46671 | Analyzed | 未確認 | CWE-22 | Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted `.onetoc2` table-of-contents file can cause `Par |
| CVE-2026-46672 | Deferred | 未確認 | CWE-1236 | Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format cs |
| CVE-2026-46678 | Analyzed | 未確認 | CWE-918 | Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into force_download='allow-local' |
| CVE-2026-46680 | Analyzed | 未確認 | CWE-269 | containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32 |
| CVE-2026-46681 | Deferred | 未確認 | CWE-1321 | @nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the _copyProps function in lib/src/object/copy.ts uses for...in to iterate ov |
| CVE-2026-46684 | Deferred | 未確認 | CWE-347 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilter#doFilter() pass X-DE-TOKEN values to Token |
| CVE-2026-46686 | Deferred | 未確認 | CWE-79 | Emlog is an open source website building system. In 2.6.13 and earlier, the admin backend user search module's keyword parameter from admin/user.php is processed with addslashes bu |
| CVE-2026-46687 | Deferred | 未確認 | CWE-24, CWE-98 | Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-traversal template parameter from api_controller.php without |
| CVE-2026-46700 | Deferred | 未確認 | CWE-285 | Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server checks only that the caller has a valid session and does n |
| CVE-2026-46701 | Analyzed | 未確認 | CWE-346 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty secret (`process.env['NETWORK_AI_MCP_SECRET'] ?? ''` at |
| CVE-2026-46709 | Analyzed | 未確認 | CWE-77, CWE-78 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths from tabby-electron/src/pathDrop.ts into the active shell w |
| CVE-2026-46715 | Deferred | 未確認 | CWE-287 | Flask-Security-Too allows users to add security features to their Flask applicationa. Version 5.8.0's OAuth reauthentication flow can mark a session as fresh after verifying an OAu |
| CVE-2026-4672 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-46726 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-918 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Vertx Websocket component |
| CVE-2026-46730 | Analyzed | 未確認 | CWE-863 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-46737 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access cou |
| CVE-2026-46738 | Analyzed | 未確認 | CWE-20 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access cou |
| CVE-2026-46876 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo |
| CVE-2026-46917 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-46923 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3 |
| CVE-2026-46924 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo |
| CVE-2026-46936 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-46941 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-46943 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). Supported versions that are affected are 21.0.0-25.0.0. Difficult to exp |
| CVE-2026-46948 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). Supported versions that are affected are 2.4.0.1.0- |
| CVE-2026-46954 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-46968 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle Gr |
| CVE-2026-46975 | Analyzed | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabili |
| CVE-2026-46980 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2. |
| CVE-2026-46981 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2. |
| CVE-2026-46982 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Easily explo |
| CVE-2026-46983 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easily exploit |
| CVE-2026-46984 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46985 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46986 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46987 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected |
| CVE-2026-46988 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 13.5 a |
| CVE-2026-46989 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24. |
| CVE-2026-46990 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected a |
| CVE-2026-46991 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected a |
| CVE-2026-46992 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected a |
| CVE-2026-46993 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46994 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46995 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46996 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46997 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46998 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46999 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 a |
| CVE-2026-47000 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). The supported version that is affected is 24.1. |
| CVE-2026-47001 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework). Supported versions that are affected are 13. |
| CVE-2026-47002 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24. |
| CVE-2026-47003 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24. |
| CVE-2026-47004 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 |
| CVE-2026-47005 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 |
| CVE-2026-47006 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 |
| CVE-2026-47007 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications (component: On-premise Deployment). Supported versions that are affected are 15.0 |
| CVE-2026-47008 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9. |
| CVE-2026-47009 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitabl |
| CVE-2026-47010 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected |
| CVE-2026-47011 | Analyzed | 未確認 | CWE-203 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.4. Difficult to exploi |
| CVE-2026-47012 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0 |
| CVE-2026-47013 | Analyzed | 未確認 | CWE-770 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated atta |
| CVE-2026-47014 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-47015 | Analyzed | 未確認 | CWE-601 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). The supported version that is affected is 8.62. Easily explo |
| CVE-2026-47016 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that are affected are 17.0-26.4. Difficult to |
| CVE-2026-47017 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.61 and 8.62. Easily |
| CVE-2026-47018 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-47019 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-47021 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are |
| CVE-2026-47022 | Analyzed | 未確認 | CWE-400 | Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). The supported version that is affected is 26.1.0.0.0. Easily exploitable vuln |
| CVE-2026-47023 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-47024 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.62. Easily exploitab |
| CVE-2026-47026 | Analyzed | 未確認 | CWE-601 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.61 and 8.62. Eas |
| CVE-2026-47027 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Orac |
| CVE-2026-47028 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-47030 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated at |
| CVE-2026-47031 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-47032 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerabili |
| CVE-2026-47033 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-47034 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated at |
| CVE-2026-47035 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated at |
| CVE-2026-47036 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.3. Easily exploitab |
| CVE-2026-47037 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 14.1.2.1.0. Easily ex |
| CVE-2026-47038 | Analyzed | 未確認 | CWE-306 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabili |
| CVE-2026-47039 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabi |
| CVE-2026-47040 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitab |
| CVE-2026-47041 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47043 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47044 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47045 | Analyzed | 未確認 | CWE-601 | Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabilit |
| CVE-2026-47046 | Analyzed | 未確認 | CWE-400 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated at |
| CVE-2026-47047 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47048 | Analyzed | 未確認 | CWE-601 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Easily exploitab |
| CVE-2026-47049 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.61 and 8.62. Easil |
| CVE-2026-47050 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability al |
| CVE-2026-47051 | Analyzed | 未確認 | CWE-601 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Easily exploita |
| CVE-2026-47052 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MyS |
| CVE-2026-47053 | Analyzed | 未確認 | CWE-285 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47054 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47055 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47056 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Eas |
| CVE-2026-47057 | Analyzed | 未確認 | CWE-400 | Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability a |
| CVE-2026-47058 | Analyzed | 未確認 | CWE-502 | Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability |
| CVE-2026-47059 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are |
| CVE-2026-47060 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabilit |
| CVE-2026-47061 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerabil |
| CVE-2026-47062 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-47063 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affect |
| CVE-2026-47064 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0 |
| CVE-2026-47078 | Awaiting Analysis | 未確認 | CWE-23 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and |
| CVE-2026-47081 | Deferred | 未確認 | CWE-863 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe f |
| CVE-2026-47082 | Deferred | 未確認 | CWE-863 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc (to |
| CVE-2026-47083 | Deferred | 未確認 | CWE-204 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using the ESEARCH command, an authenticated IMAP user could e |
| CVE-2026-47084 | Deferred | 未確認 | CWE-863 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LO |
| CVE-2026-47085 | Deferred | 未確認 | CWE-340 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. If an attacker knew a folder name on the victim's accoun |
| CVE-2026-47086 | Deferred | 未確認 | CWE-863 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticated user could mint a URLAUTH token (via the GENURLAUTH |
| CVE-2026-47087 | Deferred | 未確認 | CWE-672 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer had access continue |
| CVE-2026-47088 | Deferred | 未確認 | CWE-126 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message |
| CVE-2026-47089 | Deferred | 未確認 | CWE-862 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against |
| CVE-2026-47121 | Analyzed | 未確認 | CWE-22, CWE-59 | Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBinaryDeltaApply.m` enforces `relativePath.pathComponents containsObject:@".."` and rejects |
| CVE-2026-47122 | Analyzed | 未確認 | CWE-306, CWE-441 | Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, `Autoupdate/AppInstaller.m`'s `shouldAcceptNewConnection:` only enforces `SUCodeSigningVeri |
| CVE-2026-47128 | Deferred | 未確認 | CWE-863 | nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets |
| CVE-2026-47129 | Deferred | 未確認 | CWE-862 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Access Control (BAC) vulnerability in the `activateUser` and `deactiv |
| CVE-2026-47130 | Deferred | 未確認 | CWE-639 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Object Level Authorization (BOLA/IDOR) vulnerability exists in the CR |
| CVE-2026-47133 | Deferred | 未確認 | CWE-294 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store (`/Libra |
| CVE-2026-47134 | Deferred | 未確認 | CWE-732 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used to sign the on-disk policy database (`/Library/Appli |
| CVE-2026-47143 | Analyzed | 未確認 | CWE-476 | Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes |
| CVE-2026-47144 | Deferred | 未確認 | CWE-22 | Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in `shame next` allows an attacker-controlled `shamefile.yaml` to dis |
| CVE-2026-47158 | Deferred | 未確認 | CWE-352 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did not bind the OAuth state parameter accepted by /connect/auth |
| CVE-2026-47159 | Deferred | 未確認 | CWE-287 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO discovery and pre-validation flow returned organization-related SSO metadata includ |
| CVE-2026-47160 | Deferred | 未確認 | CWE-1389, CWE-918 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png endpoint used src/http_client.rs checks including should_block |
| CVE-2026-47164 | Deferred | 未確認 | CWE-284 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO login flow checked the IdP email_verified claim only for new-user creation and not |
| CVE-2026-47178 | Analyzed | 未確認 | CWE-787 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleaved, 4:2:0) |
| CVE-2026-47180 | Analyzed | 未確認 | CWE-674 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming._decode_labels_at_offset recurses once per DNS-name compression pointer, |
| CVE-2026-47183 | Analyzed | 未確認 | CWE-400 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-dedup methods sto |
| CVE-2026-47184 | Analyzed | 未確認 | CWE-770 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirations, _expire_ |
| CVE-2026-47198 | Deferred | 未確認 | CWE-20, CWE-639 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properti |
| CVE-2026-47199 | Deferred | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to 16.18.3 and 15.108.0, check_safe_sql_query permitted SELECT INTO OUTFILE queries, which could potentially work on self-ho |
| CVE-2026-47212 | Analyzed | 未確認 | CWE-306, CWE-347 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse() received the c |
| CVE-2026-47219 | Deferred | 未確認 | CWE-20, CWE-248 | find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports route parameters and wildcards. Versions prior to 9.7.0 are vulnerable to remotely |
| CVE-2026-47237 | Awaiting Analysis | 未確認 | CWE-266 | Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifes |
| CVE-2026-47247 | Analyzed | 未確認 | CWE-200, CWE-226, CWE-682, CWE-908 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid i |
| CVE-2026-47251 | Analyzed | 未確認 | CWE-125, CWE-190 | libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in the very security check it adde |
| CVE-2026-47254 | Analyzed | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()` in `libheif/sequences/track.cc` stores an out-of-bounds chu |
| CVE-2026-47255 | Deferred | 未確認 | CWE-20, CWE-284, CWE-319, CWE-798, CWE-89 | AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to v |
| CVE-2026-47262 | Analyzed | 未確認 | CWE-400 | containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a |
| CVE-2026-47275 | Deferred | 未確認 | CWE-476 | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client |
| CVE-2026-47276 | Deferred | 未確認 | CWE-476 | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to |
| CVE-2026-47282 | Analyzed | 未確認 | CWE-200, CWE-522 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-47290 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-47295 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47296 | Modified | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47300 | Analyzed | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47301 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47302 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-47303 | Analyzed | 未確認 | CWE-302, CWE-863, CWE-90 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47304 | Analyzed | 未確認 | CWE-345, CWE-347 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-47305 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. |
| CVE-2026-47390 | Deferred | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `spider_tools` URL validation can be bypassed usi |
| CVE-2026-47391 | Deferred | 未確認 | CWE-306, CWE-95 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a `calcu |
| CVE-2026-47392 | Deferred | 未確認 | CWE-184, CWE-693 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `execute_code()` in `praisonaiagents/tools/python |
| CVE-2026-47393 | Deferred | 未確認 | CWE-1188, CWE-306 | PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-generator (`praisonai.deploy.api.generate_api_server_code`) that |
| CVE-2026-47394 | Deferred | 未確認 | CWE-200, CWE-22, CWE-862 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulne |
| CVE-2026-47395 | Deferred | 未確認 | CWE-200 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, PraisonAI's direct-prompt CLI automatically expan |
| CVE-2026-47396 | Deferred | 未確認 | CWE-284, CWE-306 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER_TOKEN` |
| CVE-2026-47397 | Deferred | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. `wri |
| CVE-2026-47398 | Deferred | 未確認 | CWE-829, CWE-94 | PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which patched CVE-2026-44334 / GHSA-xcmw-grxf-wjhj) added the PRAISONAI_ALLOW_LOCAL_TOOLS env-var gate to |
| CVE-2026-47399 | Deferred | 未確認 | CWE-284, CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspace-scoped REST routes contain a systemic object-level author |
| CVE-2026-47405 | Deferred | 未確認 | CWE-284, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticat |
| CVE-2026-47406 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The dependency endpoints (`PO |
| CVE-2026-47407 | Deferred | 未確認 | CWE-269, CWE-639, CWE-863 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server exposes resources under `/api/v1/workspaces/{worksp |
| CVE-2026-47408 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The `GET /workspaces/{workspa |
| CVE-2026-47409 | Deferred | 未確認 | CWE-269, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling owner lockout. The `DELETE /works |
| CVE-2026-47410 | Deferred | 未確認 | CWE-321, CWE-798 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defa |
| CVE-2026-47411 | Deferred | 未確認 | CWE-269, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tam |
| CVE-2026-47412 | Deferred | 未確認 | CWE-269, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling destructive action. The `DELETE / |
| CVE-2026-47413 | Deferred | 未確認 | CWE-269, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The `POST / |
| CVE-2026-47414 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. Five label endpoints — `PATCH |
| CVE-2026-47415 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The issue CRUD endpoints (`GE |
| CVE-2026-47416 | Deferred | 未確認 | CWE-269, CWE-862 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspaces |
| CVE-2026-47417 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints (`POST |
| CVE-2026-47418 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The project CRUD endpoints (` |
| CVE-2026-47419 | Deferred | 未確認 | CWE-639 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an* Insecure Direct Object Reference. The agent CRUD endpoints (`G |
| CVE-2026-47422 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This |
| CVE-2026-47423 | Analyzed | 未確認 | CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to re-clone an XSS paylo |
| CVE-2026-47425 | Deferred | 未確認 | CWE-22, CWE-73 | Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `.tri |
| CVE-2026-47427 | Analyzed | 未確認 | CWE-476 | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is |
| CVE-2026-47428 | Deferred | 未確認 | CWE-79 | Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /__vitest_test__/ with the otelCarrier query parameter inserted |
| CVE-2026-47429 | Analyzed | 未確認 | CWE-22 | Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /__vitest_attachment__, allow |
| CVE-2026-47470 | Deferred | 未確認 | CWE-20 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of th |
| CVE-2026-47471 | Deferred | 未確認 | CWE-122 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vu |
| CVE-2026-47472 | Deferred | 未確認 | CWE-502 | NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploi |
| CVE-2026-47473 | Deferred | 未確認 | CWE-123 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, de |
| CVE-2026-47475 | Deferred | 未確認 | CWE-617 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploi |
| CVE-2026-47476 | Analyzed | 未確認 | CWE-400 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might le |
| CVE-2026-47477 | Deferred | 未確認 | CWE-121 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead t |
| CVE-2026-47478 | Deferred | 未確認 | CWE-910 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability migh |
| CVE-2026-47479 | Deferred | 未確認 | CWE-400 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might le |
| CVE-2026-47480 | Deferred | 未確認 | CWE-248 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial |
| CVE-2026-47481 | Deferred | 未確認 | CWE-288 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit |
| CVE-2026-47482 | Deferred | 未確認 | CWE-401 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulne |
| CVE-2026-47483 | Awaiting Analysis | 未確認 | CWE-770 | NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurr |
| CVE-2026-47632 | Modified | 未確認 | CWE-295 | Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-47642 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-47646 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-4765 | Deferred | 未確認 | CWE-79 | Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vulnerability lies in the ‘name’ parameter of the initialisation process due to inc |
| CVE-2026-47657 | Deferred | 未確認 | CWE-862 | HumHub is an Open Source Enterprise Social Network. In versions 1.13.0 through 1.18.2, a missing authorization check in the Space member management controller allowed any authentic |
| CVE-2026-47667 | Deferred | 未確認 | CWE-1284, CWE-401, CWE-789 | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field is read as an `unsigned int` from the first 4 bytes of an Ana |
| CVE-2026-47668 | Deferred | 未確認 | CWE-1188, CWE-20, CWE-94 | DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the ` |
| CVE-2026-47669 | Deferred | 未確認 | CWE-22 | DbGate is cross-platform database manager. In versions 7.1.8 and prior, the `unzipDirectory()` function in `packages/api/src/shell/unzipDirectory.js` (line 27) does not validate th |
| CVE-2026-4767 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1 |
| CVE-2026-47670 | Deferred | 未確認 | CWE-77, CWE-78 | DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute |
| CVE-2026-47671 | Analyzed | 未確認 | CWE-306 | Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost configserver` used by `nhost dev` exposes the Mimir GraphQL A |
| CVE-2026-47685 | Analyzed | 未確認 | CWE-79 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenticated inventory service endpoin |
| CVE-2026-47687 | Analyzed | 未確認 | CWE-79 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.class.p |
| CVE-2026-47688 | Analyzed | 未確認 | CWE-862 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `clearAES` and `clearPMTasks` methods in |
| CVE-2026-47689 | Analyzed | 未確認 | CWE-79 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php |
| CVE-2026-4769 | Awaiting Analysis | 未確認 | CWE-912 | Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented an |
| CVE-2026-47690 | Awaiting Analysis | 未確認 | CWE-1336, CWE-77 | MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnera |
| CVE-2026-47695 | Deferred | 未確認 | CWE-918 | CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API (`http.request`, `http.websocke |
| CVE-2026-47697 | Deferred | 未確認 | CWE-863 | Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organization (workspace). Prior to version 1.20.2, several endpoints accepted entity I |
| CVE-2026-4770 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This |
| CVE-2026-47703 | Analyzed | 未確認 | CWE-330, CWE-346 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend U |
| CVE-2026-47708 | Deferred | 未確認 | CWE-77 | MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly interpol |
| CVE-2026-47709 | Analyzed | 未確認 | CWE-476 | libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed uncompresse |
| CVE-2026-47714 | Analyzed | 未確認 | CWE-190 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contains an integer overflow. Both `wi |
| CVE-2026-4772 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-AS |
| CVE-2026-47722 | Deferred | 未確認 | CWE-94 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, `internal/configgen/generator.go:86,108,119` interpolates the oper |
| CVE-2026-47723 | Deferred | 未確認 | CWE-1021 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.1, none of the response paths in `internal/web/` or `internal/api/` s |
| CVE-2026-47724 | Deferred | 未確認 | CWE-862 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the `/api/v1/*` route surface trusts the bearer token alone for au |
| CVE-2026-47725 | Deferred | 未確認 | CWE-352 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.3, every /ui/* POST / PUT / PATCH / DELETE route processes the reques |
| CVE-2026-47726 | Deferred | 未確認 | CWE-285 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog does no admin check. |
| CVE-2026-47729 | Analyzed | 未確認 | CWE-125, CWE-1289 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnera |
| CVE-2026-4773 | Deferred | 未確認 | CWE-1287 | Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authentication Bypass. This issue affects IDM-MFA: from 2025.11.27 befo |
| CVE-2026-47730 | Analyzed | 未確認 | CWE-79 | Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate() and Profile::getName() into HTML output without escaping |
| CVE-2026-47731 | Deferred | 未確認 | CWE-22 | The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS) |
| CVE-2026-47732 | Analyzed | 未確認 | CWE-863 | Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a Stringable operand without consulting SecurityPolicy::checkM |
| CVE-2026-47736 | Deferred | 未確認 | CWE-400 | Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, when PROXY protocol v1 support is enabled, Puma reads incoming bytes into an internal buffer |
| CVE-2026-47737 | Deferred | 未確認 | CWE-290, CWE-345 | Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is enab |
| CVE-2026-47743 | Deferred | 未確認 | CWE-200, CWE-639, CWE-79 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. |
| CVE-2026-47751 | Awaiting Analysis | 未確認 | CWE-200, CWE-78 | Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests and issues. Prior to 1.0.74, because the action checked out attacker-controlled |
| CVE-2026-47752 | Deferred | 未確認 | CWE-1336 | Tugtainer is a self-hosted app for automating updates of Docker containers. Versions prior to 1.30.2 are vulnerable to Server-Side Template Injection (SSTI) in the notification tem |
| CVE-2026-47755 | Deferred | 未確認 | CWE-639, CWE-862 | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.05, low-privileged authenticated agent can retrieve pl |
| CVE-2026-47767 | Analyzed | 未確認 | CWE-436 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated |
| CVE-2026-47768 | Deferred | 未確認 | CWE-598 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, hi |
| CVE-2026-47769 | Deferred | 未確認 | CWE-306 | APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the |
| CVE-2026-47826 | Analyzed | 未確認 | CWE-22 | The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI to |
| CVE-2026-47828 | Analyzed | 未確認 | During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server c | |
| CVE-2026-47829 | Analyzed | 未確認 | CWE-88 | Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh l |
| CVE-2026-47830 | Awaiting Analysis | 未確認 | Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe | |
| CVE-2026-47831 | Awaiting Analysis | 未確認 | Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resultin | |
| CVE-2026-47840 | Awaiting Analysis | 未確認 | A network attacker positioned between UAA and its LDAP directory can impersonate the directory using any certificate from any trusted CA, then harvest the LDAP bind password and ev | |
| CVE-2026-47858 | Analyzed | 未確認 | CWE-306 | Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affec |
| CVE-2026-47865 | Analyzed | 未確認 | CWE-287 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authenti |
| CVE-2026-47866 | Analyzed | 未確認 | CWE-863 | VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper author |
| CVE-2026-47867 | Analyzed | 未確認 | CWE-94 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. |
| CVE-2026-47868 | Analyzed | 未確認 | CWE-269 | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root. Affe |
| CVE-2026-47869 | Analyzed | 未確認 | CWE-94 | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code. Affected versio |
| CVE-2026-47870 | Analyzed | 未確認 | CWE-269 | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: 3 |
| CVE-2026-47871 | Analyzed | 未確認 | CWE-22 | VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal att |
| CVE-2026-47873 | Analyzed | 未確認 | CWE-1327 | The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. |
| CVE-2026-47876 | Awaiting Analysis | 未確認 | CWE-787 | VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VM |
| CVE-2026-47882 | Analyzed | 未確認 | CWE-338 | When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot Dashboard, Spring Tools |
| CVE-2026-47896 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library). This issue affects Apache Lucene |
| CVE-2026-47897 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library). This issue affects Apache Lucene |
| CVE-2026-47898 | Analyzed | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis.Common library). This issue affects Apache Lucene.Net.Analysis.Common |
| CVE-2026-47967 | Analyzed | 未確認 | CWE-787 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-47968 | Analyzed | 未確認 | CWE-787 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-47969 | Analyzed | 未確認 | CWE-125 | Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive i |
| CVE-2026-47971 | Analyzed | 未確認 | CWE-121 | Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-47976 | Analyzed | 未確認 | CWE-787 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-47979 | Analyzed | 未確認 | CWE-125 | Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensit |
| CVE-2026-47984 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-47988 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-47992 | Analyzed | 未確認 | CWE-89 | Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in |
| CVE-2026-47994 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form f |
| CVE-2026-47995 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form |
| CVE-2026-47996 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to |
| CVE-2026-47997 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-47998 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-47999 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form |
| CVE-2026-48000 | Analyzed | 未確認 | CWE-601 | Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that re |
| CVE-2026-48001 | Analyzed | 未確認 | CWE-200 | Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attac |
| CVE-2026-48008 | Deferred | 未確認 | CWE-862 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an |
| CVE-2026-48009 | Deferred | 未確認 | CWE-200 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a low-privilege admin user with user_recovery:read ACL can take over any admin account by triggering POST /a |
| CVE-2026-48010 | Deferred | 未確認 | CWE-269 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser() in src/Core/Framework/Api/Controller/UserController.php writes raw user data in |
| CVE-2026-48012 | Deferred | 未確認 | CWE-601 | Shopware is an open commerce platform. Versions 6.7.3.0 through 6.7.10.0 have an open redirect in Shopware's public SSO entry point at `GET /api/oauth/sso/auth`. When the endpoint |
| CVE-2026-48013 | Deferred | 未確認 | CWE-918 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the `/api/_action/media/external-link` endpoint allows authenticated admin users to make server-side HTTP HE |
| CVE-2026-48014 | Deferred | 未確認 | CWE-862 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/_action/order/{orderId}/state/{transition} and similar transaction |
| CVE-2026-48015 | Deferred | 未確認 | CWE-79 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowed_extensions whitelist in src/Core/Framework/Resources/config/packages/shopware.y |
| CVE-2026-48016 | Deferred | 未確認 | CWE-639 | Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the Store API endpoint /store-api/handle-payment in src/Core/Checkout/Payment/SalesChannel/HandlePaymentMeth |
| CVE-2026-48021 | Deferred | 未確認 | CWE-295, CWE-347 | In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlle |
| CVE-2026-48022 | Deferred | 未確認 | CWE-319, CWE-346, CWE-522 | @hapi/wreck is an HTTP client utility. Prior to 18.1.2, Wreck strips credential headers including Authorization, Cookie, and Proxy-Authorization before following a cross-origin red |
| CVE-2026-48025 | Deferred | 未確認 | CWE-244 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the pla |
| CVE-2026-48029 | Analyzed | 未確認 | CWE-125, CWE-191 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate |
| CVE-2026-48030 | Deferred | 未確認 | CWE-78 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler a |
| CVE-2026-48032 | Deferred | 未確認 | CWE-697 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypasse |
| CVE-2026-48033 | Deferred | 未確認 | CWE-693 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a for |
| CVE-2026-48034 | Deferred | 未確認 | CWE-284 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypass via decoy sibling r |
| CVE-2026-48035 | Deferred | 未確認 | CWE-1059 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation cou |
| CVE-2026-48036 | Deferred | 未確認 | CWE-755 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers running drift detection in |
| CVE-2026-48037 | Deferred | 未確認 | CWE-693 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silentl |
| CVE-2026-48038 | Awaiting Analysis | 未確認 | CWE-248 | joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating |
| CVE-2026-4804 | Deferred | 未確認 | CWE-79 | The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, and including, 4.2.0. This is due to the theme registering th |
| CVE-2026-48045 | Analyzed | 未確認 | CWE-770 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handle_query_or_defer retained every truncated TC-bit incoming query, |
| CVE-2026-48049 | Deferred | 未確認 | CWE-22 | @hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7.1.0, @hapi/inert serves static files from a directory configured with path in the directory or |
| CVE-2026-48051 | Deferred | 未確認 | CWE-918 | Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any auth |
| CVE-2026-48052 | Deferred | 未確認 | CWE-639 | Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an authenticated user who is a member of any organization can delete or rename tags bel |
| CVE-2026-48058 | Deferred | 未確認 | CWE-614 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/web/session.go and internal/web/oidc.go set HttpOnly and |
| CVE-2026-48060 | Deferred | 未確認 | CWE-79 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection a |
| CVE-2026-48062 | Deferred | 未確認 | CWE-434 | CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule in system/Validation/StrictRules/FileRules.php checked the MIME-derived guessed ext |
| CVE-2026-48068 | Awaiting Analysis | 未確認 | CWE-248 | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming |
| CVE-2026-48069 | Deferred | 未確認 | CWE-248 | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming |
| CVE-2026-48125 | Analyzed | 未確認 | CWE-1333, CWE-400 | UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, a regular expression denial-of-service v |
| CVE-2026-48127 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.110.0, users without write access could attach files to any doctype through file-handling API endpoints su |
| CVE-2026-48144 | Analyzed | 未確認 | CWE-297 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to up |
| CVE-2026-48145 | Analyzed | 未確認 | CWE-297 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgra |
| CVE-2026-48203 | Analyzed | 未確認 | CWE-20, CWE-74, CWE-918 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in A |
| CVE-2026-48204 | Analyzed | 未確認 | CWE-20, CWE-284 | Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation |
| CVE-2026-48205 | Analyzed | 未確認 | CWE-20, CWE-918 | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component. The camel-dns producers read DNS operation parameters - the resolver to |
| CVE-2026-48206 | Analyzed | 未確認 | CWE-20, CWE-639 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component. The camel-jira producers read their operation parameters |
| CVE-2026-48252 | Analyzed | 未確認 | CWE-306 | Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this |
| CVE-2026-48253 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48254 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48255 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48257 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48259 | Analyzed | 未確認 | CWE-918 | Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-p |
| CVE-2026-48260 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48261 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48262 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48263 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-48267 | Analyzed | 未確認 | CWE-476 | DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit th |
| CVE-2026-48269 | Analyzed | 未確認 | CWE-122 | Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue |
| CVE-2026-48270 | Analyzed | 未確認 | CWE-787 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-48272 | Analyzed | 未確認 | CWE-427 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit de |
| CVE-2026-48274 | Analyzed | 未確認 | CWE-787 | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-48275 | Analyzed | 未確認 | CWE-426 | Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-48284 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. The vulnerable component is r |
| CVE-2026-48287 | Analyzed | 未確認 | CWE-426 | CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on c |
| CVE-2026-48290 | Analyzed | 未確認 | CWE-918 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attac |
| CVE-2026-48295 | Analyzed | 未確認 | CWE-522 | CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage th |
| CVE-2026-48296 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-48298 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-48302 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-48308 | Analyzed | 未確認 | CWE-20 | Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-48309 | Analyzed | 未確認 | CWE-787 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-48310 | Analyzed | 未確認 | CWE-22 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system rea |
| CVE-2026-48311 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48312 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-48316 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-48318 | Analyzed | 未確認 | CWE-22 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker |
| CVE-2026-48319 | Analyzed | 未確認 | CWE-22 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the conte |
| CVE-2026-48320 | Analyzed | 未確認 | CWE-79 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentiall |
| CVE-2026-48321 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized rea |
| CVE-2026-48322 | Analyzed | 未確認 | CWE-94 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-48324 | Analyzed | 未確認 | CWE-89 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the |
| CVE-2026-48325 | Analyzed | 未確認 | CWE-306 | ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio |
| CVE-2026-48327 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does |
| CVE-2026-48328 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to |
| CVE-2026-48329 | Analyzed | 未確認 | CWE-613 | ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerabil |
| CVE-2026-48332 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi |
| CVE-2026-48334 | Analyzed | 未確認 | CWE-20 | Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated |
| CVE-2026-48335 | Analyzed | 未確認 | CWE-787 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require |
| CVE-2026-48336 | Analyzed | 未確認 | CWE-787 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require |
| CVE-2026-48337 | Analyzed | 未確認 | CWE-787 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require |
| CVE-2026-48338 | Analyzed | 未確認 | CWE-22 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker |
| CVE-2026-48339 | Analyzed | 未確認 | CWE-122 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-48340 | Analyzed | 未確認 | CWE-822 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-48341 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48342 | Analyzed | 未確認 | CWE-190 | Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48343 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48344 | Analyzed | 未確認 | CWE-367 | Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-48345 | Analyzed | 未確認 | CWE-78 | Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in |
| CVE-2026-48346 | Analyzed | 未確認 | CWE-426 | Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires |
| CVE-2026-48347 | Analyzed | 未確認 | CWE-78 | Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in |
| CVE-2026-48348 | Analyzed | 未確認 | CWE-863 | Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyo |
| CVE-2026-48349 | Analyzed | 未確認 | CWE-863 | Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyo |
| CVE-2026-48350 | Analyzed | 未確認 | CWE-22 | Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-48351 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-48352 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-48353 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to acc |
| CVE-2026-48354 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-48355 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-48356 | Analyzed | 未確認 | CWE-434 | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, pot |
| CVE-2026-48357 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-48358 | Analyzed | 未確認 | CWE-116 | Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. An attacker |
| CVE-2026-48359 | Analyzed | 未確認 | CWE-611 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-48363 | Analyzed | 未確認 | CWE-427 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of th |
| CVE-2026-48364 | Analyzed | 未確認 | CWE-427 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of th |
| CVE-2026-48365 | Analyzed | 未確認 | CWE-787 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-48366 | Analyzed | 未確認 | CWE-787 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-48367 | Analyzed | 未確認 | CWE-787 | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-48368 | Analyzed | 未確認 | CWE-787 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-48369 | Analyzed | 未確認 | CWE-787 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-48370 | Analyzed | 未確認 | CWE-787 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-48371 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form f |
| CVE-2026-48372 | Analyzed | 未確認 | CWE-122, CWE-787 | Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-48373 | Analyzed | 未確認 | CWE-122 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-48374 | Analyzed | 未確認 | CWE-22 | Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker cou |
| CVE-2026-48388 | Modified | 未確認 | CWE-427 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. |
| CVE-2026-48389 | Analyzed | 未確認 | CWE-121 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user |
| CVE-2026-48390 | Analyzed | 未確認 | CWE-863 | Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read an |
| CVE-2026-48391 | Analyzed | 未確認 | CWE-426 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could explo |
| CVE-2026-48392 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48393 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48394 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-48395 | Analyzed | 未確認 | CWE-426 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulner |
| CVE-2026-48396 | Analyzed | 未確認 | CWE-863 | Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vuln |
| CVE-2026-48448 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of s |
| CVE-2026-48449 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation |
| CVE-2026-48487 | Analyzed | 未確認 | CWE-130 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protocol/incoming.py advanc |
| CVE-2026-48489 | Analyzed | 未確認 | CWE-863 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler h |
| CVE-2026-48492 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, the GET /api/v1/{object}/selectlist API endpoint is missing an authorization check. Any user who can log |
| CVE-2026-48499 | Deferred | 未確認 | CWE-200, CWE-285, CWE-668, CWE-732 | Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach re |
| CVE-2026-48504 | Awaiting Analysis | 未確認 | CWE-770 | OpenTelemetry Rust is the Rust OpenTelemetry implementation. In 0.32.0 and earlier, BaggagePropagator::extract_with_context in opentelemetry_sdk did not enforce W3C Baggage size li |
| CVE-2026-48530 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web |
| CVE-2026-48531 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web scr |
| CVE-2026-48532 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbi |
| CVE-2026-48533 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-48534 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script o |
| CVE-2026-48535 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary w |
| CVE-2026-48536 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary we |
| CVE-2026-48537 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary w |
| CVE-2026-48538 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary |
| CVE-2026-48539 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbi |
| CVE-2026-48561 | Modified | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-48564 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-48571 | Analyzed | 未確認 | CWE-416 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48572 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48580 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-48581 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48586 | Analyzed | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before |
| CVE-2026-48588 | Analyzed | 未確認 | CWE-524 | An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()` decorator cache responses that vary on cookies when the inc |
| CVE-2026-48614 | Deferred | 未確認 | CWE-94 | An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root an |
| CVE-2026-48736 | Analyzed | 未確認 | CWE-184, CWE-918 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.0 to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, NoPrivateNetworkHttpClient and I |
| CVE-2026-48747 | Analyzed | 未確認 | CWE-347, CWE-757 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.0.13, MailomatRequestParser::validateSignature() parsed X-MO |
| CVE-2026-48758 | Deferred | 未確認 | CWE-347 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when co |
| CVE-2026-48760 | Analyzed | 未確認 | CWE-1007, CWE-451 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlSanitizer::parse() rejected raw Bi |
| CVE-2026-48761 | Analyzed | 未確認 | CWE-1023, CWE-79 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupportedAt |
| CVE-2026-48784 | Analyzed | 未確認 | CWE-172, CWE-601 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate() used strtr |
| CVE-2026-48795 | Deferred | 未確認 | CWE-1321 | AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/bodyparser incompletely fixed CVE-2026-25754 because nested multipart field pa |
| CVE-2026-48799 | Deferred | 未確認 | CWE-345, CWE-639 | Postiz is an AI social media scheduling tool. Prior to 2.21.8, Postiz fails to verify Nowpayments IPN callback authenticity against the payment provider shared secret and reads the |
| CVE-2026-48801 | Analyzed | 未確認 | CWE-1333 | linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexity f |
| CVE-2026-48805 | Analyzed | 未確認 | CWE-693 | Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the current sandbox state to CoreExtension::checkArrow() |
| CVE-2026-48806 | Analyzed | 未確認 | CWE-693, CWE-863 | Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allowing PHP to invoke __toString() on a Stri |
| CVE-2026-48807 | Analyzed | 未確認 | CWE-693, CWE-863 | Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join and replace filters or operands evaluated |
| CVE-2026-48808 | Analyzed | 未確認 | CWE-693, CWE-863 | Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::ch |
| CVE-2026-48812 | Deferred | 未確認 | CWE-287 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.221, FreeScout's attachment download route skips token authentication for an |
| CVE-2026-48815 | Deferred | 未確認 | CWE-347 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify() is accepted by the publ |
| CVE-2026-48816 | Deferred | 未確認 | CWE-345 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries[].integrate |
| CVE-2026-48819 | Deferred | 未確認 | CWE-1321 | Hey API is an ecosystem for turning API specifications into production-ready code. Prior to 0.97.3, dist/clients/core/params.ts ships a runtime template copied into generated SDKs |
| CVE-2026-48824 | Analyzed | 未確認 | CWE-770 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent |
| CVE-2026-48828 | Analyzed | 未確認 | CWE-200 | The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffix |
| CVE-2026-48863 | Awaiting Analysis | 未確認 | CWE-121 | A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a |
| CVE-2026-48891 | Analyzed | 未確認 | CWE-200 | A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag |
| CVE-2026-48892 | Analyzed | 未確認 | CWE-200 | The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_ |
| CVE-2026-48910 | Analyzed | 未確認 | CWE-80 | A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute j |
| CVE-2026-48947 | Analyzed | 未確認 | CWE-284 | An improper access check allows privileged users to overwrite media files without editing permissions. |
| CVE-2026-48948 | Analyzed | 未確認 | CWE-284 | An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible. |
| CVE-2026-48949 | Analyzed | 未確認 | CWE-79 | Lack of validation leads to an XSS vulnerability in the MFA management views. |
| CVE-2026-48950 | Analyzed | 未確認 | CWE-79 | Lack of escaping leads to an XSS vulnerability in the file management view of com_templates. |
| CVE-2026-48951 | Analyzed | 未確認 | CWE-79 | Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components. |
| CVE-2026-48952 | Analyzed | 未確認 | CWE-79 | Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. |
| CVE-2026-48953 | Analyzed | 未確認 | CWE-79 | Lack of escaping leads to an XSS vulnerability in the generic image output layout. |
| CVE-2026-48954 | Undergoing Analysis | 未確認 | CWE-79 | Improper validation leads to a generic XSS vector in the language override feature. |
| CVE-2026-48955 | Analyzed | 未確認 | CWE-284 | An improper access check allows unauthorized users to access workflow stage and transition information. |
| CVE-2026-48956 | Analyzed | 未確認 | CWE-284 | An improper access check allows users to display a list of modules in the frontend. |
| CVE-2026-48957 | Analyzed | 未確認 | CWE-284 | An improper access check allows unauthorized users to access com_privacy datasets. |
| CVE-2026-48958 | Analyzed | 未確認 | CWE-284 | An improper access check allows unauthorized users to create custom fields via webservices endpoints. |
| CVE-2026-48978 | Deferred | 未確認 | CWE-319, CWE-918 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the sc |
| CVE-2026-49033 | Awaiting Analysis | 未確認 | CWE-121 | The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code. |
| CVE-2026-49035 | Deferred | 未確認 | CWE-122 | The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution (RCE) has been demonstrated when ASLR is disabled; memo |
| CVE-2026-49042 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade |
| CVE-2026-49086 | Analyzed | 未確認 | CWE-20, CWE-441 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer (DaprPubSubConsu |
| CVE-2026-49087 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a sp |
| CVE-2026-49088 | Analyzed | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) instrumentation |
| CVE-2026-49090 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially craf |
| CVE-2026-49091 | Analyzed | 未確認 | CWE-116 | Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input |
| CVE-2026-49092 | Analyzed | 未確認 | CWE-863 | Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs |
| CVE-2026-49097 | Analyzed | 未確認 | CWE-20, CWE-74 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel IRC component. The came |
| CVE-2026-49098 | Analyzed | 未確認 | CWE-20, CWE-74 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Kafka Component. The ca |
| CVE-2026-49099 | Analyzed | 未確認 | CWE-639, CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel S |
| CVE-2026-49119 | Analyzed | 未確認 | CWE-22 | Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root |
| CVE-2026-4912 | Deferred | 未確認 | CWE-918 | The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the `get_urls |
| CVE-2026-49145 | Deferred | 未確認 | CWE-426, CWE-73 | App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a proje |
| CVE-2026-49146 | Deferred | 未確認 | CWE-770 | App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack searches up the directory hierarchy from the current direc |
| CVE-2026-49147 | Deferred | 未確認 | CWE-150 | App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains te |
| CVE-2026-49158 | Analyzed | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommen |
| CVE-2026-49159 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. |
| CVE-2026-49162 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49164 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-49165 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. |
| CVE-2026-49166 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49167 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49168 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-49169 | Analyzed | 未確認 | CWE-416 | Use after free in DNS Server allows an authorized attacker to execute code over a network. |
| CVE-2026-49170 | Analyzed | 未確認 | CWE-1220, CWE-285 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49171 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49172 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-49173 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49174 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
| CVE-2026-49175 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49176 | Analyzed | 未確認 | CWE-269, CWE-59 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49177 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. |
| CVE-2026-49178 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
| CVE-2026-49180 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
| CVE-2026-49181 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-49183 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49184 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-49208 | Analyzed | 未確認 | CWE-20 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as DateTimeInterface and no explicit format is configured, Symfony\ |
| CVE-2026-49209 | Analyzed | 未確認 | CWE-770 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Controller\BatchActionController::__invoke() iterates over the client- |
| CVE-2026-49210 | Analyzed | 未確認 | CWE-79 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Util\ChildComponentPartialRenderer::createHtml() interpolates the clie |
| CVE-2026-49211 | Analyzed | 未確認 | CWE-200 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\EntitySearchUtil::addSearchClause() builds the LIKE expression |
| CVE-2026-49212 | Analyzed | 未確認 | CWE-345 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symfony\UX\LiveComponent\LiveComponentHydrator covered only sorted prop ke |
| CVE-2026-49213 | Deferred | 未確認 | CWE-918 | TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address |
| CVE-2026-49215 | Analyzed | 未確認 | CWE-352 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\EventListener\LiveComponentSubscriber::isLiveComponentRequest() gates |
| CVE-2026-49216 | Analyzed | 未確認 | CWE-79 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, the Stimulus controller in symfony/ux-autocomplete renders AJAX response items in _createAutoco |
| CVE-2026-49229 | Deferred | 未確認 | CWE-613 | Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity, while existing Actual |
| CVE-2026-49256 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to publicly readable categories as |
| CVE-2026-49258 | Deferred | 未確認 | CWE-639, CWE-862 | Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and below, the web UI (/ui/*) does not apply the per-operator CA scoping employed by the |
| CVE-2026-49274 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the pages field with roles that have the pages.access permission disabled allowed aut |
| CVE-2026-49276 | Deferred | 未確認 | CWE-83 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the writer field in any blueprint allowed a scripting link to be included as the targ |
| CVE-2026-49279 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket Han |
| CVE-2026-49284 | Analyzed | 未確認 | CWE-345 | SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. Prior to 2.4.7 and 2.5.2, SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected f |
| CVE-2026-49296 | Analyzed | 未確認 | CWE-639 | Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and t |
| CVE-2026-49297 | Analyzed | 未確認 | CWE-22 | Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a desti |
| CVE-2026-4932 | Analyzed | 未確認 | CWE-331 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware |
| CVE-2026-49326 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), |
| CVE-2026-49332 | Awaiting Analysis | 未確認 | CWE-436 | A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not strip underscore-variant keys |
| CVE-2026-49352 | Deferred | 未確認 | CWE-798 | 9Router is an AI router & token saver. From 0.2.21 until 0.4.44, 9Router used the hardcoded fallback JWT secret 9router-default-secret-change-me in src/app/api/auth/login/route.js, |
| CVE-2026-49353 | Deferred | 未確認 | CWE-290 | 9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate used Host and Origin headers in isLocalRequest() to protect /ap |
| CVE-2026-49365 | Analyzed | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteException |
| CVE-2026-4938 | Analyzed | 未確認 | CWE-863 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Ve |
| CVE-2026-49394 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to 16.19.0, authorization bypass was possible via the update_page endpoint in Workspace because public workspaces did not re |
| CVE-2026-4942 | Analyzed | 未確認 | CWE-757 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security (TLS) protocol to a version disabled in |
| CVE-2026-49445 | Analyzed | 未確認 | CWE-732 | Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instan |
| CVE-2026-49447 | Deferred | 未確認 | CWE-287 | Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. In 0.22.18, `GET /cosmos/api/constellation |
| CVE-2026-49458 | Analyzed | 未確認 | CWE-501, CWE-693, CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(node, { IN_PLACE: true }) accepted same-origin foreign-realm DO |
| CVE-2026-49459 | Analyzed | 未確認 | CWE-1321, CWE-693, CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(root, { IN_PLACE: true }) could preserve event-handler attribut |
| CVE-2026-49471 | Analyzed | 未確認 | CWE-306, CWE-352 | Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated F |
| CVE-2026-49476 | Analyzed | 未確認 | CWE-400, CWE-770 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large |
| CVE-2026-49477 | Analyzed | 未確認 | CWE-1333, CWE-400 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to cat |
| CVE-2026-49485 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.9 and 6.9.4.2, all implementations of FHIRPathEngine accept ar |
| CVE-2026-49487 | Analyzed | 未確認 | CWE-200 | In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred operator passed a se |
| CVE-2026-49488 | Modified | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1. |
| CVE-2026-49499 | Analyzed | 未確認 | CWE-1270 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote acc |
| CVE-2026-49501 | Analyzed | 未確認 | CWE-269 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. A high privileged attacker |
| CVE-2026-4967 | Deferred | 未確認 | In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. | |
| CVE-2026-49743 | Analyzed | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/writ |
| CVE-2026-49744 | Analyzed | 未確認 | CWE-823 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out |
| CVE-2026-49745 | Analyzed | 未確認 | CWE-823 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Sof |
| CVE-2026-49779 | Deferred | 未確認 | CWE-35 | Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5. |
| CVE-2026-4978 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects |
| CVE-2026-49783 | Analyzed | 未確認 | CWE-358 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-49784 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges local |
| CVE-2026-49787 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
| CVE-2026-49788 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. |
| CVE-2026-49789 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49790 | Analyzed | 未確認 | CWE-122, CWE-191 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-49791 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49792 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| CVE-2026-49793 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| CVE-2026-49794 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-49795 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49796 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
| CVE-2026-49797 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-49798 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-49799 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
| CVE-2026-49800 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49801 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
| CVE-2026-49802 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49803 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges l |
| CVE-2026-49804 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-49805 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49806 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49807 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. |
| CVE-2026-49808 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49813 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-49814 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-49815 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-49834 | Analyzed | 未確認 | CWE-347 | sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLog(N>1) or WithSignedCertificateTimestamps(N>1) count |
| CVE-2026-49835 | Analyzed | 未確認 | CWE-770 | Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP r |
| CVE-2026-49844 | Analyzed | 未確認 | CWE-116 | Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log |
| CVE-2026-49852 | Deferred | 未確認 | CWE-1391, CWE-287, CWE-326 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forg |
| CVE-2026-49853 | Deferred | 未確認 | CWE-200 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, le |
| CVE-2026-49854 | Deferred | 未確認 | CWE-126 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mask without validating |
| CVE-2026-49855 | Deferred | 未確認 | CWE-409 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an over |
| CVE-2026-49858 | Awaiting Analysis | 未確認 | CWE-524, CWE-639 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions from 2.6.0 prior to 4.1.29, 4.2.26, and 4.3.12, a missing isCacheKeySafe gate in the JS |
| CVE-2026-49866 | Deferred | 未確認 | CWE-770 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to 16.0.0, @libp2p/gossipsub defaultDecodeRpcLimits set maxIhaveMessageIDs and maxIwantMessageIDs to Infinit |
| CVE-2026-49867 | Deferred | 未確認 | CWE-79 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources let authenticated users submit TemplateManageRequest.staticRes |
| CVE-2026-49876 | Analyzed | 未確認 | CWE-918 | Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in A |
| CVE-2026-49944 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49945 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49946 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49969 | Deferred | 未確認 | CWE-918 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvali |
| CVE-2026-49970 | Deferred | 未確認 | CWE-22 | Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arbitrary locations by c |
| CVE-2026-49971 | Deferred | 未確認 | CWE-79 | Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanit |
| CVE-2026-49972 | Deferred | 未確認 | CWE-434 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP e |
| CVE-2026-49977 | Deferred | 未確認 | CWE-285 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie.purge() is called on any element with the purgeBtn class and does not check whet |
| CVE-2026-49978 | Analyzed | 未確認 | CWE-79 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element |
| CVE-2026-49981 | Analyzed | 未確認 | CWE-693, CWE-863 | Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can rema |
| CVE-2026-49987 | Analyzed | 未確認 | CWE-88 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitShallowClone passes the --remote-branch value directly to git f |
| CVE-2026-49988 | Analyzed | 未確認 | CWE-200 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attach_packed_output and read_repomix_output flow can register and read ar |
| CVE-2026-49997 | Deferred | 未確認 | CWE-285, CWE-863 | SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Document::purge_edges in surrealdb/core/src/doc/delete.rs automat |
| CVE-2026-49998 | Deferred | 未確認 | CWE-347 | Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse a key for one allowed issuer to verify a |
| CVE-2026-50007 | Deferred | 未確認 | CWE-862 | Actual is an open-source personal finance application. Prior to 26.7.0, a missing authorization issue allows a shared user with user_access on a budget file to perform owner-only f |
| CVE-2026-50012 | Analyzed | 未確認 | CWE-122, CWE-20 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vu |
| CVE-2026-50030 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL preview exposes DatasetDataApi.previewSql/previewSqlCheck through /de2api/datasetDat |
| CVE-2026-50032 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequest with an empty lis |
| CVE-2026-50039 | Deferred | 未確認 | CWE-121 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request. |
| CVE-2026-50043 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitra |
| CVE-2026-50044 | Deferred | 未確認 | CWE-326 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass |
| CVE-2026-50045 | Analyzed | 未確認 | CWE-406 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets |
| CVE-2026-50046 | Analyzed | 未確認 | CWE-416 | In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queries is tied to a struct's ('serviced_query') lifetime but als |
| CVE-2026-5005 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Twiser Informatics Technology Consulting, Trade and Education Inc. OKRs & Goal |
| CVE-2026-50103 | Deferred | 未確認 | CWE-228 | A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE fram |
| CVE-2026-50124 | Deferred | 未確認 | CWE-434 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/uploa |
| CVE-2026-50130 | Analyzed | 未確認 | CWE-282 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged |
| CVE-2026-50133 | Analyzed | 未確認 | CWE-79 | Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type (typically .html files under /cont |
| CVE-2026-50134 | Analyzed | 未確認 | CWE-918 | Hugo is a static site generator. From 0.91.0 until 0.162.0, resources.GetRemote enforces security.http.urls on the URL it is called with, but it did not re-validate intermediate UR |
| CVE-2026-50135 | Analyzed | 未確認 | CWE-59 | Hugo is a static site generator. From 0.123.0 to 0.161.1, a regression made RootMappingFs.statRoot use Stat (follows symlinks) instead of Lstat , so a direct resources.Get o |
| CVE-2026-50144 | Awaiting Analysis | 未確認 | CWE-129, CWE-20, CWE-787 | ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out- |
| CVE-2026-50147 | Analyzed | 未確認 | CWE-88 | Metabase is an open-source business intelligence and embedded analytics tool. From 1.57.0 until 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4, an attacker who can configure a Metabase |
| CVE-2026-50148 | Analyzed | 未確認 | CWE-73 | Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user wi |
| CVE-2026-50151 | Analyzed | 未確認 | CWE-918 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location h |
| CVE-2026-50160 | Analyzed | 未確認 | CWE-915 | Hoppscotch is an API development ecosystem. In self-hosted deployments of hoppscotch-backend from version 2026.4.1 and earlier, the unauthenticated POST /v1/onboarding/config endpo |
| CVE-2026-50162 | Deferred | 未確認 | CWE-73 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath() in content/file/file.go uses a lexical filepath.Rel check for workingDir and does not account |
| CVE-2026-50163 | Deferred | 未確認 | CWE-22, CWE-59 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but ret |
| CVE-2026-50179 | Deferred | 未確認 | CWE-1236 | Actual is a local-first personal finance tool. Prior to 26.6.0, exportToCSV and exportQueryToCSV in packages/loot-core/src/server/transactions/export/export-to-csv.ts pass user-con |
| CVE-2026-50180 | Deferred | 未確認 | CWE-22, CWE-89 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, `SQLChatAgent` in `langroid` ships a `_validate_query` defense-in-depth lay |
| CVE-2026-50181 | Deferred | 未確認 | CWE-22, CWE-23 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `ReadFileTool` and `WriteFileTool` appear to treat `curr_dir` as |
| CVE-2026-50182 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Versions prior to 29.0 contain an unauthenticated Reflected XSS vulnerability through AVideo YouTubeAPI Gallery Pagination. The $_GET[ |
| CVE-2026-50183 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.t |
| CVE-2026-50185 | Analyzed | 未確認 | CWE-758 | RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From |
| CVE-2026-50188 | Deferred | 未確認 | CWE-113, CWE-93 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins using the Kirby Http Remote class, including Remote::request(), Remote::get(), |
| CVE-2026-50195 | Analyzed | 未確認 | CWE-345, CWE-829 | containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the |
| CVE-2026-50197 | Deferred | 未確認 | CWE-444 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HT |
| CVE-2026-50238 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has concluded that this CVE is not required. The reported issue has been classified as a regular bug and will be addressed through the sta | |
| CVE-2026-50243 | Analyzed | 未確認 | CWE-348 | In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or |
| CVE-2026-50248 | Analyzed | 未確認 | CWE-345 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible |
| CVE-2026-50251 | Analyzed | 未確認 | CWE-184 | In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value greater than zero), glue records of 0.0.0.0/::0 can short-cir |
| CVE-2026-50252 | Analyzed | 未確認 | CWE-349 | In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When |
| CVE-2026-50271 | Awaiting Analysis | 未確認 | CWE-770 | Datadog dd-trace-py is the Datadog Python APM client. Prior to 4.8.2, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without e |
| CVE-2026-50272 | Awaiting Analysis | 未確認 | CWE-770 | dd-trace is the Datadog APM client for Node.js. Prior to 5.100.0, W3C baggage propagation in packages/dd-trace/src/baggage.js and packages/dd-trace/src/opentracing/propagation/text |
| CVE-2026-50273 | Awaiting Analysis | 未確認 | CWE-770 | Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming bagg |
| CVE-2026-50274 | Awaiting Analysis | 未確認 | CWE-770 | Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implem |
| CVE-2026-50279 | Deferred | 未確認 | CWE-285 | Craft CMS is a content management system (CMS). IN versions 5.0.0-RC1 and above prior to 5.9.21, theEntriesController::actionSaveEntry() performs entry-edit permission checks befor |
| CVE-2026-50280 | Deferred | 未確認 | CWE-284 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 and above prior to 5.9.21, the EntriesController::actionMoveToSection() endpoint gates the destination section |
| CVE-2026-50281 | Deferred | 未確認 | CWE-915 | Craft CMS is a content management system (CMS). Versions 5.7.0 and above, prior to 5.9.21 contain a mass-assignment flaw in the bulk-duplicate element action. An attacker who is on |
| CVE-2026-50282 | Deferred | 未確認 | CWE-862 | Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 and above, prior to 5.9.21 and versions 4.0.0-RC1 and above prior to 4.17.14 contain an authorization issue where |
| CVE-2026-50283 | Deferred | 未確認 | CWE-639, CWE-862 | Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionRepla |
| CVE-2026-50284 | Deferred | 未確認 | CWE-862 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the dele |
| CVE-2026-50289 | Analyzed | 未確認 | CWE-78 | systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces() on Linux is vulnerable to OS command injection through the Debian/Ubuntu |
| CVE-2026-50293 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50294 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-50295 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-50296 | Analyzed | 未確認 | CWE-416 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50297 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50298 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-50299 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-50300 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50301 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-50302 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-50303 | Analyzed | 未確認 | CWE-1240 | Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-50304 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50305 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50306 | Analyzed | 未確認 | CWE-190, CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50307 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50308 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50309 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-50310 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally. |
| CVE-2026-50311 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50312 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50313 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50314 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-50315 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50316 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50317 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally |
| CVE-2026-50318 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50321 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50322 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50323 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50324 | Analyzed | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50325 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50326 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50327 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
| CVE-2026-50328 | Analyzed | 未確認 | CWE-20, CWE-248 | Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-50329 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50330 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-50331 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50332 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50333 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50334 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. |
| CVE-2026-50335 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50336 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50337 | Analyzed | 未確認 | CWE-704 | Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50338 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50339 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-50340 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50341 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-50342 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50343 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50344 | Analyzed | 未確認 | CWE-285 | Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50345 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50346 | Analyzed | 未確認 | CWE-285 | Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50347 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. |
| CVE-2026-50348 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-50350 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-50351 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50352 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
| CVE-2026-50353 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50354 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50355 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50356 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges local |
| CVE-2026-50357 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| CVE-2026-50358 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50359 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50360 | Analyzed | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50361 | Analyzed | 未確認 | CWE-362, CWE-415 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50362 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
| CVE-2026-50363 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50364 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50365 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-50366 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-50367 | Analyzed | 未確認 | CWE-118, CWE-822 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50368 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50369 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50370 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-50371 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50372 | Analyzed | 未確認 | CWE-122, CWE-126 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50373 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50374 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
| CVE-2026-50375 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50376 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50377 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50378 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50379 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50380 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50381 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-50382 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. |
| CVE-2026-50383 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-50384 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50385 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50386 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50387 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50388 | Analyzed | 未確認 | CWE-125, CWE-191 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50389 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-50390 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50391 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50392 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50393 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50394 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
| CVE-2026-50396 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50397 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50398 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50399 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-5040 | Analyzed | 未確認 | CWE-916 | TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could |
| CVE-2026-50400 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50401 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-50402 | Analyzed | 未確認 | CWE-126, CWE-681 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50403 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50404 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50405 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50406 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50407 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50408 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-50409 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-50410 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50411 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50412 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50413 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50414 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50415 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50416 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-50417 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-50418 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-50419 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50420 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. |
| CVE-2026-50421 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50422 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50423 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50424 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50425 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50426 | Analyzed | 未確認 | CWE-23 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-50427 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50428 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-50429 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50430 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-50431 | Analyzed | 未確認 | CWE-200 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability |
| CVE-2026-50432 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
| CVE-2026-50433 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50434 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-50435 | Analyzed | 未確認 | CWE-126, CWE-190 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50436 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50437 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-50438 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50439 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50440 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50441 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50442 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-50444 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50445 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50447 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50448 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50449 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50450 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate p |
| CVE-2026-50451 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50452 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-50453 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-50454 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50455 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
| CVE-2026-50456 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-50457 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50458 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50459 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-50460 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-50461 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50462 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50463 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50465 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
| CVE-2026-50466 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50467 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-50468 | Analyzed | 未確認 | CWE-126 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-50469 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50470 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50471 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-50473 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-50474 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50475 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50476 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50477 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50478 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50479 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50480 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50482 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-50483 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
| CVE-2026-50484 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50485 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-50486 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50487 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-50488 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50489 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50490 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50491 | Analyzed | 未確認 | CWE-125, CWE-843 | Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50492 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-50493 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50494 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-50495 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
| CVE-2026-50496 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50497 | Analyzed | 未確認 | CWE-193, CWE-908 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50498 | Analyzed | 未確認 | CWE-125, CWE-191 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-50499 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50500 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50501 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
| CVE-2026-50502 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. |
| CVE-2026-50503 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50504 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50505 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. |
| CVE-2026-50506 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50509 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-5051 | Deferred | 未確認 | CWE-22 | HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was |
| CVE-2026-50510 | Analyzed | 未確認 | CWE-641 | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. |
| CVE-2026-50517 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. |
| CVE-2026-50518 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50520 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. |
| CVE-2026-50521 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
| CVE-2026-50522 | Analyzed | 掲載 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50524 | Analyzed | 未確認 | CWE-1287 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50525 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50526 | Analyzed | 未確認 | CWE-345, CWE-59 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. |
| CVE-2026-50527 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50528 | Analyzed | 未確認 | CWE-302, CWE-636, CWE-863 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-50529 | Deferred | 未確認 | CWE-863 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validati |
| CVE-2026-50530 | Deferred | 未確認 | CWE-639 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a share mode chart data interface only validates that sceneId matches the resourceId in the link |
| CVE-2026-50558 | Deferred | 未確認 | CWE-22 | Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download() implementation in penelope.py used tar.extractall( |
| CVE-2026-5056 | Awaiting Analysis | 未確認 | CWE-121 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of |
| CVE-2026-50562 | Deferred | 未確認 | CWE-266, CWE-494, CWE-829 | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/wo |
| CVE-2026-5057 | Awaiting Analysis | 未確認 | CWE-306 | ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected insta |
| CVE-2026-5060 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, |
| CVE-2026-50622 | Analyzed | 未確認 | CWE-862 | Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assig |
| CVE-2026-50641 | Deferred | 未確認 | CWE-256 | Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their |
| CVE-2026-50642 | Deferred | 未確認 | CWE-116 | diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control |
| CVE-2026-50644 | Deferred | 未確認 | CWE-89 | SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parameters_all rights can inject SQL commands into the audit configuration form |
| CVE-2026-50646 | Analyzed | 未確認 | CWE-502, CWE-693 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. |
| CVE-2026-50647 | Analyzed | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50648 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50649 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. |
| CVE-2026-50650 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-50651 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50652 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50653 | Analyzed | 未確認 | CWE-400, CWE-835 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50655 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
| CVE-2026-50657 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. |
| CVE-2026-50658 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50659 | Analyzed | 未確認 | CWE-116 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-50661 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-50663 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50665 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-50666 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50667 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50668 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-50669 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-50670 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-20 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50672 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50673 | Analyzed | 未確認 | CWE-367, CWE-476 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50674 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50675 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-50676 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50677 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50678 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-50679 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50680 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50681 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
| CVE-2026-50682 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. |
| CVE-2026-50683 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-50684 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofi |
| CVE-2026-50685 | Analyzed | 未確認 | CWE-415 | Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-50686 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50687 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50688 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50689 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-5069 | Deferred | 未確認 | CWE-863 | The Fluent Forms plugin for WordPress is vulnerable to incorrect authorization via the 'subscription_id' parameter in versions up to, and including, 6.2.1. This is due to insuffici |
| CVE-2026-50690 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
| CVE-2026-50692 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50694 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-50695 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50696 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50697 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50721 | Analyzed | 未確認 | CWE-347, CWE-617 | Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when the SIG payload of an IKEv1 packet was en |
| CVE-2026-50722 | Analyzed | 未確認 | CWE-347, CWE-617 | Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded u |
| CVE-2026-50735 | Analyzed | 未確認 | CWE-125 | pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds re |
| CVE-2026-50736 | Analyzed | 未確認 | CWE-89 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privi |
| CVE-2026-50737 | Analyzed | 未確認 | CWE-250 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber. Because the apply wo |
| CVE-2026-50738 | Analyzed | 未確認 | CWE-416 | A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during nor |
| CVE-2026-50743 | Deferred | 未確認 | CWE-352 | A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones could be triggered via crafted GET or POS |
| CVE-2026-50746 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host de |
| CVE-2026-50747 | Analyzed | 未確認 | CWE-89 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate pr |
| CVE-2026-50748 | Analyzed | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje |
| CVE-2026-50755 | Deferred | 未確認 | CWE-290 | An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value |
| CVE-2026-50756 | Deferred | 未確認 | CWE-1390 | An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component |
| CVE-2026-50757 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server |
| CVE-2026-50758 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter |
| CVE-2026-50759 | Deferred | 未確認 | CWE-306 | An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/{instance_id} endpoints with no authentication. |
| CVE-2026-50782 | Deferred | 未確認 | CWE-611 | Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserlist.aspx/GetXmlHttp endpoint. An unauthenticated r |
| CVE-2026-50810 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 allows attackers to ca |
| CVE-2026-50811 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Desig |
| CVE-2026-50812 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed c |
| CVE-2026-50813 | Awaiting Analysis | 未確認 | CWE-126 | An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path |
| CVE-2026-50986 | Deferred | 未確認 | CWE-352 | PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm |
| CVE-2026-51025 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in fuint Member Marketing System <=v1.0 allows a remote attacker to execute arbitrary code via the ClientMessageController.java file |
| CVE-2026-51026 | Deferred | 未確認 | CWE-23 | Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request. |
| CVE-2026-51027 | Deferred | 未確認 | CWE-200 | An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component. |
| CVE-2026-51031 | Deferred | 未確認 | CWE-918 | FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This allows a remote attacker to obtain sensitive information |
| CVE-2026-51077 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component |
| CVE-2026-51078 | Deferred | 未確認 | CWE-200 | An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component |
| CVE-2026-51080 | Analyzed | 未確認 | CWE-611 | libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability. |
| CVE-2026-51081 | Deferred | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web |
| CVE-2026-51082 | Deferred | 未確認 | CWE-362 | A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1 |
| CVE-2026-51083 | Deferred | 未確認 | CWE-284 | Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords vi |
| CVE-2026-51105 | Deferred | 未確認 | CWE-121 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler. |
| CVE-2026-51119 | Deferred | 未確認 | CWE-269 | An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser components |
| CVE-2026-5114 | Deferred | 未確認 | CWE-22 | The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL |
| CVE-2026-5120 | Deferred | 未確認 | CWE-362 | A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user. |
| CVE-2026-51229 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51230 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51231 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51232 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51233 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51234 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51235 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51236 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51237 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51238 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51239 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51240 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51241 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51242 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51243 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51244 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51245 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51246 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51247 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51248 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51249 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51250 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51251 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51252 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51253 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51254 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51255 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51256 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51257 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51258 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51259 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51260 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51261 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51262 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51263 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51264 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51265 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51266 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51267 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51268 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51269 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51270 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51271 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51272 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51273 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51274 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51275 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51276 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51277 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51278 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51279 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51280 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51281 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51282 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51283 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51284 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51285 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51286 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51287 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51288 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51289 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51290 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51291 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51292 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51293 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51294 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51295 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51296 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51297 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51298 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51299 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51300 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51301 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51302 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51303 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-51304 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-5135 | Analyzed | 未確認 | CWE-639 | A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a dif |
| CVE-2026-5136 | Analyzed | 未確認 | CWE-266 | A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user wi |
| CVE-2026-5137 | Deferred | 未確認 | CWE-98 | The RTMKit (rometheme-for-elementor) plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.7 This is due to insufficient path validation |
| CVE-2026-5138 | Analyzed | 未確認 | CWE-639 | A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxono |
| CVE-2026-51380 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi |
| CVE-2026-51385 | Deferred | 未確認 | CWE-94 | An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validate_url, safe_fetch, _build_opener, _fetch_html |
| CVE-2026-51386 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-46409. Reason: This record is a reservation duplicate of CVE-2026-46409. Notes: All CVE users should reference CVE | |
| CVE-2026-5142 | Analyzed | 未確認 | CWE-639 | A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other o |
| CVE-2026-51535 | Deferred | 未確認 | CWE-400 | In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processing loop. |
| CVE-2026-51536 | Analyzed | 未確認 | CWE-190 | In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifi |
| CVE-2026-51537 | Analyzed | 未確認 | CWE-125 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attac |
| CVE-2026-51538 | Analyzed | 未確認 | CWE-284 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical enc |
| CVE-2026-51539 | Deferred | 未確認 | CWE-400 | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management during network read |
| CVE-2026-51540 | Analyzed | 未確認 | CWE-191 | OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages |
| CVE-2026-51541 | Analyzed | 未確認 | CWE-125 | OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a vali |
| CVE-2026-51564 | Deferred | 未確認 | CWE-601 | An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. |
| CVE-2026-51565 | Deferred | 未確認 | CWE-79 | Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action para |
| CVE-2026-51597 | Deferred | 未確認 | CWE-294 | MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate a |
| CVE-2026-51598 | Deferred | 未確認 | CWE-20 | An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a |
| CVE-2026-51599 | Deferred | 未確認 | CWE-20 | An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individ |
| CVE-2026-51600 | Deferred | 未確認 | CWE-400, CWE-703 | Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods). When a request carrying a Conte |
| CVE-2026-51601 | Deferred | 未確認 | CWE-121 | Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based buffer overflow in the RTSP service. The device fails to validate the length of the clock= value in the Range header field |
| CVE-2026-51602 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a |
| CVE-2026-51603 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a |
| CVE-2026-51604 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a |
| CVE-2026-51605 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.991) allows an unauthenticated remote attacker to cause a denial of service via |
| CVE-2026-51606 | Deferred | 未確認 | CWE-20 | An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP connection with a RST packet wh |
| CVE-2026-51785 | Deferred | 未確認 | CWE-94 | An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request |
| CVE-2026-51807 | Deferred | 未確認 | CWE-121 | Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) caused by missing bounds validation before |
| CVE-2026-51808 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_b |
| CVE-2026-51821 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint |
| CVE-2026-51833 | Deferred | 未確認 | CWE-918 | Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can enumerate internal services (ports) or expose the original I |
| CVE-2026-51923 | Deferred | 未確認 | CWE-639 | An Insecure Direct Object Reference (IDOR) vulnerability exists in docuForm GmbH Client v.11.11c allowing a remote attacker to execute arbitrary code via the user settings componen |
| CVE-2026-51924 | Deferred | 未確認 | CWE-639 | An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload and report.php component |
| CVE-2026-51925 | Deferred | 未確認 | CWE-639 | A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c that allows a remote attacker to execute arbitrary code via the dfm-menu_report.php component. At |
| CVE-2026-51926 | Deferred | 未確認 | CWE-203 | An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability was identified in the authentica |
| CVE-2026-51937 | Deferred | 未確認 | CWE-306 | An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java |
| CVE-2026-51946 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in GoAdminGroup GoAdmin (last release v1.2.26) allows a remote attacker to execute arbitrary code and obtain sensitive information via the the __sort_ty |
| CVE-2026-51947 | Awaiting Analysis | 未確認 | CWE-502 | An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to ex |
| CVE-2026-51953 | Deferred | 未確認 | CWE-613 | An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components |
| CVE-2026-51992 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse's PostgreSQL integration intentionally allows users with valid PostgreSQL cre | |
| CVE-2026-52100 | Deferred | 未確認 | CWE-352 | Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function |
| CVE-2026-52101 | Deferred | 未確認 | CWE-200 | An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go |
| CVE-2026-52134 | Deferred | 未確認 | CWE-284 | An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame. |
| CVE-2026-52186 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component |
| CVE-2026-52187 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_483ba0 component |
| CVE-2026-52188 | Deferred | 未確認 | CWE-119 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead//sub_497498 component |
| CVE-2026-52189 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_487330 component |
| CVE-2026-5219 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pa |
| CVE-2026-52190 | Deferred | 未確認 | CWE-121 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_448384 component |
| CVE-2026-52191 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_444C8C component |
| CVE-2026-52192 | Deferred | 未確認 | CWE-400 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_445C5C component |
| CVE-2026-52199 | Deferred | 未確認 | CWE-77, CWE-94 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component |
| CVE-2026-5220 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This i |
| CVE-2026-52200 | Deferred | 未確認 | CWE-94 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk |
| CVE-2026-52203 | Deferred | 未確認 | CWE-200 | An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter. |
| CVE-2026-52232 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in |
| CVE-2026-52348 | Deferred | 未確認 | CWE-89 | cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java. |
| CVE-2026-52349 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file manag |
| CVE-2026-52371 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP |
| CVE-2026-52439 | Deferred | 未確認 | CWE-917 | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism |
| CVE-2026-52469 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file |
| CVE-2026-52470 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file |
| CVE-2026-52472 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file |
| CVE-2026-52474 | Deferred | 未確認 | CWE-200 | An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file. |
| CVE-2026-52475 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file |
| CVE-2026-52476 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file |
| CVE-2026-52533 | Deferred | 未確認 | CWE-269 | An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file |
| CVE-2026-52539 | Deferred | 未確認 | CWE-798 | Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret. When the OST_TOKEN_SECRET environment variable is not set, the application falls back to the default value which is |
| CVE-2026-52584 | Awaiting Analysis | 未確認 | CWE-121 | Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function |
| CVE-2026-52656 | Deferred | 未確認 | CWE-94 | An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute arbitrary code via a crafted FEX file |
| CVE-2026-5268 | Awaiting Analysis | 未確認 | CWE-288 | An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated at |
| CVE-2026-52680 | Analyzed | 未確認 | CWE-22, CWE-73 | Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the RES |
| CVE-2026-52684 | Awaiting Analysis | 未確認 | If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the | |
| CVE-2026-52686 | Awaiting Analysis | 未確認 | CWE-347 | The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME |
| CVE-2026-52688 | Awaiting Analysis | 未確認 | CWE-295, CWE-345 | RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation |
| CVE-2026-5269 | Awaiting Analysis | 未確認 | CWE-1393 | In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. Some of these accounts have |
| CVE-2026-5270 | Awaiting Analysis | 未確認 | CWE-287 | An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. The issue is |
| CVE-2026-52746 | Modified | 未確認 | CWE-1333 | JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO |
| CVE-2026-52747 | Analyzed | 未確認 | CWE-180 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-data request body parser in libmo |
| CVE-2026-52761 | Analyzed | 未確認 | CWE-467 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/ |
| CVE-2026-52791 | Awaiting Analysis | 未確認 | CWE-266 | fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_ |
| CVE-2026-52830 | Deferred | 未確認 | CWE-22, CWE-287 | fast-mcp-telegram is a Telegram MCP Server. Prior to 0.19.1, fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The verifier r |
| CVE-2026-52837 | Deferred | 未確認 | CWE-200, CWE-639 | Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule view at `/index.php/booking/reschedule/{appointment_hash}` ( |
| CVE-2026-52838 | Deferred | 未確認 | CWE-79 | Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled" message through the booking settings pa |
| CVE-2026-52839 | Deferred | 未確認 | CWE-639, CWE-862 | Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter provider-scoped appointments in the `appointments/search` response, proving that |
| CVE-2026-52840 | Deferred | 未確認 | CWE-918 | Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::connect_to_server` at `application/controllers/Caldav.php:60` hands the request's `ca |
| CVE-2026-52841 | Deferred | 未確認 | CWE-639 | Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth` at `application/controllers/Google.php:278` stores its URL-supplied `provider_ |
| CVE-2026-52842 | Deferred | 未確認 | CWE-346 | Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpanda searched for @ across the entire URL string instead of only the authority component when |
| CVE-2026-52843 | Deferred | 未確認 | CWE-346 | Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch() and XMLHttpRequest unconditionally attached session cookies to every HTTP reques |
| CVE-2026-52855 | Deferred | 未確認 | CWE-200, CWE-522 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates a |
| CVE-2026-52856 | Deferred | 未確認 | CWE-129, CWE-248, CWE-617, CWE-755 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handsha |
| CVE-2026-52857 | Deferred | 未確認 | CWE-400 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in pa |
| CVE-2026-52863 | Analyzed | 未確認 | CWE-416 | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that cou |
| CVE-2026-52865 | Analyzed | 未確認 | CWE-476 | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resou |
| CVE-2026-52869 | Analyzed | 未確認 | CWE-639 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server. |
| CVE-2026-52870 | Analyzed | 未確認 | CWE-862 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental. |
| CVE-2026-52887 | Deferred | 未確認 | CWE-89 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.0.61, NocoBase @nocobase/plugin-notification-in-app-mess |
| CVE-2026-52888 | Deferred | 未確認 | CWE-184, CWE-200 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. In 2.0.59 and earlier, NocoBase @nocobase/plugin-collection-sql use |
| CVE-2026-52890 | Deferred | 未確認 | CWE-22, CWE-400 | Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method with |
| CVE-2026-52891 | Deferred | 未確認 | CWE-78, CWE-88 | Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied filenames into paths later passed to child_process.exec() for M |
| CVE-2026-52892 | Deferred | 未確認 | CWE-862 | Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan REST handlers in server/models/customFields.js use read-level Authentication.checkBoardAccess instead of write-l |
| CVE-2026-52893 | Deferred | 未確認 | CWE-287 | Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan Accounts.onCreateUser hook in server/models/users.js merges OIDC logins into existing accounts when the OIDC |
| CVE-2026-53326 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot hardirq context When booting a debug PREEMPT_RT kernel on a |
| CVE-2026-53327 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on On RT enabled kernels, fill_pool() ends up calling rtlock_lo | |
| CVE-2026-53328 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() A WARN fires when systemd's user mana | |
| CVE-2026-53329 | Modified | 未確認 | CWE-190, CWE-674 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the al |
| CVE-2026-53330 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval array i |
| CVE-2026-53331 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the SSR/PDR down notification the tx_lock is t | |
| CVE-2026-53332 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with | |
| CVE-2026-53333 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard mincore_swap() also fields migration/hwpoison en | |
| CVE-2026-53334 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/{reclaim,lru_sort}: handle ctx allocati |
| CVE-2026-53335 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx object for its kdamond |
| CVE-2026-53336 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type | |
| CVE-2026-53337 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bond_do_ioctl(), slave_dev is obtained via __ |
| CVE-2026-53338 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() of_reserved_mem_loo |
| CVE-2026-53339 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all modern platforms Qualcomm CCI controller pr |
| CVE-2026-53340 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2c_imx_runtime_suspend(), the clock is d | |
| CVE-2026-53341 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns witho |
| CVE-2026-53342 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: call pagetable dtor when freeing hot-removed page tables Since 5e8eb9aeeda3 ("arm64: mm: always cal | |
| CVE-2026-53343 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commit 44e9a3bb76e5 ("ARM: 9430/1: entry: Do a d | |
| CVE-2026-53344 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init Regmap initialization triggers regcach |
| CVE-2026-53345 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When marking a page dirty, complain a |
| CVE-2026-53346 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES Due to a rustc bug [1] the -Cforce-unwind-t |
| CVE-2026-53347 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio-gpu d |
| CVE-2026-53348 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions sdca_dev_unregister_functions() iter |
| CVE-2026-53349 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: destroy stale expectfn expectations on unregister NAT helpers such as nf_nat_h323 sto | |
| CVE-2026-53350 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls In wm_adsp_control_remove() check that the |
| CVE-2026-53351 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI Fixes a warning while dumping core: [54983.546369][ | |
| CVE-2026-53352 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() When a multi-threaded process receives a s |
| CVE-2026-53353 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hsr: Remove WARN_ONCE() in hsr_addr_is_self(). syzbot reported the warning [0] in hsr_addr_is_self(), whose as | |
| CVE-2026-53354 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CPUs developed by Arm suffer from errata w |
| CVE-2026-53355 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: rds: clear i_sends on setup unwind The RDS IB connection teardown path is written so it can run during pa |
| CVE-2026-53356 | Modified | 未確認 | CWE-1164 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the s |
| CVE-2026-53357 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() bt_accept_dequeue() unlinks a not-yet-ac |
| CVE-2026-53358 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() l2cap_chan_close() removes the channel |
| CVE-2026-53359 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow |
| CVE-2026-53360 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require |
| CVE-2026-53361 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reported that unix_gc() could run with gc_in_pr |
| CVE-2026-53362 | Analyzed | 掲載 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branc |
| CVE-2026-53363 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() iptfs_consume_frags() transfers paged fragme | |
| CVE-2026-53364 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_terminate() allocates iso_list_data |
| CVE-2026-53365 | Modified | 未確認 | CWE-401, CWE-404 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skb |
| CVE-2026-53366 | Modified | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch |
| CVE-2026-53367 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector com | |
| CVE-2026-53368 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage f2fs_need_dentry_mark() reads nat_entry | |
| CVE-2026-53369 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skips CRC verification when descCRCLength |
| CVE-2026-53370 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the us | |
| CVE-2026-53371 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s node_desc[64] in struct ib_device is not guaranteed to be NU | |
| CVE-2026-53372 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on | |
| CVE-2026-53373 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() The mmap_prepare hook functionality in | |
| CVE-2026-53374 | Modified | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping |
| CVE-2026-53375 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching coul |
| CVE-2026-53376 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add upper bound check for num_of_nodes in kfd_i | |
| CVE-2026-53377 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wouldn't trig | |
| CVE-2026-53378 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling |
| CVE-2026-53379 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_controls() The control handler wasn't freed i |
| CVE-2026-53380 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers (`rzv2h_ivc::buffers.queue`) is protec |
| CVE-2026-53381 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if the super block has alr |
| CVE-2026-53382 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in |
| CVE-2026-53383 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcut for any |
| CVE-2026-53384 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port |
| CVE-2026-53385 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A KASAN null-ptr-deref was observe |
| CVE-2026-53386 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_M |
| CVE-2026-53387 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF |
| CVE-2026-53388 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but |
| CVE-2026-53389 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(), the del_async path skips the c |
| CVE-2026-53390 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The permission-check ACE walk in smb_check_perm_dacl() |
| CVE-2026-53391 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs4_decode_mp_ds_addr() decodes the r_netid a |
| CVE-2026-53392 | Modified | 未確認 | CWE-20, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-version ar |
| CVE-2026-53393 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsd_vfs_write() and nfsd_commit() both call filemap_c | |
| CVE-2026-53394 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When find_or_alloc_open_stateowner() enc |
| CVE-2026-53395 | Analyzed | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() steals create->cr_dpacl/cr_pacl into the loca |
| CVE-2026-53396 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_file() has two bugs in its ACL ha |
| CVE-2026-53397 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs( |
| CVE-2026-53398 | Modified | 未確認 | CWE-665 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp af |
| CVE-2026-53399 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_stateids vi |
| CVE-2026-53400 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_adapter() w |
| CVE-2026-53401 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETUP_PLANE ioc |
| CVE-2026-53402 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() When fbcon_do_set_font() fails (e.g., d |
| CVE-2026-53403 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var info->var, a framebuffer's current |
| CVE-2026-53405 | Analyzed | 未確認 | CWE-653 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST |
| CVE-2026-53409 | Analyzed | 未確認 | CWE-20 | Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access. |
| CVE-2026-53410 | Analyzed | 未確認 | CWE-367 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to |
| CVE-2026-53411 | Analyzed | 未確認 | CWE-20 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to |
| CVE-2026-53412 | Analyzed | 未確認 | CWE-20 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account |
| CVE-2026-53421 | Analyzed | 未確認 | CWE-653 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector s |
| CVE-2026-53422 | Modified | 未確認 | CWE-204 | Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the |
| CVE-2026-53431 | Deferred | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previously valid JWT client assertion to authenticate as the issuing |
| CVE-2026-53444 | Deferred | 未確認 | CWE-269, CWE-862 | Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan OIDC-related Meteor methods in packages/wekan-oidc/oidc_server.js, server/models/org.js, and server/models/team. |
| CVE-2026-53445 | Deferred | 未確認 | CWE-862 | Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan copyBoard Meteor DDP method in server/publications/boards.js copies a board by caller-supplied board ID with |
| CVE-2026-53446 | Deferred | 未確認 | CWE-918 | Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/notifi |
| CVE-2026-53447 | Deferred | 未確認 | CWE-639, CWE-862 | Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export thro |
| CVE-2026-53448 | Analyzed | 未確認 | CWE-89 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprin |
| CVE-2026-53449 | Analyzed | 未確認 | CWE-73 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, the psd print sessions dump CLI command in coturn takes a filename argument and directly passe |
| CVE-2026-53450 | Analyzed | 未確認 | CWE-918 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, coturn rejects loopback peers by default unless allow-loopback-peers is enabled, but the defau |
| CVE-2026-53466 | Analyzed | 未確認 | CWE-190, CWE-681 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can |
| CVE-2026-53467 | Analyzed | 未確認 | CWE-200, CWE-908 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap in |
| CVE-2026-53478 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-53479 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-5348 | Deferred | 未確認 | CWE-639 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.8. |
| CVE-2026-53480 | Analyzed | 未確認 | CWE-22 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-53481 | Analyzed | 未確認 | CWE-22 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-53482 | Analyzed | 未確認 | CWE-190 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-53483 | Analyzed | 未確認 | CWE-287 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-53486 | Awaiting Analysis | 未確認 | CWE-22, CWE-59, CWE-732 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an arc |
| CVE-2026-53488 | Analyzed | 未確認 | CWE-20 | containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instructio |
| CVE-2026-53489 | Analyzed | 未確認 | CWE-61 | containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without v |
| CVE-2026-53492 | Analyzed | 未確認 | CWE-20, CWE-863 | containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations f |
| CVE-2026-53500 | Deferred | 未確認 | CWE-918 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWED_SOURCES configuration passes plain strings to re.match() without escaping dots, so a hos |
| CVE-2026-53501 | Deferred | 未確認 | CWE-347 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace() when removing the si |
| CVE-2026-53502 | Deferred | 未確認 | CWE-22 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing trave |
| CVE-2026-53503 | Deferred | 未確認 | CWE-20, CWE-369 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(<matrix>, <columns>, <should_normalize>) filter passes the user-contro |
| CVE-2026-53504 | Deferred | 未確認 | CWE-400 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated nume |
| CVE-2026-53505 | Deferred | 未確認 | CWE-400 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion(<value>) filter does not enforce an upper bound on <value> and runs in |
| CVE-2026-53510 | Deferred | 未確認 | CWE-94 | Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, all |
| CVE-2026-53511 | Deferred | 未確認 | CWE-94 | calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add book |
| CVE-2026-53512 | Analyzed | 未確認 | CWE-287, CWE-306, CWE-345, CWE-863 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token endpoints whose refresh_token |
| CVE-2026-53513 | Analyzed | 未確認 | CWE-20, CWE-345, CWE-441, CWE-918 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/update-provider endpoints |
| CVE-2026-53514 | Analyzed | 未確認 | CWE-287, CWE-345, CWE-441, CWE-862 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invited mailbox |
| CVE-2026-53515 | Analyzed | 未確認 | CWE-269, CWE-285, CWE-863 | Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/sso plugin's POST /sso/register endpoint lets any organization |
| CVE-2026-53516 | Analyzed | 未確認 | CWE-287, CWE-345 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit acco |
| CVE-2026-53517 | Analyzed | 未確認 | CWE-362, CWE-367 | Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refres |
| CVE-2026-53518 | Analyzed | 未確認 | CWE-362, CWE-367 | Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizatio |
| CVE-2026-53535 | Deferred | 未確認 | CWE-22, CWE-59 | Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the serv |
| CVE-2026-53536 | Deferred | 未確認 | CWE-345, CWE-639 | Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing se |
| CVE-2026-53551 | Deferred | 未確認 | CWE-20 | free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOrSuci field in UE auth |
| CVE-2026-5356 | Deferred | 未確認 | CWE-862 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 5.4.0. Thi |
| CVE-2026-53565 | Awaiting Analysis | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects Secure Access Client |
| CVE-2026-53566 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20. |
| CVE-2026-53573 | Awaiting Analysis | 未確認 | CWE-601 | GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthentication |
| CVE-2026-53591 | Deferred | 未確認 | CWE-287 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthenticated attacker can inject messages into any existing suppo |
| CVE-2026-53592 | Deferred | 未確認 | CWE-1321 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in the `getQueryParam` function `/public/js/main.js` and was addr |
| CVE-2026-53593 | Deferred | 未確認 | CWE-434 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads (`Helper::$restric |
| CVE-2026-53594 | Deferred | 未確認 | CWE-22 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's `Manage -> Logs -> App Logs` feature uses the bundled `rap2hpoutre/laravel-log-viewer |
| CVE-2026-53595 | Deferred | 未確認 | CWE-178, CWE-287, CWE-640 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint `POST /user-setup/{hash}/{invite_sent_at}` (`OpenCo |
| CVE-2026-53596 | Deferred | 未確認 | CWE-400, CWE-770 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the FreeScout helpdesk application does not enforce rate limiting on th |
| CVE-2026-53597 | Deferred | 未確認 | CWE-94 | Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/packages/core/src/cor |
| CVE-2026-53598 | Deferred | 未確認 | CWE-200, CWE-22 | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that |
| CVE-2026-53599 | Deferred | 未確認 | CWE-434 | REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated |
| CVE-2026-53624 | Analyzed | 未確認 | CWE-319 | Fiber is an Express inspired web framework written in Go. Prior to 3.4.0, the helmet middleware in middleware/helmet/helmet.go never sets the Strict-Transport-Security response hea |
| CVE-2026-53633 | Awaiting Analysis | 未確認 | CWE-749, CWE-862 | Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp() API that forwarded raw Chrome DevTools Protocol |
| CVE-2026-53640 | Deferred | 未確認 | CWE-200, CWE-862 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, low-privileged staff accounts may read sensitive data via admin API endpoints that |
| CVE-2026-53641 | Deferred | 未確認 | CWE-79, CWE-838 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting (XSS) vulnerability in the client-facing em |
| CVE-2026-53642 | Deferred | 未確認 | CWE-863 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in clie |
| CVE-2026-53643 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API e |
| CVE-2026-53644 | Deferred | 未確認 | CWE-639 | FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for |
| CVE-2026-53645 | Deferred | 未確認 | CWE-269 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itsel |
| CVE-2026-53646 | Deferred | 未確認 | CWE-640 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a pr |
| CVE-2026-53647 | Deferred | 未確認 | CWE-200, CWE-306, CWE-862 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `serviceapikey/get_info` API endpoint is accessible without auth |
| CVE-2026-53648 | Deferred | 未確認 | CWE-668, CWE-73 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. |
| CVE-2026-53653 | Deferred | 未確認 | CWE-770 | Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust server memory and CPU by requesting image derivatives with over |
| CVE-2026-53657 | Deferred | 未確認 | CWE-276, CWE-668 | Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM c |
| CVE-2026-53666 | Analyzed | 未確認 | CWE-470 | React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of e |
| CVE-2026-53667 | Analyzed | 未確認 | CWE-79 | React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue |
| CVE-2026-53668 | Analyzed | 未確認 | CWE-601, CWE-79 | React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could craf |
| CVE-2026-53669 | Analyzed | 未確認 | CWE-601 | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up t |
| CVE-2026-53712 | Awaiting Analysis | 未確認 | CWE-636, CWE-757 | SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to 3. |
| CVE-2026-53727 | Analyzed | 未確認 | CWE-918 | css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parser#read_remote_file in lib/css_parser/parser.rb, and therefore load_uri! and the @import-following branch of |
| CVE-2026-53729 | Deferred | 未確認 | CWE-639 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, any authenticated user can download (/exportCenter/download/{id}), delete (/exportCenter/delete), |
| CVE-2026-53730 | Deferred | 未確認 | CWE-862 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation a |
| CVE-2026-53751 | Deferred | 未確認 | CWE-94 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the H2 database JDBC URL validation logic can be bypassed with special Unicode characters whose c |
| CVE-2026-53763 | Analyzed | 未確認 | CWE-190 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-53780 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53877 | Analyzed | 未確認 | CWE-805 | An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buffer when constructed from a bytes object, |
| CVE-2026-53878 | Analyzed | 未確認 | CWE-144 | An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in domain names (unless used via a form field, since `Cha |
| CVE-2026-53902 | Analyzed | 未確認 | CWE-266, CWE-863 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can modify their group memb |
| CVE-2026-53903 | Analyzed | 未確認 | CWE-639 | MCO is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does |
| CVE-2026-53904 | Undergoing Analysis | 未確認 | CWE-307, CWE-640 | MCO is vulnerable to Account Denial of Service due to improper implementation of password reset functionality. Each password reset request invalidates previously set password as we |
| CVE-2026-53905 | Analyzed | 未確認 | CWE-863 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged user c |
| CVE-2026-53906 | Analyzed | 未確認 | CWE-209, CWE-22 | MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to data export and upload. Improper validation of the filename parameter allows writi |
| CVE-2026-53907 | Analyzed | 未確認 | CWE-79 | MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with the ability to change the application logo can upload a craft |
| CVE-2026-53908 | Analyzed | 未確認 | CWE-204 | MCO is vulnerable to User Enumeration through authentication-related functionalities. The application returns distinguishable responses for valid and invalid users during username |
| CVE-2026-53909 | Analyzed | 未確認 | CWE-434 | MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks, which can be bypassed. An authorized, low-privilege |
| CVE-2026-53910 | Awaiting Analysis | 未確認 | CWE-190 | diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping l |
| CVE-2026-53913 | Analyzed | 未確認 | CWE-287, CWE-306, CWE-636 | Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely ('Failing Open') vulnerability in Apache Camel Keycloak Component. The KeycloakSecurity |
| CVE-2026-53935 | Deferred | 未確認 | CWE-863 | Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedire |
| CVE-2026-53951 | Deferred | 未確認 | CWE-22, CWE-94 | Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the `trust` setting's prefix match (`copier/_settings.py`) compares the template |
| CVE-2026-53961 | Analyzed | 未確認 | CWE-345 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages we |
| CVE-2026-53962 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG sanitization in upload and user avatar handling could lead to |
| CVE-2026-53963 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a malicious second factor name on an attacker-controlled account was not escap |
| CVE-2026-53987 | Deferred | 未確認 | CWE-79 | The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and renders it into the Kanban badge markup via PluginTagTag::preKanbanContent() without outp |
| CVE-2026-53994 | Analyzed | 未確認 | CWE-122 | ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the attacker-supplied 32-bit big-endian SFTP |
| CVE-2026-54000 | Deferred | 未確認 | CWE-122 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, on Windows, a local unprivileged attacker can cause a heap buffer o |
| CVE-2026-54001 | Deferred | 未確認 | CWE-122 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, on Windows, a local unprivileged attacker can cause a heap buffer o |
| CVE-2026-54002 | Deferred | 未確認 | CWE-79, CWE-87 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins that use the writer or list fields or call Dom::sanitize(), Sane::sanitize(), S |
| CVE-2026-54003 | Deferred | 未確認 | CWE-454 | Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible servers behind a reve |
| CVE-2026-54004 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites with content.fileRedirects enabled could redirect unauthenticated clean file URL requests f |
| CVE-2026-54005 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites where a role has the pages.access permission disabled allowed authenticated users who know |
| CVE-2026-54051 | Deferred | 未確認 | CWE-78 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`), |
| CVE-2026-54052 | Analyzed | 未確認 | CWE-639, CWE-862 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through |
| CVE-2026-54058 | Analyzed | 未確認 | CWE-125 | Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header |
| CVE-2026-54059 | Analyzed | 未確認 | CWE-789 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombyt |
| CVE-2026-54060 | Analyzed | 未確認 | CWE-789 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) withou |
| CVE-2026-54061 | Deferred | 未確認 | CWE-306 | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port `:9080` with |
| CVE-2026-54063 | Analyzed | 未確認 | CWE-770 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet() function in github.com/xuri/excelize/v2 uses an attacker-c |
| CVE-2026-54074 | Deferred | 未確認 | CWE-94 | Tina is a headless content management system. @tinacms/cli versions prior to 2.4.3 contain a Remote Code Execution vulnerability in the Forestry-to-Tina migration command. The inte |
| CVE-2026-54078 | Deferred | 未確認 | CWE-611 | veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulne |
| CVE-2026-54079 | Deferred | 未確認 | CWE-611 | veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External |
| CVE-2026-54080 | Deferred | 未確認 | CWE-1325 | veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/p |
| CVE-2026-54081 | Deferred | 未確認 | CWE-1325 | veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/p |
| CVE-2026-54082 | Deferred | 未確認 | CWE-611 | veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerabili |
| CVE-2026-54107 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54108 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-54109 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| CVE-2026-54111 | Analyzed | 未確認 | CWE-125, CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54112 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54114 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54115 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54116 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-54117 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-54118 | Modified | 未確認 | CWE-502 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-54119 | Analyzed | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network. |
| CVE-2026-54120 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. |
| CVE-2026-54121 | Analyzed | 未確認 | CWE-285 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-54122 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
| CVE-2026-54124 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. |
| CVE-2026-54125 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54126 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-54127 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-54128 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. |
| CVE-2026-54129 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54131 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-54132 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-54149 | Deferred | 未確認 | CWE-78 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/applica |
| CVE-2026-54159 | Deferred | 未確認 | CWE-74 | PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the ps_facetedsearch module rebuilds selected search filters from the request |
| CVE-2026-54163 | Deferred | 未確認 | CWE-113, CWE-79 | secure_headers manages application of security headers with many safe defaults. Prior to 7.3.0, secure_headers builds the Content-Security-Policy value by stitching directives with |
| CVE-2026-54164 | Deferred | 未確認 | CWE-843 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions prior to 4.1.30, 4.2.26 and 4.3.12, the serializer's AbstractItemNormalizer does not va |
| CVE-2026-54171 | Analyzed | 未確認 | CWE-201 | Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did n |
| CVE-2026-54234 | Analyzed | 未確認 | CWE-1284, CWE-20 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, a frontend-legal multi-request speculative decoding workload can cause the re |
| CVE-2026-54242 | Deferred | 未確認 | CWE-367, CWE-918 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, the Glide image proxy's URL validation in src/Imaging/RemoteUrlValidator.php and |
| CVE-2026-54243 | Deferred | 未確認 | CWE-1236 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, form submission values in src/Forms/Exporters/CsvExporter.php were not neutraliz |
| CVE-2026-54244 | Deferred | 未確認 | CWE-863 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.0 and 6.20.3, the Live Preview endpoint for existing entries and terms in src/Http/Controllers/ |
| CVE-2026-54249 | Analyzed | 未確認 | CWE-918 | Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message hist |
| CVE-2026-54259 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly lis |
| CVE-2026-54260 | Analyzed | 未確認 | CWE-400 | Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, an authenticated admin user can trigger expensive rendition proces |
| CVE-2026-54261 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, due to a missing permission check on the image preview endpoint, a |
| CVE-2026-54262 | Analyzed | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, a low-level user with the "Can submit translation" permission can |
| CVE-2026-54263 | Analyzed | 未確認 | CWE-79 | Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting (XSS) vulnerability exists on the d |
| CVE-2026-54272 | Awaiting Analysis | 未確認 | CWE-20, CWE-918 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4- |
| CVE-2026-54291 | Analyzed | 未確認 | CWE-636, CWE-757 | pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with chan |
| CVE-2026-54329 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass-assigns request parameters to the Accessory model while company_id is mass a |
| CVE-2026-54332 | Analyzed | 未確認 | CWE-770 | gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit |
| CVE-2026-54335 | Deferred | 未確認 | CWE-1321 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) utility exported by @fe |
| CVE-2026-54340 | Analyzed | 未確認 | CWE-400, CWE-770 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 9265bdd, there is an HTTP/2 state amplification issue that combines HPACK decompression amplific |
| CVE-2026-54342 | Deferred | 未確認 | CWE-295 | In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend (ePA Aktensystem, Konnektor, IDP, TSS) can present a self-signed TLS certif |
| CVE-2026-54344 | Analyzed | 未確認 | CWE-78 | ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.event.comment.body dire |
| CVE-2026-54345 | Analyzed | 未確認 | CWE-191, CWE-770 | gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from |
| CVE-2026-54363 | Deferred | 未確認 | CWE-321 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNum |
| CVE-2026-54364 | Deferred | 未確認 | CWE-116 | CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab |
| CVE-2026-54365 | Deferred | 未確認 | CWE-306 | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user account |
| CVE-2026-54366 | Deferred | 未確認 | CWE-611 | CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious U |
| CVE-2026-54367 | Deferred | 未確認 | CWE-306 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exp |
| CVE-2026-54368 | Deferred | 未確認 | CWE-89 | CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements |
| CVE-2026-54399 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to |
| CVE-2026-54400 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on |
| CVE-2026-54401 | Analyzed | 未確認 | CWE-918 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances. |
| CVE-2026-54402 | Analyzed | 未確認 | CWE-20, CWE-77 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the hos |
| CVE-2026-54403 | Analyzed | 未確認 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS device |
| CVE-2026-54404 | Analyzed | 未確認 | CWE-89 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges withi |
| CVE-2026-54405 | Analyzed | 未確認 | CWE-20 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack |
| CVE-2026-54406 | Analyzed | 未確認 | CWE-22 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalat |
| CVE-2026-54407 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Pro |
| CVE-2026-54408 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming. |
| CVE-2026-54409 | Analyzed | 未確認 | CWE-665 | A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authen |
| CVE-2026-54422 | Awaiting Analysis | 未確認 | CWE-522 | In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it. |
| CVE-2026-54423 | Deferred | 未確認 | CWE-424 | In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI |
| CVE-2026-54424 | Awaiting Analysis | 未確認 | CWE-648 | An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The |
| CVE-2026-54428 | Analyzed | 未確認 | CWE-400, CWE-770 | Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker |
| CVE-2026-54429 | Deferred | 未確認 | CWE-770 | A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust a |
| CVE-2026-54430 | Deferred | 未確認 | CWE-918 | liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() function. The AWS ALB verifier reads both signer and kid from the unverified JWT header |
| CVE-2026-54431 | Deferred | 未確認 | CWE-358 | In liboauth2 the Demonstrating Proof-of-Possession (DPoP) verifier accepts a proof whose JSON Web Key (jwk) header contains private key material. RFC 9449 section 4.3 step 7 requir |
| CVE-2026-54432 | Awaiting Analysis | 未確認 | CWE-79 | Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The issue occurs because the attachment MIME type is not properly escaped on the at |
| CVE-2026-54433 | Analyzed | 未確認 | CWE-79 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email message. The attacker-controlled JavaScript exe |
| CVE-2026-54443 | Deferred | 未確認 | CWE-80, CWE-84 | Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before render |
| CVE-2026-54458 | Deferred | 未確認 | CWE-79 | WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site Scripting vulnerability in the YPTSocket plugin. Any unauthenticated remote att |
| CVE-2026-54463 | Analyzed | 未確認 | CWE-770 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allow |
| CVE-2026-54464 | Deferred | 未確認 | CWE-770 | ### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can be made to accept messages that are larger than the configur |
| CVE-2026-54465 | Analyzed | 未確認 | CWE-770 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebS |
| CVE-2026-54466 | Analyzed | 未確認 | CWE-130 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allo |
| CVE-2026-54468 | Analyzed | 未確認 | CWE-22 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this v |
| CVE-2026-54469 | Analyzed | 未確認 | CWE-502 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potenti |
| CVE-2026-54470 | Analyzed | 未確認 | CWE-611 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote |
| CVE-2026-54477 | Deferred | 未確認 | CWE-644 | The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks. |
| CVE-2026-54478 | Analyzed | 未確認 | CWE-290 | In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is |
| CVE-2026-54483 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-54490 | Deferred | 未確認 | CWE-770 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can |
| CVE-2026-54496 | Deferred | 未確認 | CWE-345 | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primitives 0.28.0, and zcashd 6.20.0, the variable-base scalar mul |
| CVE-2026-54497 | Analyzed | 未確認 | CWE-362, CWE-488, CWE-668 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base instances retain rend |
| CVE-2026-54498 | Analyzed | 未確認 | CWE-79 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base#around_render can ret |
| CVE-2026-54499 | Analyzed | 未確認 | CWE-502, CWE-676 | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.mode |
| CVE-2026-54500 | Deferred | 未確認 | CWE-125, CWE-908 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj.load in :object mode reads uninitialized stack memory (and, for l |
| CVE-2026-54502 | Deferred | 未確認 | CWE-121 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large |
| CVE-2026-54522 | Analyzed | 未確認 | CWE-416 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_last, rmem_e |
| CVE-2026-54526 | Analyzed | 未確認 | CWE-284 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is |
| CVE-2026-54527 | Analyzed | 未確認 | CWE-79 | JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering |
| CVE-2026-54528 | Analyzed | 未確認 | CWE-178 | JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() in GitHandler.prepare() in jupyterlab_git/handlers.py to enforce exclud |
| CVE-2026-54538 | Analyzed | 未確認 | CWE-835 | xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protoco |
| CVE-2026-54540 | Deferred | 未確認 | CWE-78 | Pheditor is a single-file editor and file manager written in PHP. Prior to version 2.0.5, there is an authenticated terminal command whitelist bypass. The terminal feature checks w |
| CVE-2026-54545 | Deferred | 未確認 | CWE-22 | wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted module |
| CVE-2026-54560 | Deferred | 未確認 | CWE-863 | Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens are issued without the OAuth client_id claim, so the JWT ve |
| CVE-2026-54562 | Deferred | 未確認 | CWE-918 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download an |
| CVE-2026-54563 | Deferred | 未確認 | CWE-863 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, a Cloudreve WebDAV account rooted at a configured folder can send paths such as /dav/%2e%2e/outside. |
| CVE-2026-54568 | Deferred | 未確認 | CWE-639, CWE-862 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE coul |
| CVE-2026-54572 | Analyzed | 未確認 | CWE-59 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclon |
| CVE-2026-54574 | Deferred | 未確認 | CWE-61 | proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in proot |
| CVE-2026-5459 | Deferred | 未確認 | CWE-639 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in al |
| CVE-2026-54590 | Deferred | 未確認 | CWE-22, CWE-639 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains a |
| CVE-2026-54591 | Deferred | 未確認 | CWE-22 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malici |
| CVE-2026-54592 | Deferred | 未確認 | CWE-125, CWE-787 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj::Doc#each_child, when invoked recursively over a deeply nested JS |
| CVE-2026-54593 | Deferred | 未確認 | CWE-1259, CWE-1270 | Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-si |
| CVE-2026-54601 | Deferred | 未確認 | CWE-915 | FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/cre |
| CVE-2026-54602 | Deferred | 未確認 | CWE-639 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller but loads LLM request and response traces only by |
| CVE-2026-54603 | Awaiting Analysis | 未確認 | CWE-200, CWE-601 | OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned t |
| CVE-2026-54605 | Awaiting Analysis | 未確認 | CWE-200, CWE-346, CWE-918 | OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token_request parses the raw Location header of a |
| CVE-2026-54607 | Deferred | 未確認 | CWE-918 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerPars |
| CVE-2026-54609 | Deferred | 未確認 | CWE-400, CWE-406, CWE-770 | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the h |
| CVE-2026-54619 | Awaiting Analysis | 未確認 | CWE-416 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered |
| CVE-2026-54620 | Awaiting Analysis | 未確認 | CWE-416 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during |
| CVE-2026-54621 | Deferred | 未確認 | CWE-1336, CWE-94 | datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/Unio |
| CVE-2026-54635 | Deferred | 未確認 | CWE-287 | pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the |
| CVE-2026-54638 | Deferred | 未確認 | CWE-770, CWE-789 | gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauthe |
| CVE-2026-54650 | Deferred | 未確認 | CWE-22 | openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server in internal/server/public_proxy.go forwarded r.URL.Path instead of preserving the o |
| CVE-2026-54652 | Deferred | 未確認 | CWE-269, CWE-532, CWE-598, CWE-863 | Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer role to download Frigat |
| CVE-2026-54653 | Analyzed | 未確認 | CWE-1336, CWE-94 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Fr |
| CVE-2026-54654 | Deferred | 未確認 | CWE-1336, CWE-94 | datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in |
| CVE-2026-54655 | Deferred | 未確認 | CWE-94 | datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/parser/jsonsche |
| CVE-2026-54656 | Analyzed | 未確認 | CWE-94 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Fr |
| CVE-2026-54658 | Deferred | 未確認 | CWE-89 | Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue() in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes duri |
| CVE-2026-54659 | Deferred | 未確認 | CWE-200, CWE-22 | Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as <l |
| CVE-2026-54660 | Deferred | 未確認 | CWE-200, CWE-201, CWE-522, CWE-918 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --aut |
| CVE-2026-54661 | Deferred | 未確認 | CWE-1336, CWE-74, CWE-94 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates serv |
| CVE-2026-54662 | Deferred | 未確認 | CWE-1336, CWE-74, CWE-94 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers[0].url into ap |
| CVE-2026-54663 | Deferred | 未確認 | CWE-20, CWE-441, CWE-918 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves exte |
| CVE-2026-54664 | Deferred | 未確認 | CWE-1336, CWE-74, CWE-94 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.sch |
| CVE-2026-54666 | Deferred | 未確認 | CWE-1336, CWE-74, CWE-94 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-routes/schema-routes.ts passes OpenAPI path keys through |
| CVE-2026-54680 | Deferred | 未確認 | CWE-74, CWE-77 | Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/mode |
| CVE-2026-54684 | Deferred | 未確認 | CWE-22 | jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlled archive entry contents outside the intended XAPK plugin te |
| CVE-2026-54685 | Deferred | 未確認 | CWE-208 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.3.2-beta, the `/api/auth/login` authentication endpoint does not execute in constant time. Wh |
| CVE-2026-54690 | Analyzed | 未確認 | CWE-918 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Fr |
| CVE-2026-54691 | Deferred | 未確認 | CWE-918 | datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --url targets and |
| CVE-2026-54693 | Deferred | 未確認 | CWE-863 | ZITADEL is an open source identity management platform. From 2.43.0 through 2.71.19, from 3.0.0 until 3.4.11, and from 4.0.0 until 4.15.1, the email and phone self-management API p |
| CVE-2026-54695 | Analyzed | 未確認 | CWE-862 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0, the pipecat development runner registers a /ws WebSock |
| CVE-2026-54698 | Analyzed | 未確認 | CWE-863 | Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a table computed field (returning SETOF some |
| CVE-2026-54704 | Analyzed | 未確認 | CWE-532 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation ma |
| CVE-2026-54705 | Deferred | 未確認 | CWE-116 | MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text{} and \mbox{} commands in Box.toMarkup at src/cor |
| CVE-2026-54706 | Deferred | 未確認 | CWE-59 | OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Des |
| CVE-2026-54707 | Deferred | 未確認 | CWE-863 | OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Des |
| CVE-2026-54709 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-54637. Reason: This candidate is a duplicate of CVE-2026-54637. Notes: All CVE users should ref | |
| CVE-2026-54712 | Analyzed | 未確認 | CWE-400 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.27.0, the RMI context propagation payl |
| CVE-2026-54714 | Deferred | 未確認 | CWE-79 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, @logto/core reflected the SAML RelayState, SAMLResponse, and actionUrl into a Logto-orig |
| CVE-2026-54715 | Deferred | 未確認 | CWE-122, CWE-787 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched |
| CVE-2026-54719 | Deferred | 未確認 | CWE-862, CWE-863 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.1, the httpserver/updown.go bulkDownload handler for ?bulk&file= ZIP downloads did no |
| CVE-2026-54720 | Deferred | 未確認 | CWE-79 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS f |
| CVE-2026-54722 | Deferred | 未確認 | CWE-76 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter w |
| CVE-2026-54725 | Deferred | 未確認 | CWE-918 | vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accepts t |
| CVE-2026-54727 | Deferred | 未確認 | CWE-668 | proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed containe |
| CVE-2026-54728 | Deferred | 未確認 | CWE-20, CWE-74 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWe |
| CVE-2026-54729 | Deferred | 未確認 | CWE-918 | DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.5, is_url_safe can treat localhost as safe when DNS resolver 1.1.1 |
| CVE-2026-54733 | Awaiting Analysis | 未確認 | CWE-347 | The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Of |
| CVE-2026-54735 | Analyzed | 未確認 | CWE-918 | Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user- |
| CVE-2026-54736 | Deferred | 未確認 | CWE-208, CWE-347 | Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the attacker-supplied HMAC tag against the freshly computed HMA |
| CVE-2026-54737 | Deferred | 未確認 | CWE-1321 | @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied objec |
| CVE-2026-54756 | Deferred | 未確認 | CWE-1321 | Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. In versions prior to 4.12.18, Jodit.configure(options) — and the internal Conf |
| CVE-2026-54760 | Deferred | 未確認 | CWE-22, CWE-89 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the `SQLChatAgent` SQL-injection mitigation, with default `allow_dangerous_ |
| CVE-2026-54763 | Analyzed | 未確認 | CWE-178, CWE-290, CWE-345 | Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares strip canonical-cased spoof |
| CVE-2026-54764 | Analyzed | 未確認 | CWE-345 | Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured with trustForwardHeader: false, d |
| CVE-2026-54765 | Analyzed | 未確認 | CWE-284, CWE-863 | Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve two accepted HTTPRoutes that targ |
| CVE-2026-54768 | Awaiting Analysis | 未確認 | CWE-204 | WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish |
| CVE-2026-54769 | Deferred | 未確認 | CWE-94 | Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Executio |
| CVE-2026-54771 | Deferred | 未確認 | CWE-75 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat interface to untrusted users may all |
| CVE-2026-54772 | Deferred | 未確認 | CWE-400, CWE-835 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, an unauthenticated remote attacker that can reach a NetTcpBi |
| CVE-2026-54773 | Deferred | 未確認 | CWE-347 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security signature verification performs a docume |
| CVE-2026-54774 | Deferred | 未確認 | CWE-345, CWE-347 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, SamlSerializer skips final SignatureValue verification when |
| CVE-2026-54775 | Deferred | 未確認 | CWE-248, CWE-754, CWE-755 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processin |
| CVE-2026-54776 | Deferred | 未確認 | CWE-306 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service hosted on Unix Domain Sockets with PosixId |
| CVE-2026-54777 | Deferred | 未確認 | CWE-367, CWE-665 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-e |
| CVE-2026-54778 | Deferred | 未確認 | CWE-362, CWE-825 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF UnixDomainSocket POSIX peer identity resolution uses |
| CVE-2026-54779 | Deferred | 未確認 | CWE-294, CWE-613 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because |
| CVE-2026-54780 | Deferred | 未確認 | CWE-327, CWE-757 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, the CoreWCF WS-Security 1.0 receive pipeline validates ds:Si |
| CVE-2026-54781 | Deferred | 未確認 | CWE-287, CWE-345 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token validation does not enforce SubjectConfir |
| CVE-2026-54782 | Deferred | 未確認 | CWE-290, CWE-347 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML 1.1 and SAML 2.0 token validation does not corr |
| CVE-2026-54783 | Deferred | 未確認 | CWE-294, CWE-345, CWE-347 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security endorsing and supporting signature verif |
| CVE-2026-54784 | Deferred | 未確認 | CWE-311, CWE-523 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof |
| CVE-2026-54785 | Deferred | 未確認 | CWE-200, CWE-22 | gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any f |
| CVE-2026-54786 | Analyzed | 未確認 | CWE-400, CWE-772 | Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0. |
| CVE-2026-54787 | Awaiting Analysis | 未確認 | CWE-324 | sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringK |
| CVE-2026-54798 | Awaiting Analysis | 未確認 | CWE-489 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application inclu |
| CVE-2026-54799 | Awaiting Analysis | 未確認 | CWE-489 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application conta |
| CVE-2026-54800 | Awaiting Analysis | 未確認 | CWE-1188 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships |
| CVE-2026-54801 | Awaiting Analysis | 未確認 | CWE-620 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application conta |
| CVE-2026-5487 | Deferred | 未確認 | CWE-22 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveL |
| CVE-2026-54885 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound HTTP reques |
| CVE-2026-54886 | Modified | 未確認 | CWE-400, CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP channel permanently un |
| CVE-2026-54887 | Modified | 未確認 | CWE-1394 | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verific |
| CVE-2026-5489 | Deferred | 未確認 | CWE-22 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveL |
| CVE-2026-54890 | Analyzed | 未確認 | CWE-1284, CWE-191, CWE-789 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. T |
| CVE-2026-54891 | Modified | 未確認 | CWE-924 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned att |
| CVE-2026-54893 | Deferred | 未確認 | CWE-116 | URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address into the |
| CVE-2026-54896 | Deferred | 未確認 | CWE-122 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in object mode, Oj.dump is vulnerable to a heap buffer overflow |
| CVE-2026-54897 | Deferred | 未確認 | CWE-416 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2, Oj::Doc iterators (each_value, each_child, each_leaf) were vulnerable to a heap |
| CVE-2026-54898 | Deferred | 未確認 | CWE-416 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2,Oj::Parser#parse is vulnerable to a heap use-after-free when a SAJ/SA |
| CVE-2026-54899 | Deferred | 未確認 | CWE-416 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, disabling symbol_keys on a reused Oj::Parser instance triggers a heap us |
| CVE-2026-5490 | Deferred | 未確認 | CWE-89 | DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication |
| CVE-2026-54900 | Deferred | 未確認 | CWE-190, CWE-787 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in usual mode with create_id enabled, Oj::Parser#parse is vulne |
| CVE-2026-54901 | Deferred | 未確認 | CWE-416 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Parser in usual mode does not mark array_class and hash_class re |
| CVE-2026-54902 | Deferred | 未確認 | CWE-416 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerable to Use-After-Free when in SAJ mode. The Oj::Parser does no |
| CVE-2026-54903 | Deferred | 未確認 | CWE-190 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.load is vulnerable to heap corruption when parsing a JSON string |
| CVE-2026-54908 | Awaiting Analysis | 未確認 | CWE-125, CWE-248 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PS |
| CVE-2026-54909 | Awaiting Analysis | 未確認 | CWE-20 | pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-r |
| CVE-2026-5491 | Deferred | 未確認 | CWE-22 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveL |
| CVE-2026-54910 | Deferred | 未確認 | CWE-22, CWE-23 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-contr |
| CVE-2026-54919 | Analyzed | 未確認 | CWE-295 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from |
| CVE-2026-5492 | Deferred | 未確認 | CWE-22 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveL |
| CVE-2026-54982 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-54983 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-54986 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54987 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54988 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-54989 | Analyzed | 未確認 | CWE-416 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54990 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-54991 | Analyzed | 未確認 | CWE-125, CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54992 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. |
| CVE-2026-54993 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
| CVE-2026-54995 | Analyzed | 未確認 | CWE-416 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-54996 | Analyzed | 未確認 | CWE-125, CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-54997 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
| CVE-2026-54998 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-54999 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent netwo |
| CVE-2026-55000 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-55001 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55002 | Modified | 未確認 | CWE-73 | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-55003 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-55004 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55005 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
| CVE-2026-55006 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55008 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-55009 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55010 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-55011 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally. |
| CVE-2026-55012 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. |
| CVE-2026-55014 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55016 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55017 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55018 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55019 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55020 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55021 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55022 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55023 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55024 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55025 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55026 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55027 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55028 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55029 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55030 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55031 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55032 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55033 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55034 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55035 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55036 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55037 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55038 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55039 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55040 | Analyzed | 掲載 | CWE-1390 | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-55041 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55042 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55043 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
| CVE-2026-55044 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55045 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55046 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55047 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55048 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55049 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55050 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55051 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-55052 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-55053 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55054 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-55055 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55056 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55057 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55058 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55075 | Analyzed | 未確認 | CWE-287, CWE-289 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaws in Coder's OIDC login chained |
| CVE-2026-55076 | Analyzed | 未確認 | CWE-287, CWE-704 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_ve |
| CVE-2026-55077 | Analyzed | 未確認 | CWE-285 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` |
| CVE-2026-55078 | Analyzed | 未確認 | CWE-409, CWE-770 | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /a |
| CVE-2026-55079 | Analyzed | 未確認 | CWE-789 | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `NewData |
| CVE-2026-55081 | Deferred | 未確認 | CWE-79 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the `scope` quer |
| CVE-2026-55082 | Deferred | 未確認 | CWE-89 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL Vie |
| CVE-2026-55084 | Deferred | 未確認 | CWE-89 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. A SQL injection vulnerability was identified in the SqlView API endpoi |
| CVE-2026-55100 | Awaiting Analysis | 未確認 | CWE-23, CWE-74 | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, gro |
| CVE-2026-55110 | Undergoing Analysis | 未確認 | CWE-942 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in |
| CVE-2026-55111 | Analyzed | 未確認 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight. |
| CVE-2026-55112 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Pro |
| CVE-2026-55113 | Analyzed | 未確認 | CWE-918 | A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) a |
| CVE-2026-55114 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges wit |
| CVE-2026-55115 | Analyzed | 未確認 | CWE-918 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host d |
| CVE-2026-55116 | Undergoing Analysis | 未確認 | CWE-284 | A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi |
| CVE-2026-55117 | Analyzed | 未確認 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device. |
| CVE-2026-55118 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application t |
| CVE-2026-55119 | Analyzed | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within |
| CVE-2026-55120 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
| CVE-2026-55121 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55122 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55123 | Analyzed | 未確認 | CWE-122, CWE-681 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
| CVE-2026-55124 | Analyzed | 未確認 | CWE-1287, CWE-20 | Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55125 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55126 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55127 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55128 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55129 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55130 | Analyzed | 未確認 | CWE-122, CWE-787 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55131 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55132 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55133 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. |
| CVE-2026-55134 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55135 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-55136 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55137 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55138 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55139 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55140 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55141 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55142 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55144 | Analyzed | 未確認 | CWE-325 | Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. |
| CVE-2026-55145 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. |
| CVE-2026-55153 | Awaiting Analysis | 未確認 | CWE-470, CWE-502 | mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c3p0 connection pool. Prior to version 0.6.0, its JNDI ObjectFactory implementati |
| CVE-2026-55170 | Analyzed | 未確認 | CWE-178 | OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive us |
| CVE-2026-55173 | Deferred | 未確認 | CWE-78 | WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026-33482 was incomplete and still does not |
| CVE-2026-55175 | Analyzed | 未確認 | CWE-502 | Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bak |
| CVE-2026-55187 | Deferred | 未確認 | CWE-918 | Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in inter |
| CVE-2026-55195 | Deferred | 未確認 | CWE-409 | py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress() extracted arc |
| CVE-2026-55206 | Deferred | 未確認 | CWE-407 | py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo._read() in archiveinfo.py used a |
| CVE-2026-55207 | Deferred | 未確認 | CWE-640 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenticated attacker who knows a valid admin username can take over any Pimc |
| CVE-2026-55208 | Deferred | 未確認 | CWE-89 | Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an authenticated user can extract the admin password hash and other database |
| CVE-2026-55212 | Deferred | 未確認 | CWE-285 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class/de |
| CVE-2026-55213 | Awaiting Analysis | 未確認 | CWE-789 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit edd7a120bfc4af11ac0cbebce2a43cc1f93f9af1, when h2o processes a QPACK instruction sent from the p |
| CVE-2026-55219 | Deferred | 未確認 | CWE-362 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show |
| CVE-2026-55229 | Deferred | 未確認 | CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice |
| CVE-2026-5523 | Deferred | 未確認 | CWE-639 | The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the update_user() function accepting a use |
| CVE-2026-55233 | Analyzed | 未確認 | CWE-787 | OpenResty is a high performance web platform. From 1.29.2.1 to before 1.29.2.5, an out-of-bounds write vulnerability exists in the upstream PROXY protocol v2 implementation. When O |
| CVE-2026-55234 | Deferred | 未確認 | CWE-284, CWE-639 | Wekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in server/permissions/cards.js, server/permissions/lists.js, and server/permissions/swiml |
| CVE-2026-55238 | Analyzed | 未確認 | CWE-126 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation ph |
| CVE-2026-5524 | Deferred | 未確認 | CWE-434 | The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insuffi |
| CVE-2026-55242 | Deferred | 未確認 | CWE-1336, CWE-863 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated user with a standard operational role can trigger server-side t |
| CVE-2026-55254 | Analyzed | 未確認 | CWE-190, CWE-770 | NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted |
| CVE-2026-55370 | Deferred | 未確認 | CWE-294 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's existing TOTP verification accepted a successfully used TOTP code again while th |
| CVE-2026-55377 | Deferred | 未確認 | CWE-287 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's Account Center step-up check accepted any active verification record that belong |
| CVE-2026-55379 | Analyzed | 未確認 | CWE-789 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimension |
| CVE-2026-55380 | Analyzed | 未確認 | CWE-789 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calli |
| CVE-2026-55389 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-610 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Pr |
| CVE-2026-55390 | Deferred | 未確認 | CWE-200, CWE-22, CWE-610 | datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/parser/xmlschema.py for |
| CVE-2026-55391 | Analyzed | 未確認 | CWE-350, CWE-367, CWE-918 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Pr |
| CVE-2026-55398 | Analyzed | 未確認 | CWE-119, CWE-400 | CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel prot |
| CVE-2026-55399 | Analyzed | 未確認 | CWE-400 | CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-p |
| CVE-2026-55403 | Deferred | 未確認 | CWE-200, CWE-601 | datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Prox |
| CVE-2026-55404 | Analyzed | 未確認 | CWE-74 | yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop s |
| CVE-2026-55405 | Awaiting Analysis | 未確認 | CWE-89 | LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embe |
| CVE-2026-55406 | Deferred | 未確認 | CWE-200, CWE-416 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView<V> type allowed safe Rust code to |
| CVE-2026-55407 | Deferred | 未確認 | CWE-400, CWE-770, CWE-789 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the decode_unknown_field function in buffa's protobuf decoder alloc |
| CVE-2026-55408 | Deferred | 未確認 | CWE-94 | Koodo Reader is an ebook reader. In version 2.3.0 and earlier, Koodo Reader is vulnerable to remote code execution through malicious EPUB files because the open-book IPC handler en |
| CVE-2026-55410 | Deferred | 未確認 | CWE-78 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.1.19, NocoBase @nocobase/plugin-backups restored Postgre |
| CVE-2026-55415 | Analyzed | 未確認 | CWE-94, CWE-95 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Fr |
| CVE-2026-55417 | Deferred | 未確認 | CWE-862 | Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML |
| CVE-2026-55418 | Deferred | 未確認 | CWE-639 | FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a k |
| CVE-2026-55420 | Analyzed | 未確認 | CWE-78 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be e |
| CVE-2026-55424 | Analyzed | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before bei |
| CVE-2026-55427 | Analyzed | 未確認 | CWE-74, CWE-78 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder config-ssh` wrote server-supplie |
| CVE-2026-55428 | Analyzed | 未確認 | CWE-285, CWE-863 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that |
| CVE-2026-55429 | Analyzed | 未確認 | CWE-639 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` overwrites an exis |
| CVE-2026-55430 | Analyzed | 未確認 | CWE-345, CWE-441 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the workspace app proxy resolves the ta |
| CVE-2026-55431 | Analyzed | 未確認 | CWE-522, CWE-601 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder open app` opens external workspa |
| CVE-2026-55432 | Analyzed | 未確認 | CWE-862 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `CreateSubAgent` RPC did not valida |
| CVE-2026-55433 | Analyzed | 未確認 | CWE-862 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer recreate endpoint reli |
| CVE-2026-55434 | Analyzed | 未確認 | CWE-770 | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handle |
| CVE-2026-55435 | Analyzed | 未確認 | CWE-863 | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy |
| CVE-2026-55436 | Analyzed | 未確認 | CWE-295 | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Pr |
| CVE-2026-55437 | Analyzed | 未確認 | CWE-79 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, the `AgentLogLine` dashboard component |
| CVE-2026-55438 | Analyzed | 未確認 | CWE-346 | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain-based workspace app |
| CVE-2026-55440 | Deferred | 未確認 | CWE-400, CWE-862 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND_RESULTS handler in ufo/server/ws/handler.py called get_or_c |
| CVE-2026-55445 | Deferred | 未確認 | CWE-287 | Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /ap |
| CVE-2026-55452 | Analyzed | 未確認 | CWE-1236 | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, Actionlog::logaction() stores the request User-Agent header and ReportsController::postActivityReport() writes th |
| CVE-2026-55460 | Modified | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated non-admin user with users.view and users.edit but without users.delete can directly POST to /use |
| CVE-2026-55461 | Analyzed | 未確認 | CWE-601 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores url()->previous() from the attacker-controlled Referer header into Laravel’s intended U |
| CVE-2026-55462 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UsersController::show() and printInventory() authorize only user viewing before loading and rendering assigned li |
| CVE-2026-55464 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with a |
| CVE-2026-55466 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UploadFileRequest sanitizes SVG content only when PHP finfo reports image/svg+xml and UploadedFilesController ser |
| CVE-2026-55469 | Analyzed | 未確認 | CWE-22 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import and assets.update permissions can place a path traversal string in an asset ima |
| CVE-2026-55470 | Analyzed | 未確認 | CWE-1333 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, the fix for CVE-2026-45367 incompletely patched the DSTU2 |
| CVE-2026-55471 | Analyzed | 未確認 | CWE-611 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, org.hl7.fhir.utilities.XsltUtilities saxonTransform(...) o |
| CVE-2026-55472 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scope_locations_fmcs are enabled, the API location creation endpoint det |
| CVE-2026-55474 | Analyzed | 未確認 | CWE-23 | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path wi |
| CVE-2026-55475 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the created |
| CVE-2026-55476 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?} accepts cancel_by_admin as a URL p |
| CVE-2026-55478 | Analyzed | 未確認 | CWE-639 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, POST /api/v1/kits/{kit_id}/licenses checks whether the caller can edit kits but does not authorize access to the |
| CVE-2026-55479 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the legacy single-seat license checkin flow authorizes the action with the checkout permission instead of the che |
| CVE-2026-55481 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, default.blade.php renders header_color and related branding color settings inside a CSS style block with HTML esc |
| CVE-2026-55490 | Analyzed | 未確認 | CWE-191 | OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handle_send_a() of the Emergency Access Daemon allows any unauthenticated a |
| CVE-2026-55495 | Deferred | 未確認 | CWE-22 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUT_RELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a f |
| CVE-2026-55496 | Deferred | 未確認 | CWE-200, CWE-359 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActive without adding a StatusActive predicate and serializes ma |
| CVE-2026-55497 | Deferred | 未確認 | CWE-400, CWE-409, CWE-770 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decoders limit compressed file size but do not limit decoded |
| CVE-2026-55499 | Deferred | 未確認 | CWE-863 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder a |
| CVE-2026-55500 | Deferred | 未確認 | CWE-200 | 9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and set |
| CVE-2026-55501 | Deferred | 未確認 | CWE-307 | 9Router is an AI router & token saver. Prior to 0.4.80, the dashboard login rate limiter in src/lib/auth/loginLimiter.js derives the client identity from the attacker-controlled X- |
| CVE-2026-55502 | Deferred | 未確認 | CWE-863 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService |
| CVE-2026-55510 | Analyzed | 未確認 | CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8B |
| CVE-2026-55514 | Analyzed | 未確認 | CWE-617 | vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes En |
| CVE-2026-55515 | Analyzed | 未確認 | CWE-639 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the unaccepted-assets report delete endpoint authorizes only reports.view and deletes CheckoutAcceptance::pending |
| CVE-2026-55516 | Analyzed | 未確認 | CWE-639 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record and asset but |
| CVE-2026-55518 | Deferred | 未確認 | CWE-639, CWE-862, CWE-863 | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach workflow checks attach_<association>? in the UI and GE |
| CVE-2026-55542 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, |
| CVE-2026-55544 | Deferred | 未確認 | CWE-284, CWE-639, CWE-862 | NextCRM is open-source customer relationship management (CRM) software. In version 0.12.1, the MCP campaign tools expose campaign read and write operations over the network using u |
| CVE-2026-55548 | Analyzed | 未確認 | CWE-284, CWE-862 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enf |
| CVE-2026-55550 | Deferred | 未確認 | CWE-269, CWE-284, CWE-862 | NextCRM is open-source customer relationship management (CRM) software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict |
| CVE-2026-55554 | Analyzed | 未確認 | CWE-20 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot boundaries with a strpos() prefix check after normalizing path |
| CVE-2026-55555 | Analyzed | 未確認 | CWE-203 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By pr |
| CVE-2026-55574 | Analyzed | 未確認 | CWE-1333 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structured_outputs.regex API parameter passes a user-supplied regular exp |
| CVE-2026-55575 | Deferred | 未確認 | CWE-770 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.1, the pop array filter at src/filters/array.ts allocated a full clone of its inp |
| CVE-2026-55576 | Deferred | 未確認 | CWE-78, CWE-94 | MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.ev |
| CVE-2026-55577 | Analyzed | 未確認 | CWE-754, CWE-755, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG de |
| CVE-2026-55578 | Deferred | 未確認 | CWE-78 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklis |
| CVE-2026-55579 | Deferred | 未確認 | CWE-798 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin (SHA-512 hash s |
| CVE-2026-55590 | Analyzed | 未確認 | CWE-601 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior to 2.11.1, 3.3.6, and 4.1.1, the getLoginRedirect() method c |
| CVE-2026-55592 | Deferred | 未確認 | CWE-79 | Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it directly to an iframe source without scheme valida |
| CVE-2026-55594 | Analyzed | 未確認 | CWE-400, CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder wi |
| CVE-2026-55595 | Analyzed | 未確認 | CWE-400, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the con |
| CVE-2026-55596 | Deferred | 未確認 | CWE-79 | Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until 53.1.4, the media embed renderer trusts serialized provider or sourceUrl metadata in useMediaState and skips pa |
| CVE-2026-55597 | Analyzed | 未確認 | CWE-682, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer |
| CVE-2026-55604 | Deferred | 未確認 | CWE-639 | DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global `SessionStore` accepts caller-supplied `session_id` v |
| CVE-2026-55605 | Deferred | 未確認 | CWE-306 | DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.8.0, the self-hosted HTTP transport of `@arikusi/deepseek-mcp-server` exposes |
| CVE-2026-55608 | Analyzed | 未確認 | CWE-200, CWE-863 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT= |
| CVE-2026-55615 | Deferred | 未確認 | CWE-74 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j dr |
| CVE-2026-55616 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-49757. Reason: This candidate is a duplicate of CVE-2026-49757. Notes: All CVE users should ref | |
| CVE-2026-55626 | Analyzed | 未確認 | CWE-287, CWE-306 | xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process |
| CVE-2026-55628 | Deferred | 未確認 | CWE-73, CWE-862 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy check |
| CVE-2026-55629 | Deferred | 未確認 | CWE-22 | Whistle is an HTTP, HTTP2, HTTPS, and WebSocket debugging proxy. Prior to 2.10.3, lib/service/service.js handles GET /cgi-bin/temp/get by reading req.query.filename, joining it to |
| CVE-2026-55631 | Deferred | 未確認 | CWE-22 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the font management module allows authenticated users to submit an arbitrary fileTransName when c |
| CVE-2026-55633 | Deferred | 未確認 | CWE-434 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file dropper fix allows an authenticated attacker to upload a |
| CVE-2026-55635 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQ |
| CVE-2026-55638 | Deferred | 未確認 | CWE-862, CWE-863 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, and /api/v1beta in src/dashboardGuard.js but omits /codex before next.config.mjs rewr |
| CVE-2026-55639 | Analyzed | 未確認 | CWE-125 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with G |
| CVE-2026-55641 | Deferred | 未確認 | CWE-1327, CWE-290, CWE-348, CWE-918 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled Host header, allowing a remote u |
| CVE-2026-55645 | Analyzed | 未確認 | CWE-125 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parse |
| CVE-2026-55646 | Analyzed | 未確認 | CWE-400, CWE-770 | vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() to |
| CVE-2026-55647 | Deferred | 未確認 | CWE-79 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTM |
| CVE-2026-55651 | Deferred | 未確認 | CWE-200 | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user t |
| CVE-2026-55652 | Deferred | 未確認 | CWE-287, CWE-290 | Wekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUSTED_IPS uses getRequestIp() in server/lib/headerLoginAuth.js to trust the client-su |
| CVE-2026-55659 | Deferred | 未確認 | CWE-116, CWE-79 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embedded user-controlled values into the page and into inli |
| CVE-2026-55660 | Deferred | 未確認 | CWE-346, CWE-601, CWE-79, CWE-940 | Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass e |
| CVE-2026-55661 | Deferred | 未確認 | CWE-79, CWE-87 | Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize t |
| CVE-2026-55664 | Deferred | 未確認 | CWE-200, CWE-285 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access r |
| CVE-2026-55665 | Deferred | 未確認 | CWE-79 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value rea |
| CVE-2026-55668 | Deferred | 未確認 | CWE-22, CWE-59 | File Browser provides a web file managing interface. Prior to 2.63.16, ScopedFs validates the nearest existing ancestor of a dangling symlink as in scope and then follows the symli |
| CVE-2026-55669 | Deferred | 未確認 | CWE-346 | ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validates a token's signature and issuer (iss) but not |
| CVE-2026-55670 | Deferred | 未確認 | CWE-284, CWE-639 | ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, caus |
| CVE-2026-55671 | Deferred | 未確認 | CWE-918 | ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches |
| CVE-2026-55672 | Deferred | 未確認 | CWE-287, CWE-863 | ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's OAuth2 and OIDC CodeExchange, RefreshToken, and device token flows fail to verify that |
| CVE-2026-55685 | Analyzed | 未確認 | CWE-400, CWE-407 | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the |
| CVE-2026-55687 | Deferred | 未確認 | CWE-121, CWE-787 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpeg_parse_dqt_ma |
| CVE-2026-55688 | Awaiting Analysis | 未確認 | CWE-1275 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In versions from 2.0.0 prior to 2.16.0 and fro |
| CVE-2026-55689 | Analyzed | 未確認 | CWE-287 | OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, OpenFGA's OIDC authenticator skipped JWT audience validation when authn.method was set to oidc, |
| CVE-2026-55708 | Analyzed | 未確認 | CWE-1188 | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already con |
| CVE-2026-55717 | Analyzed | 未確認 | CWE-476 | In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <net> CNAME <target>' ru |
| CVE-2026-55723 | Analyzed | 未確認 | CWE-76 | When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGIN |
| CVE-2026-55726 | Awaiting Analysis | 未確認 | CWE-497 | The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in |
| CVE-2026-55727 | Awaiting Analysis | 未確認 | CWE-287 | A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live |
| CVE-2026-55728 | Deferred | 未確認 | CWE-121 | Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX- |
| CVE-2026-55729 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak sto |
| CVE-2026-55730 | Deferred | 未確認 | CWE-116, CWE-79 | Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a v |
| CVE-2026-55731 | Deferred | 未確認 | CWE-606 | Unchecked input for loop condition (CWE-606) in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unaut |
| CVE-2026-55732 | Deferred | 未確認 | CWE-125 | Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A6 |
| CVE-2026-55737 | Analyzed | 未確認 | CWE-195, CWE-787 | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to |
| CVE-2026-55760 | Awaiting Analysis | 未確認 | CWE-22 | Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile() using FileTempla |
| CVE-2026-55761 | Analyzed | 未確認 | CWE-287 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. In |
| CVE-2026-55768 | Deferred | 未確認 | CWE-681, CWE-789 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server |
| CVE-2026-55771 | Deferred | 未確認 | CWE-697, CWE-843, CWE-94 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals |
| CVE-2026-55772 | Deferred | 未確認 | CWE-843 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under cert |
| CVE-2026-55773 | Deferred | 未確認 | CWE-94 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under cert |
| CVE-2026-55777 | Deferred | 未確認 | CWE-125 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an atta |
| CVE-2026-55778 | Deferred | 未確認 | CWE-434 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.11 and 8.6.81, the default fileUpload.fileExtensions bl |
| CVE-2026-55780 | Deferred | 未確認 | CWE-248, CWE-400 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFil |
| CVE-2026-55781 | Deferred | 未確認 | CWE-400, CWE-789 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's UFS and FFS image handler in NanaZip.Codecs.Archive.Ufs.cpp validates the |
| CVE-2026-55782 | Deferred | 未確認 | CWE-400, CWE-789 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp all |
| CVE-2026-55783 | Deferred | 未確認 | CWE-476 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dere |
| CVE-2026-55789 | Deferred | 未確認 | CWE-91 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's self-hosted SAML application IdP built the signed SAML response and assertion by |
| CVE-2026-55790 | Deferred | 未確認 | CWE-79 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript pa |
| CVE-2026-55791 | Deferred | 未確認 | CWE-644, CWE-79, CWE-918 | Craft CMS is a content management system (CMS). Versions 4.0.0-RC1 and above, prior to 4.18.0 and 5.0.0-RC1, and above, prior to 5.10.0, are vulnerable to Server-Side Request Forge |
| CVE-2026-55792 | Deferred | 未確認 | CWE-200 | Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and above, prior to 5.10.0, the dataUrl() Twig function is in |
| CVE-2026-55793 | Deferred | 未確認 | CWE-79 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22, an author-level control panel user can store a malicious JavaScript payload in an entry title. |
| CVE-2026-55794 | Deferred | 未確認 | CWE-1336, CWE-94 | Craft CMS is a content management system (CMS). In versions 5.9.0 and above prior to 5.10.0, control panel users with the ability to edit entries can execute unsandboxed Twig code |
| CVE-2026-55798 | Analyzed | 未確認 | CWE-78 | Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without esca |
| CVE-2026-55803 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core versions: |
| CVE-2026-55804 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core versions: |
| CVE-2026-55806 | Analyzed | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, fro |
| CVE-2026-55807 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6 |
| CVE-2026-55808 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupa |
| CVE-2026-55809 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attend |
| CVE-2026-55810 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Grap |
| CVE-2026-5582 | Deferred | 未確認 | CWE-352 | The FuseWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.24.2. This is due to missing nonce verification on the toggle_ |
| CVE-2026-55824 | Deferred | 未確認 | CWE-200 | Contao is an Open Source CMS. In versions 4.13.40 through 5.3.46 and 5.7.0-RC1 through 5.7.6, the crawler leaks auth credentials to external hosts. Contao's crawler tries to preven |
| CVE-2026-55825 | Deferred | 未確認 | CWE-22 | Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachment identifier containing ../ segments and |
| CVE-2026-55827 | Analyzed | 未確認 | CWE-131, CWE-787 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and heig |
| CVE-2026-55830 | Deferred | 未確認 | CWE-184 | RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, check_function_arg |
| CVE-2026-55831 | Modified | 未確認 | CWE-400, CWE-770 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-decl |
| CVE-2026-55833 | Analyzed | 未確認 | CWE-400 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zl |
| CVE-2026-55843 | Analyzed | 未確認 | CWE-269 | Snipe-IT is an IT asset/license management system. Prior to 8.6.0, UsersController::update() passes a missing permission request field through NormalizePermissionsPayloadAction and |
| CVE-2026-55849 | Awaiting Analysis | 未確認 | CWE-78 | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace values to a subshell with |
| CVE-2026-55851 | Analyzed | 未確認 | CWE-400 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Final, and 4.1.0.Final up to (but |
| CVE-2026-55852 | Deferred | 未確認 | CWE-22 | Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, TarSlip RCE was possible in Package Import because tarfile members were not sufficiently checked be |
| CVE-2026-55865 | Deferred | 未確認 | CWE-835 | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed {% case %} tag without an associated {% when %} or {% else %} block and no term |
| CVE-2026-55873 | Deferred | 未確認 | CWE-863 | SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables are routed to the S3Tables management API where authorization |
| CVE-2026-55874 | Deferred | 未確認 | CWE-22 | SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPart |
| CVE-2026-55877 | Analyzed | 未確認 | CWE-79 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.17.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux_icon() Twig function is marked is_safe=['html'] and Icon::toHtml() i |
| CVE-2026-55878 | Deferred | 未確認 | CWE-22 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.32.0 before 2.36.1 and from 3.0.0 before 3.2.0, the ux:install console command installs files from a recipe kit by copying |
| CVE-2026-55879 | Deferred | 未確認 | CWE-79 | OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a |
| CVE-2026-55880 | Deferred | 未確認 | CWE-639 | OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their siblin |
| CVE-2026-55881 | Deferred | 未確認 | CWE-639 | OpenReplay is a self-hosted session replay suite. From 1.22.0 before 1.27.0, getFirstMob returned 15-second presigned S3 download URLs for a session's DOM-replay recording based so |
| CVE-2026-55882 | Deferred | 未確認 | CWE-200 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.19.5 through 0.37.3, the Tilt HUD server mounts Go net/http/pprof handlers under /debug with no ac |
| CVE-2026-55883 | Deferred | 未確認 | CWE-345 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through 0.37.3, the Tilt HUD WebSocket at /ws/view is gated by a CSRF token, but the token is |
| CVE-2026-55884 | Deferred | 未確認 | CWE-306 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through 0.37.3, the Tilt HUD HTTP server registers handlers on a gorilla/mux router with no a |
| CVE-2026-55885 | Deferred | 未確認 | CWE-312, CWE-522 | Grav is a file-based Web platform. Prior to 1.7.53, an authenticated administrator with backup permissions can download a ZIP archive containing the full Grav installation root, in |
| CVE-2026-55886 | Deferred | 未確認 | CWE-1321 | Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit. |
| CVE-2026-55890 | Deferred | 未確認 | CWE-79 | Grav is a file-based Web platform. Prior to 2.0.0-rc.9, Grav's incomplete fix for stored XSS through the Markdown media attribute action (CVE-2026-42841) leaves the sibling MediaOb |
| CVE-2026-55898 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55899 | Analyzed | 未確認 | CWE-121, CWE-20 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55944 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. |
| CVE-2026-55945 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information |
| CVE-2026-55947 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55948 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55949 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55950 | Modified | 未確認 | CWE-367 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash all active DTLS sess |
| CVE-2026-55952 | Modified | 未確認 | CWE-1284 | The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passi |
| CVE-2026-55953 | Modified | 未確認 | CWE-757 | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in C |
| CVE-2026-55954 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims. The Ueberauth.Strategy.Apple.Token.payload/2 |
| CVE-2026-55968 | Analyzed | 未確認 | CWE-407, CWE-770 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thrift: before |
| CVE-2026-55969 | Analyzed | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomm |
| CVE-2026-55970 | Analyzed | 未確認 | CWE-126 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the |
| CVE-2026-55971 | Analyzed | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which |
| CVE-2026-55973 | Analyzed | 未確認 | CWE-20 | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read an |
| CVE-2026-55977 | Deferred | 未確認 | CWE-307 | Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the s |
| CVE-2026-55985 | Deferred | 未確認 | CWE-312 | The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated us |
| CVE-2026-55990 | Analyzed | 未確認 | CWE-457 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, |
| CVE-2026-55991 | Analyzed | 未確認 | CWE-195 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire |
| CVE-2026-55993 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-918 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Atmosphere Websocket Comp |
| CVE-2026-55994 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-918 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel in Iggy component. The came |
| CVE-2026-55995 | Awaiting Analysis | 未確認 | CWE-415 | A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144 |
| CVE-2026-55999 | Analyzed | 未確認 | CWE-122 | Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFon |
| CVE-2026-56000 | Analyzed | 未確認 | CWE-416 | Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to Comm |
| CVE-2026-56001 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code withi |
| CVE-2026-56002 | Analyzed | 未確認 | CWE-122 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server. |
| CVE-2026-56003 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used |
| CVE-2026-56004 | Awaiting Analysis | 未確認 | CWE-78 | A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as |
| CVE-2026-56015 | Deferred | 未確認 | CWE-125 | Net::IP::LPM versions before 1.11 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the trie builder addPrefixToTrie() wit |
| CVE-2026-56016 | Deferred | 未確認 | CWE-338, CWE-340 | CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of th |
| CVE-2026-56037 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3. |
| CVE-2026-56085 | Analyzed | 未確認 | CWE-908 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-56086 | Analyzed | 未確認 | CWE-863 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ver |
| CVE-2026-56087 | Awaiting Analysis | 未確認 | CWE-693 | Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulnerability, |
| CVE-2026-56139 | Analyzed | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException opti |
| CVE-2026-56140 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, S |
| CVE-2026-56144 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simula |
| CVE-2026-56145 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission |
| CVE-2026-56146 | Analyzed | 未確認 | CWE-863 | Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged |
| CVE-2026-56147 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosure and case attachment integrity compromise via Privilege Abuse (C |
| CVE-2026-56148 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query t |
| CVE-2026-56149 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privilege |
| CVE-2026-56150 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specia |
| CVE-2026-56151 | Analyzed | 未確認 | CWE-20 | Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a specially crafted Fleet pol |
| CVE-2026-56152 | Modified | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain co |
| CVE-2026-56155 | Analyzed | 掲載 | CWE-1220 | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56156 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-56157 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-56159 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56160 | Analyzed | 未確認 | CWE-285 | Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56163 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56164 | Analyzed | 掲載 | CWE-306 | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56165 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56167 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56168 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network. |
| CVE-2026-56169 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56170 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-56171 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-56173 | Analyzed | 未確認 | CWE-416 | Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56175 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56176 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56178 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56181 | Analyzed | 未確認 | CWE-346 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
| CVE-2026-56182 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56183 | Analyzed | 未確認 | CWE-416 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56184 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-56185 | Analyzed | 未確認 | CWE-287, CWE-94 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. |
| CVE-2026-56186 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. |
| CVE-2026-56187 | Analyzed | 未確認 | CWE-416 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56188 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a |
| CVE-2026-56189 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
| CVE-2026-56190 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56191 | Analyzed | 未確認 | CWE-287 | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-56192 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-56193 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-56194 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56195 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-56196 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network. |
| CVE-2026-56197 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network. |
| CVE-2026-56217 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped API keys to downgrade encrypted bundles to non-encrypted stat |
| CVE-2026-56220 | Deferred | 未確認 | CWE-863 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.manifest INSERT policy that allows read-only org members to insert OTA manifest rows. Attackers w |
| CVE-2026-56226 | Deferred | 未確認 | CWE-200 | Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing u |
| CVE-2026-56238 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that allows unauthenticated attackers to read sensitive finan |
| CVE-2026-56240 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows organizations with exhausted or expired usage credit grants t |
| CVE-2026-56241 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to delete_non_compliant_bundles and count_non_compliant_bundles RP |
| CVE-2026-56246 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains a broken access control vulnerability in the organization management API where a scoped API key (limited_to_orgs) inherits its owner-user's permissio |
| CVE-2026-56250 | Deferred | 未確認 | CWE-862 | Capgo before 12.128.2 allows upload-scoped API keys to modify the mutable app_versions.r2_path field through PostgREST, enabling retargeting to arbitrary R2 bundle objects. Attacke |
| CVE-2026-56252 | Deferred | 未確認 | CWE-863 | Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API keys to invoke org-scoped webhook operations. Attacker |
| CVE-2026-56254 | Deferred | 未確認 | CWE-320 | In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each device that downloads the app. Because the public k |
| CVE-2026-56259 | Analyzed | 未確認 | CWE-200 | Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and |
| CVE-2026-5626 | Deferred | 未確認 | CWE-862 | The Survey Form Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_all_data() function in all versions up to, and |
| CVE-2026-56260 | Analyzed | 未確認 | CWE-22 | Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesyst |
| CVE-2026-56261 | Analyzed | 未確認 | CWE-918 | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without de |
| CVE-2026-56271 | Analyzed | 未確認 | CWE-321 | Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENC |
| CVE-2026-56273 | Deferred | 未確認 | CWE-22 | Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that accept unsanitized basePath parameters from authenticated us |
| CVE-2026-56279 | Deferred | 未確認 | CWE-862 | Capgo before 12.128.2 contains an information disclosure vulnerability in the get_orgs_v7(userid) RPC function that remains publicly invokable despite intended private access contr |
| CVE-2026-56281 | Deferred | 未確認 | CWE-89 | Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and i |
| CVE-2026-56283 | Deferred | 未確認 | CWE-79 | Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to inject malicious HTML content. Attackers can craft pay |
| CVE-2026-56284 | Deferred | 未確認 | CWE-200 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function public.get_total_metrics(org_id), which is callable by |
| CVE-2026-56287 | Analyzed | 未確認 | CWE-89 | A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and including 1.14.0. The orderBy and sortOrder re |
| CVE-2026-56288 | Analyzed | 未確認 | CWE-476 | GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can |
| CVE-2026-56289 | Analyzed | 未確認 | CWE-835 | GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted pa |
| CVE-2026-56291 | Analyzed | 掲載 | CWE-434 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary f |
| CVE-2026-56292 | Modified | 未確認 | CWE-89 | Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting t |
| CVE-2026-56293 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org when transferring applications between organizations. Attackers |
| CVE-2026-56296 | Deferred | 未確認 | CWE-203 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.transfer_app RPC function that returns distinct error messages for existing versus non-existin |
| CVE-2026-56297 | Analyzed | 未確認 | CWE-362 | FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A malic |
| CVE-2026-56298 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images containin |
| CVE-2026-56303 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. Unau |
| CVE-2026-56305 | Deferred | 未確認 | CWE-620 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows attackers to change user passwords without requiring current passw |
| CVE-2026-56308 | Deferred | 未確認 | CWE-640 | Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification of the existing email address. An attacker with access to a |
| CVE-2026-56309 | Deferred | 未確認 | CWE-770 | Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-blocked apps to create publicly readable R2 objects. Attacke |
| CVE-2026-56312 | Deferred | 未確認 | CWE-287 | Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts before captcha validation is enforced. Attackers ca |
| CVE-2026-56313 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities |
| CVE-2026-56329 | Deferred | 未確認 | CWE-436 | Capgo before 12.128.2 contains a cross-tenant preview namespace collision vulnerability caused by non-bijective decoding of double underscores to dots in preview hostname parsing. |
| CVE-2026-56335 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate protected channel configuration fields through PostgREST by exp |
| CVE-2026-56336 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain endpoint that returns internal org_id and provider_id values |
| CVE-2026-56339 | Deferred | 未確認 | CWE-203 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFINER RPC function public.rescind_invitation that allows |
| CVE-2026-56349 | Deferred | 未確認 | CWE-20 | n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft malic |
| CVE-2026-56352 | Deferred | 未確認 | CWE-22 | n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access |
| CVE-2026-56353 | Analyzed | 未確認 | CWE-287 | n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases — before 1.123.22, the 2.0.0 t |
| CVE-2026-56354 | Analyzed | 未確認 | CWE-79 | n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vulnerabilities in the Form Node due to unsanitized HTML d |
| CVE-2026-56359 | Analyzed | 未確認 | CWE-79 | n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs into OAuth2 credenti |
| CVE-2026-56360 | Analyzed | 未確認 | CWE-290 | n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned P |
| CVE-2026-56362 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory a |
| CVE-2026-56366 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specia |
| CVE-2026-56372 | Analyzed | 未確認 | CWE-122 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:metho |
| CVE-2026-56373 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerabil |
| CVE-2026-56374 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger |
| CVE-2026-56375 | Deferred | 未確認 | CWE-401 | ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cau |
| CVE-2026-56389 | Analyzed | 未確認 | CWE-78 | GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can over |
| CVE-2026-56390 | Analyzed | 未確認 | CWE-73 | GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and ov |
| CVE-2026-56391 | Analyzed | 未確認 | CWE-125 | GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalc |
| CVE-2026-56392 | Analyzed | 未確認 | CWE-122 | GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplicat |
| CVE-2026-56398 | Analyzed | 未確認 | CWE-20 | Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extension |
| CVE-2026-56400 | Analyzed | 未確認 | CWE-613 | open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functio |
| CVE-2026-56401 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56416 | Analyzed | 未確認 | CWE-354 | In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of |
| CVE-2026-56428 | Deferred | 未確認 | CWE-286 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable S |
| CVE-2026-56434 | Analyzed | 未確認 | CWE-416 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buf |
| CVE-2026-56437 | Deferred | 未確認 | CWE-427 | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is |
| CVE-2026-56444 | Undergoing Analysis | 未確認 | CWE-772 | In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (contrary to |
| CVE-2026-56451 | Deferred | 未確認 | CWE-347 | A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. |
| CVE-2026-56452 | Analyzed | 未確認 | CWE-22, CWE-73 | Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. The implementation of receiving files or d |
| CVE-2026-56453 | Analyzed | 未確認 | CWE-294 | HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses b |
| CVE-2026-56454 | Analyzed | 未確認 | CWE-327 | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that e |
| CVE-2026-56455 | Analyzed | 未確認 | CWE-121 | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an atta |
| CVE-2026-56456 | Analyzed | 未確認 | CWE-200 | HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding its internal file stru |
| CVE-2026-56458 | Analyzed | 未確認 | CWE-942 | HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is n |
| CVE-2026-56459 | Analyzed | 未確認 | CWE-532 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a lo |
| CVE-2026-56460 | Analyzed | 未確認 | CWE-201 | HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system. |
| CVE-2026-56537 | Analyzed | 未確認 | CWE-209 | HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request da |
| CVE-2026-56538 | Analyzed | 未確認 | CWE-213 | An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users. |
| CVE-2026-56567 | Analyzed | 未確認 | CWE-15 | HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or applica |
| CVE-2026-56568 | Analyzed | 未確認 | CWE-209 | HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to |
| CVE-2026-56569 | Analyzed | 未確認 | CWE-497 | HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hard |
| CVE-2026-56570 | Analyzed | 未確認 | CWE-522 | HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account ident |
| CVE-2026-56571 | Analyzed | 未確認 | CWE-209 | HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout |
| CVE-2026-56577 | Analyzed | 未確認 | CWE-521 | HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks. |
| CVE-2026-56578 | Analyzed | 未確認 | CWE-200 | HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions. |
| CVE-2026-56579 | Analyzed | 未確認 | CWE-200 | HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security. |
| CVE-2026-56580 | Analyzed | 未確認 | CWE-1104 | HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system. |
| CVE-2026-56581 | Analyzed | 未確認 | CWE-614 | HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens. |
| CVE-2026-56582 | Analyzed | 未確認 | CWE-327 | HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack. |
| CVE-2026-56583 | Analyzed | 未確認 | CWE-613 | HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse. |
| CVE-2026-56584 | Analyzed | 未確認 | CWE-200 | HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly avail |
| CVE-2026-56585 | Analyzed | 未確認 | CWE-693 | HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actio |
| CVE-2026-56586 | Analyzed | 未確認 | CWE-16 | HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data. |
| CVE-2026-56587 | Analyzed | 未確認 | CWE-523 | HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications |
| CVE-2026-56623 | Analyzed | 未確認 | CWE-22 | Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache M |
| CVE-2026-56624 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate |
| CVE-2026-56642 | Modified | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network. |
| CVE-2026-56643 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56644 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56645 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56646 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-56647 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56648 | Analyzed | 未確認 | CWE-367, CWE-416 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56649 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a ne |
| CVE-2026-56650 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56664 | Deferred | 未確認 | CWE-613 | ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go ski |
| CVE-2026-56665 | Deferred | 未確認 | CWE-613 | ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL is an open source identity management platform. From 3.0.0-rc.1 through 3.4.11 and from |
| CVE-2026-56666 | Deferred | 未確認 | CWE-287 | ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL's external identity provider handler checks that the local user's email is verified but does not ve |
| CVE-2026-56667 | Deferred | 未確認 | CWE-79 | ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to ro |
| CVE-2026-56668 | Deferred | 未確認 | CWE-862 | ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL's OAuth2 Token Exchange endpoint for urn:ietf:params:oauth:grant-type:token-exchange does not verif |
| CVE-2026-56669 | Deferred | 未確認 | CWE-407, CWE-436 | Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication. Prior to 1.4.29, Elysia uses getAll in form data no |
| CVE-2026-56670 | Awaiting Analysis | 未確認 | CWE-79 | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served uploaded SVG files inline because image/svg+xml a |
| CVE-2026-56671 | Awaiting Analysis | 未確認 | CWE-22 | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in app/model_manager.py joins an unrestricted filename ro |
| CVE-2026-56672 | Awaiting Analysis | 未確認 | CWE-79 | ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and SVG files with extension-derived content types, |
| CVE-2026-56673 | Awaiting Analysis | 未確認 | CWE-22 | ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_annotated_filepath join |
| CVE-2026-56675 | Deferred | 未確認 | CWE-287, CWE-290, CWE-306, CWE-441 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access without an API key, so a same-host reverse proxy that for |
| CVE-2026-56676 | Deferred | 未確認 | CWE-367, CWE-918 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the la |
| CVE-2026-56678 | Deferred | 未確認 | CWE-20, CWE-918 | 9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key builds an upstream URL using a user-controlled region value |
| CVE-2026-56679 | Deferred | 未確認 | CWE-915 | 9Router is an AI router & token saver. Prior to 0.5.4, the PATCH /api/settings endpoint writes the entire request body to persistent settings without a field whitelist, allowing an |
| CVE-2026-56687 | Awaiting Analysis | 未確認 | CWE-448 | Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerab |
| CVE-2026-56688 | Analyzed | 未確認 | CWE-78 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high pri |
| CVE-2026-56689 | Analyzed | 未確認 | CWE-89 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged |
| CVE-2026-56690 | Analyzed | 未確認 | CWE-89 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged |
| CVE-2026-56699 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not elig | |
| CVE-2026-56722 | Analyzed | 未確認 | CWE-20 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside |
| CVE-2026-5674 | Awaiting Analysis | 未確認 | CWE-427 | A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio comp |
| CVE-2026-56740 | Analyzed | 未確認 | CWE-400 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment vari |
| CVE-2026-56741 | Analyzed | 未確認 | CWE-400 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dim |
| CVE-2026-56742 | Analyzed | 未確認 | CWE-862 | Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or upd |
| CVE-2026-56743 | Analyzed | 未確認 | CWE-863 | Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or |
| CVE-2026-56745 | Analyzed | 未確認 | CWE-400 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the `S |
| CVE-2026-56746 | Analyzed | 未確認 | CWE-284 | Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulne |
| CVE-2026-56747 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute |
| CVE-2026-56748 | Analyzed | 未確認 | CWE-61 | Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview perm |
| CVE-2026-56758 | Deferred | 未確認 | CWE-125 | The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled |
| CVE-2026-56763 | Deferred | 未確認 | CWE-1321 | Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field names to create objects with __proto__ properties. When parsed |
| CVE-2026-56764 | Deferred | 未確認 | CWE-208 | Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. A |
| CVE-2026-56765 | Deferred | 未確認 | CWE-639 | Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-l |
| CVE-2026-56775 | Analyzed | 未確認 | CWE-863 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the work |
| CVE-2026-56776 | Analyzed | 未確認 | CWE-863 | n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:read |
| CVE-2026-56778 | Analyzed | 未確認 | CWE-863 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instea |
| CVE-2026-56810 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a denial of service via an oversized chunked transfer-encoded resp |
| CVE-2026-56811 | Modified | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an unauthenticated attacker to cause a denial of servi |
| CVE-2026-56812 | Modified | 未確認 | CWE-754 | Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client) allows an attacker with ordinary channel access to cause |
| CVE-2026-56813 | Deferred | 未確認 | CWE-141 | Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes. The Plug.Conn.Cookies.e |
| CVE-2026-56814 | Deferred | 未確認 | CWE-770 | Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allow |
| CVE-2026-56816 | Analyzed | 未確認 | CWE-400 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reserved |
| CVE-2026-56817 | Analyzed | 未確認 | CWE-611 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any ca |
| CVE-2026-56819 | Analyzed | 未確認 | CWE-400, CWE-401 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remo |
| CVE-2026-56820 | Analyzed | 未確認 | CWE-295 | Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, `OcspClient` does |
| CVE-2026-56821 | Analyzed | 未確認 | CWE-299 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP |
| CVE-2026-56822 | Analyzed | 未確認 | CWE-367 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator forwards the SslHandshake |
| CVE-2026-56841 | Analyzed | 未確認 | CWE-89 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges |
| CVE-2026-56842 | Analyzed | 未確認 | CWE-863 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privi |
| CVE-2026-56843 | Deferred | 未確認 | CWE-522 | Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is |
| CVE-2026-56844 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlyin |
| CVE-2026-56847 | Analyzed | 未確認 | CWE-1119 | A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impa |
| CVE-2026-56850 | Analyzed | 未確認 | CWE-287 | A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with |
| CVE-2026-56852 | Deferred | 未確認 | CWE-835 | A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. |
| CVE-2026-56877 | Deferred | 未確認 | CWE-472 | The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session t |
| CVE-2026-57019 | Analyzed | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjac |
| CVE-2026-57020 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticate |
| CVE-2026-57021 | Analyzed | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial |
| CVE-2026-57022 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an un |
| CVE-2026-57023 | Analyzed | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenti |
| CVE-2026-57024 | Analyzed | 未確認 | CWE-694 | A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, |
| CVE-2026-57025 | Modified | 未確認 | CWE-466 | A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to |
| CVE-2026-57026 | Analyzed | 未確認 | CWE-1286 | An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticate |
| CVE-2026-57027 | Analyzed | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauth |
| CVE-2026-57028 | Analyzed | 未確認 | CWE-923 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause |
| CVE-2026-57029 | Analyzed | 未確認 | CWE-820 | A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Den |
| CVE-2026-57030 | Analyzed | 未確認 | CWE-362 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SR |
| CVE-2026-57031 | Analyzed | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to |
| CVE-2026-57032 | Analyzed | 未確認 | CWE-236 | An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker |
| CVE-2026-57054 | Analyzed | 未確認 | CWE-706 | A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacke |
| CVE-2026-57073 | Deferred | 未確認 | CWE-125 | HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or elem |
| CVE-2026-57074 | Deferred | 未確認 | CWE-125 | XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or eleme |
| CVE-2026-57075 | Deferred | 未確認 | CWE-125 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec. The base64 decoder in the bundled libsyck indexes the |
| CVE-2026-57076 | Deferred | 未確認 | CWE-416 | YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In the bundled libsyck an anchor na |
| CVE-2026-57077 | Deferred | 未確認 | CWE-125 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference th |
| CVE-2026-57083 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. |
| CVE-2026-57084 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. |
| CVE-2026-57085 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-57087 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57088 | Analyzed | 未確認 | CWE-284 | Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57089 | Analyzed | 未確認 | CWE-416 | Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57090 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57091 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57092 | Analyzed | 未確認 | CWE-416 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-57093 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57094 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57095 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-57096 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57097 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-57100 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-57101 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-57102 | Analyzed | 未確認 | CWE-200, CWE-829 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-57106 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-57107 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57108 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-57111 | Analyzed | 未確認 | CWE-1385 | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter) in Apache Helix through 2.0.0 on all platforms allows |
| CVE-2026-57156 | Analyzed | 未確認 | CWE-122, CWE-190 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update_read_delta_points in libfre |
| CVE-2026-57157 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan a |
| CVE-2026-57158 | Modified | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incomplete fix for CVE-2026-23530 in p |
| CVE-2026-57167 | Deferred | 未確認 | CWE-80 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, server-side-rendered video watch pages embed a schema.org JSON-LD block by JSON.stringify-ing video m |
| CVE-2026-57172 | Deferred | 未確認 | CWE-321, CWE-798 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, ShareSecretManage uses a hardcoded default share link signature key, allowing an attacker who can |
| CVE-2026-57205 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.203, the authenticated GET /api/user/info/< |
| CVE-2026-57206 | Deferred | 未確認 | CWE-306, CWE-862 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.206, several plugin validation routes in ap |
| CVE-2026-57211 | Analyzed | 未確認 | CWE-36, CWE-918 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded ba |
| CVE-2026-57212 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and d |
| CVE-2026-57213 | Modified | 未確認 | CWE-79 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_federation_management plugin renders the consumer_tag field on the Federatio |
| CVE-2026-57214 | Analyzed | 未確認 | CWE-79 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute with |
| CVE-2026-57215 | Analyzed | 未確認 | CWE-863 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile d |
| CVE-2026-57216 | Analyzed | 未確認 | CWE-287 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol authentication can allow a loopback-restricted |
| CVE-2026-57217 | Analyzed | 未確認 | CWE-863 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata- |
| CVE-2026-57218 | Analyzed | 未確認 | CWE-863 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.upda |
| CVE-2026-57219 | Analyzed | 未確認 | CWE-200, CWE-522 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the obsolete GET /api/auth endpoint can disclose the OAuth 2 client secret on RabbitMQ in |
| CVE-2026-57220 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does not enforce the configured stream frame-size limit while assembling frames during au |
| CVE-2026-57221 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.decl |
| CVE-2026-57230 | Deferred | 未確認 | CWE-89 | OpenReplay is a self-hosted session replay suite. Prior to 1.27.0, the session search and analytics API in enterprise editions with multi-tenancy enabled built ClickHouse queries b |
| CVE-2026-57232 | Deferred | 未確認 | CWE-918 | Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configured RSS feed URLs from FeedReaderControlle |
| CVE-2026-57237 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. E |
| CVE-2026-57238 | Analyzed | 未確認 | CWE-416 | After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the application to crash. |
| CVE-2026-57239 | Analyzed | 未確認 | CWE-427 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT |
| CVE-2026-57240 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and cau |
| CVE-2026-57241 | Analyzed | 未確認 | CWE-125 | The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose synchronization; how |
| CVE-2026-57242 | Analyzed | 未確認 | CWE-416 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the pag |
| CVE-2026-57243 | Analyzed | 未確認 | CWE-125 | During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the applic |
| CVE-2026-57244 | Analyzed | 未確認 | CWE-416 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during |
| CVE-2026-57245 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinati |
| CVE-2026-57246 | Analyzed | 未確認 | CWE-120 | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform vali |
| CVE-2026-57247 | Analyzed | 未確認 | CWE-416 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering |
| CVE-2026-57248 | Analyzed | 未確認 | CWE-763 | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result, due to the damage to |
| CVE-2026-57249 | Analyzed | 未確認 | CWE-416 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the |
| CVE-2026-57250 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not pe |
| CVE-2026-57251 | Analyzed | 未確認 | CWE-129 | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the un |
| CVE-2026-57252 | Analyzed | 未確認 | CWE-416 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing |
| CVE-2026-57253 | Analyzed | 未確認 | CWE-125 | An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, resulting in the applica |
| CVE-2026-57254 | Analyzed | 未確認 | CWE-843 | There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causin |
| CVE-2026-57255 | Analyzed | 未確認 | CWE-125 | The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated; when |
| CVE-2026-57256 | Modified | 未確認 | CWE-416 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this |
| CVE-2026-57257 | Analyzed | 未確認 | CWE-125 | During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the applicat |
| CVE-2026-57258 | Analyzed | 未確認 | CWE-125 | The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out- |
| CVE-2026-57259 | Analyzed | 未確認 | CWE-611 | The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF will be sent to the p |
| CVE-2026-57260 | Analyzed | 未確認 | CWE-787 | The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and use |
| CVE-2026-57264 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57265 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57266 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57267 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57268 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57269 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57270 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57271 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57272 | Deferred | 未確認 | CWE-129 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57273 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57274 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57275 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57276 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57277 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-57278 | Deferred | 未確認 | CWE-120 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Clou |
| CVE-2026-5730 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affec |
| CVE-2026-57308 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execu |
| CVE-2026-57309 | Deferred | 未確認 | CWE-89 | A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind |
| CVE-2026-57310 | Deferred | 未確認 | CWE-916 | Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who obtain password hash to decode user credentials. Becau |
| CVE-2026-57311 | Deferred | 未確認 | CWE-434 | Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor co |
| CVE-2026-57342 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= 3.11.3 versions. |
| CVE-2026-57343 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. |
| CVE-2026-57344 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions. |
| CVE-2026-57345 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions. |
| CVE-2026-57347 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. |
| CVE-2026-57348 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions. |
| CVE-2026-57349 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions. |
| CVE-2026-57350 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions. |
| CVE-2026-57351 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions. |
| CVE-2026-57352 | Deferred | 未確認 | CWE-1390 | Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions. |
| CVE-2026-57353 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions. |
| CVE-2026-57354 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. |
| CVE-2026-57355 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions. |
| CVE-2026-57356 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions. |
| CVE-2026-57357 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions. |
| CVE-2026-57358 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions. |
| CVE-2026-57359 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions. |
| CVE-2026-57360 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions. |
| CVE-2026-57361 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions. |
| CVE-2026-57362 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions. |
| CVE-2026-57363 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: fro |
| CVE-2026-57364 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payme |
| CVE-2026-57365 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgar |
| CVE-2026-57366 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions. |
| CVE-2026-57367 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. |
| CVE-2026-57368 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Job |
| CVE-2026-57369 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affe |
| CVE-2026-57370 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions. |
| CVE-2026-57371 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0. |
| CVE-2026-57372 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0. |
| CVE-2026-57373 | Deferred | 未確認 | CWE-79 | Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. |
| CVE-2026-57374 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions. |
| CVE-2026-57375 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from |
| CVE-2026-57376 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for- |
| CVE-2026-57377 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a |
| CVE-2026-57378 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced |
| CVE-2026-57379 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects Form |
| CVE-2026-57380 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS. |
| CVE-2026-57381 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affect |
| CVE-2026-57382 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This is |
| CVE-2026-57383 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: |
| CVE-2026-57384 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. |
| CVE-2026-57385 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vite |
| CVE-2026-57386 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1. |
| CVE-2026-57387 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= |
| CVE-2026-57388 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydr |
| CVE-2026-57389 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundho |
| CVE-2026-57390 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured A |
| CVE-2026-57391 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue a |
| CVE-2026-57392 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through |
| CVE-2026-57393 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embed |
| CVE-2026-57394 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issu |
| CVE-2026-57395 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through |
| CVE-2026-57396 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts for WooCommerce free-gifts-for-woocommerce allows Stored XS |
| CVE-2026-57397 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. |
| CVE-2026-57398 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflecte |
| CVE-2026-57399 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Store |
| CVE-2026-57400 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-57401 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash |
| CVE-2026-57402 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce flexible-refund-and-re |
| CVE-2026-57403 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers allows Reflected XSS.Th |
| CVE-2026-57404 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-57405 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Shop: from n/a |
| CVE-2026-57406 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FundEngi |
| CVE-2026-57407 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generator f |
| CVE-2026-57408 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-57409 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-w |
| CVE-2026-57410 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through <= 2.0.2. |
| CVE-2026-57411 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views |
| CVE-2026-57412 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Vouch |
| CVE-2026-57413 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generator: from n/ |
| CVE-2026-57414 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommerce-chatbot |
| CVE-2026-57415 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects G |
| CVE-2026-57416 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored |
| CVE-2026-57417 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: f |
| CVE-2026-57418 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-57419 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-57420 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi allows Stored XSS.This issue affe |
| CVE-2026-57421 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affe |
| CVE-2026-57422 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-b |
| CVE-2026-57423 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows Reflec |
| CVE-2026-57424 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-57425 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. |
| CVE-2026-57426 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions. |
| CVE-2026-57427 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions. |
| CVE-2026-57428 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. |
| CVE-2026-5743 | Deferred | 未確認 | CWE-79 | The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block attributes in all versions up to, and including, 3.3.3.2. This is du |
| CVE-2026-57432 | Modified | 未確認 | CWE-125, CWE-190 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pac |
| CVE-2026-57433 | Analyzed | 未確認 | CWE-190 | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX |
| CVE-2026-57439 | Deferred | 未確認 | CWE-1321, CWE-79 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while parsing user-supplied |
| CVE-2026-57474 | Analyzed | 未確認 | CWE-200 | Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted unauthenticated requests. This information could reduce a |
| CVE-2026-57475 | Undergoing Analysis | 未確認 | CWE-306 | Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configura |
| CVE-2026-57476 | Undergoing Analysis | 未確認 | CWE-306 | Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retri |
| CVE-2026-57480 | Deferred | 未確認 | CWE-407 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.12 and 8.6.82, deeply nested $or, $and, and $nor query |
| CVE-2026-57481 | Deferred | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.13 and 8.6.83, a LiveQuery subscriber could receive obj |
| CVE-2026-57494 | Deferred | 未確認 | CWE-639, CWE-862 | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate anot |
| CVE-2026-57495 | Deferred | 未確認 | CWE-306 | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/cor |
| CVE-2026-57501 | Awaiting Analysis | 未確認 | CWE-266 | Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL w |
| CVE-2026-57510 | Deferred | 未確認 | CWE-639 | SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to o |
| CVE-2026-57511 | Deferred | 未確認 | CWE-93 | SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject arbitrary SMTP headers by including CRLF sequences in the e |
| CVE-2026-57516 | Analyzed | 未確認 | CWE-502 | Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar ar |
| CVE-2026-57517 | Awaiting Analysis | 未確認 | CWE-89 | Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanit |
| CVE-2026-57530 | Deferred | 未確認 | CWE-79 | Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/preset-commonmark and @milkdown/components packages that allows attackers with document |
| CVE-2026-57531 | Deferred | 未確認 | CWE-79 | Milkdown before 7.21.3 contains a DOM cross-site scripting vulnerability in the @milkdown/plugin-emoji package that allows unauthenticated attackers to execute arbitrary JavaScript |
| CVE-2026-57571 | Analyzed | 未確認 | CWE-22, CWE-59 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenc |
| CVE-2026-57572 | Analyzed | 未確認 | CWE-88, CWE-94 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromi |
| CVE-2026-57573 | Analyzed | 未確認 | CWE-918 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not o |
| CVE-2026-57574 | Deferred | 未確認 | CWE-294 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a vulnerability in Time-based One-Time Password (TOTP) authentication in UserAuthSer |
| CVE-2026-57575 | Deferred | 未確認 | CWE-918 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery (SSRF) vulnerability in URL preview functionality in U |
| CVE-2026-57584 | Deferred | 未確認 | CWE-1333 | Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a default router registers a built-in route whose compiled PCRE p |
| CVE-2026-57599 | Deferred | 未確認 | CWE-269 | There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain fu |
| CVE-2026-57600 | Deferred | 未確認 | CWE-20 | Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data. |
| CVE-2026-57621 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. |
| CVE-2026-57623 | Deferred | 未確認 | CWE-1284 | Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions. |
| CVE-2026-57624 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions. |
| CVE-2026-57625 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions. |
| CVE-2026-57626 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0. |
| CVE-2026-57668 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue |
| CVE-2026-57669 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions. |
| CVE-2026-57670 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions. |
| CVE-2026-57671 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions. |
| CVE-2026-57672 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions. |
| CVE-2026-57673 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions. |
| CVE-2026-57674 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions. |
| CVE-2026-57675 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions. |
| CVE-2026-57677 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions. |
| CVE-2026-57678 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS. This issue affects Slider |
| CVE-2026-57679 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions. |
| CVE-2026-57680 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions. |
| CVE-2026-57681 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions. |
| CVE-2026-57682 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions. |
| CVE-2026-57683 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. |
| CVE-2026-57684 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions. |
| CVE-2026-57685 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions. |
| CVE-2026-57686 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions. |
| CVE-2026-57687 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. |
| CVE-2026-57688 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions. |
| CVE-2026-57689 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions. |
| CVE-2026-57690 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions. |
| CVE-2026-57691 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Reflected XSS |
| CVE-2026-57692 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2. |
| CVE-2026-57693 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Acc |
| CVE-2026-57694 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-57695 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue |
| CVE-2026-57696 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions. |
| CVE-2026-57697 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitat |
| CVE-2026-57698 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse |
| CVE-2026-57699 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions. |
| CVE-2026-57701 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions. |
| CVE-2026-57702 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This |
| CVE-2026-57703 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. |
| CVE-2026-57704 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions. |
| CVE-2026-57705 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: |
| CVE-2026-57706 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: fr |
| CVE-2026-57707 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allow |
| CVE-2026-57708 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This |
| CVE-2026-57709 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversa |
| CVE-2026-57710 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro Max: from |
| CVE-2026-57711 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.This issue affects Sup |
| CVE-2026-57712 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows Reflected XSS.This issue affec |
| CVE-2026-57713 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= |
| CVE-2026-57714 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects La |
| CVE-2026-57715 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue affects Fl |
| CVE-2026-57716 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions. |
| CVE-2026-57717 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. |
| CVE-2026-57718 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-57719 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a throug |
| CVE-2026-57720 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a th |
| CVE-2026-57721 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Reloaded ApplyOnline allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ApplyOnline: from n/a th |
| CVE-2026-57722 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel Enable Media Replace allows Stored XSS. This issue affects Enable |
| CVE-2026-57723 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. This issue affects VikBooking Hotel Booking Engine & PMS: |
| CVE-2026-57724 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12. |
| CVE-2026-57725 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a throu |
| CVE-2026-57726 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from |
| CVE-2026-57727 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through 6.2.0. |
| CVE-2026-57728 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: |
| CVE-2026-57729 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a thr |
| CVE-2026-57730 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Flatsome <= 3.20.5 versions. |
| CVE-2026-57731 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Flatsome <= 3.20.5 versions. |
| CVE-2026-57732 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue a |
| CVE-2026-57733 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue a |
| CVE-2026-57734 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tag |
| CVE-2026-57735 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions. |
| CVE-2026-57736 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in HubSpot allows Retrieve Embedded Sensitive Data. This issue affects HubSpot: from n/a through 11.3.51. |
| CVE-2026-57737 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows |
| CVE-2026-57738 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0. |
| CVE-2026-57739 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind |
| CVE-2026-57740 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-57741 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored |
| CVE-2026-57743 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP |
| CVE-2026-57744 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a thr |
| CVE-2026-57745 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Reflected XSS.This issu |
| CVE-2026-57746 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Booked <= 3.0.0 versions. |
| CVE-2026-57747 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions. |
| CVE-2026-57748 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Shopify <= 1.0.0 versions. |
| CVE-2026-57749 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. |
| CVE-2026-57750 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. |
| CVE-2026-57751 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions. |
| CVE-2026-57752 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. |
| CVE-2026-57753 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. |
| CVE-2026-57754 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions. |
| CVE-2026-57755 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. |
| CVE-2026-57756 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. |
| CVE-2026-57757 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions. |
| CVE-2026-57758 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions. |
| CVE-2026-57759 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Cross Site Request Forgery.This issue affects Profi |
| CVE-2026-57760 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: |
| CVE-2026-57761 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions. |
| CVE-2026-57762 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. |
| CVE-2026-57763 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. |
| CVE-2026-57764 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. |
| CVE-2026-57765 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. |
| CVE-2026-57766 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions. |
| CVE-2026-57767 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. |
| CVE-2026-57768 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/ |
| CVE-2026-57769 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. |
| CVE-2026-57770 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5 |
| CVE-2026-57771 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.Th |
| CVE-2026-57772 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Blind SQL Inject |
| CVE-2026-57773 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipment-trackin |
| CVE-2026-57774 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Food Cor |
| CVE-2026-57776 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Wedding: from n/ |
| CVE-2026-57778 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-57779 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate: from n/a |
| CVE-2026-57780 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-page-builder allows DOM-Based X |
| CVE-2026-57781 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub: from n/a |
| CVE-2026-57782 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Univ |
| CVE-2026-57783 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n |
| CVE-2026-57784 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions. |
| CVE-2026-57785 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions. |
| CVE-2026-57786 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout-Core: from n/a through <= 1.7. |
| CVE-2026-57787 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue aff |
| CVE-2026-57788 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.Thi |
| CVE-2026-57789 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This is |
| CVE-2026-57790 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.Thi |
| CVE-2026-57791 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows PHP Local File Inclusion.This |
| CVE-2026-57792 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This |
| CVE-2026-57793 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion.Thi |
| CVE-2026-57794 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local File I |
| CVE-2026-57795 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusion. |
| CVE-2026-57796 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows PHP Local File Inclusion.This i |
| CVE-2026-57797 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a throug |
| CVE-2026-57798 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortcodes allow |
| CVE-2026-57799 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue |
| CVE-2026-57800 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclu |
| CVE-2026-57801 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusi |
| CVE-2026-57802 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Inclusion. Th |
| CVE-2026-57803 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP Local File Inclusion |
| CVE-2026-57804 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PH |
| CVE-2026-57805 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.T |
| CVE-2026-57807 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recovery E |
| CVE-2026-57808 | Deferred | 未確認 | CWE-862 | Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. |
| CVE-2026-57809 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions. |
| CVE-2026-57810 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Inject |
| CVE-2026-57811 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This i |
| CVE-2026-57812 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-57813 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3. |
| CVE-2026-57814 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM |
| CVE-2026-57815 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Trav |
| CVE-2026-57816 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This |
| CVE-2026-57821 | Analyzed | 未確認 | CWE-89 | A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. The orderBy request parameter is concatena |
| CVE-2026-57827 | Modified | 未確認 | CWE-434 | Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file uploa |
| CVE-2026-57828 | Modified | 未確認 | CWE-434 | Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file |
| CVE-2026-57829 | Modified | 未確認 | CWE-79 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS. |
| CVE-2026-57830 | Modified | 未確認 | CWE-862 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbi |
| CVE-2026-57831 | Deferred | 未確認 | CWE-89 | Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL |
| CVE-2026-57832 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection. |
| CVE-2026-57833 | Deferred | 未確認 | CWE-79 | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the |
| CVE-2026-57834 | Modified | 未確認 | CWE-444 | Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, |
| CVE-2026-57848 | Deferred | 未確認 | CWE-926 | Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to any process on the device via the android.intent.action.SEND intent) and accepts the |
| CVE-2026-57850 | Deferred | 未確認 | CWE-862 | RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type (FileTransfer, PortForward, ViewCamera, |
| CVE-2026-57851 | Deferred | 未確認 | CWE-782 | MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical |
| CVE-2026-57852 | Deferred | 未確認 | CWE-303 | Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers to trigger configured scheduled jobs by exploiting a |
| CVE-2026-57855 | Deferred | 未確認 | CWE-284 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes |
| CVE-2026-57856 | Deferred | 未確認 | CWE-22 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bu |
| CVE-2026-57857 | Deferred | 未確認 | CWE-79 | The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order can |
| CVE-2026-57859 | Deferred | 未確認 | CWE-502 | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute |
| CVE-2026-57860 | Deferred | 未確認 | CWE-829 | ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined in a repository's .mcp.json file on startup without user conf |
| CVE-2026-57862 | Deferred | 未確認 | CWE-918 | Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notati |
| CVE-2026-57867 | Deferred | 未確認 | CWE-288 | MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-fo |
| CVE-2026-57868 | Deferred | 未確認 | CWE-639 | MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3. |
| CVE-2026-57869 | Deferred | 未確認 | CWE-1241, CWE-639 | Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords |
| CVE-2026-57870 | Deferred | 未確認 | CWE-639 | Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This i |
| CVE-2026-57871 | Deferred | 未確認 | CWE-23 | Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: thro |
| CVE-2026-57895 | Deferred | 未確認 | CWE-276 | Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary c |
| CVE-2026-57896 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to l |
| CVE-2026-57898 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable to an unauthenticated arbitrary file write |
| CVE-2026-57916 | Deferred | 未確認 | CWE-73 | proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executa |
| CVE-2026-57917 | Deferred | 未確認 | CWE-611 | proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser' |
| CVE-2026-5793 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This i |
| CVE-2026-57961 | Deferred | 未確認 | CWE-22 | phpMyFAQ before 4.1.5 contains a potential authenticated path traversal vulnerability in the concatenatePaths() function within src/phpMyFAQ/Export/Pdf/Wrapper.php. A user with FAQ |
| CVE-2026-57962 | Analyzed | 未確認 | CWE-400 | A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thund |
| CVE-2026-57963 | Analyzed | 未確認 | CWE-79 | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was f |
| CVE-2026-57968 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57969 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-57973 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. |
| CVE-2026-57974 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57975 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57976 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-57977 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a n |
| CVE-2026-57978 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-57979 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-57980 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-57981 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57982 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network. |
| CVE-2026-57983 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-57984 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57985 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57986 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57987 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-57988 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57989 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-5799 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affec |
| CVE-2026-57990 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-57991 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-57992 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57993 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-57994 | Deferred | 未確認 | CWE-200 | phpMyFAQ before 4.1.5 applies inconsistent active=yes and publication-date filtering across its public FAQ API endpoints, allowing unauthenticated attackers to retrieve inactive (d |
| CVE-2026-57996 | Deferred | 未確認 | CWE-269 | phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in the user/add API endpoint that allows non-SuperAdmin administrators to create SuperAdmin accounts. A delegate |
| CVE-2026-5801 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP allows Command L |
| CVE-2026-58023 | Analyzed | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixe |
| CVE-2026-58024 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUs |
| CVE-2026-58025 | Analyzed | 未確認 | CWE-502, CWE-94 | Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/ |
| CVE-2026-58026 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Pa |
| CVE-2026-58027 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/Que |
| CVE-2026-58028 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. Thi |
| CVE-2026-58029 | Analyzed | 未確認 | CWE-287 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php |
| CVE-2026-58030 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is ass |
| CVE-2026-58031 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with |
| CVE-2026-58032 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with |
| CVE-2026-58033 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/I |
| CVE-2026-58034 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with |
| CVE-2026-58035 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with |
| CVE-2026-58036 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQu |
| CVE-2026-58037 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with |
| CVE-2026-58038 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with |
| CVE-2026-58039 | Awaiting Analysis | 未確認 | CWE-284 | A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypas |
| CVE-2026-58040 | Awaiting Analysis | 未確認 | CWE-297 | An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vul |
| CVE-2026-58043 | Analyzed | 未確認 | CWE-284 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`, an attacker who is granted access to o |
| CVE-2026-58046 | Awaiting Analysis | 未確認 | CWE-89 | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading |
| CVE-2026-58047 | Awaiting Analysis | 未確認 | CWE-444 | HTTP Smuggling in cPanel allows potential leak of credentials. |
| CVE-2026-58048 | Awaiting Analysis | 未確認 | CWE-89 | Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context. |
| CVE-2026-58065 | Modified | 未確認 | CWE-322 | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. An attacker who can intercept the |
| CVE-2026-58066 | Analyzed | 未確認 | CWE-287 | Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp |
| CVE-2026-58077 | Deferred | 未確認 | CWE-79 | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially craft |
| CVE-2026-58078 | Deferred | 未確認 | CWE-89 | Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated |
| CVE-2026-58101 | Analyzed | 未確認 | CWE-476 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to p |
| CVE-2026-58102 | Analyzed | 未確認 | CWE-125 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensio |
| CVE-2026-58122 | Deferred | 未確認 | CWE-348 | Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding e |
| CVE-2026-58123 | Deferred | 未確認 | CWE-306 | Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embed |
| CVE-2026-58125 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58126 | Analyzed | 未確認 | CWE-306, CWE-502 | PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by exploiting an exposed .NE |
| CVE-2026-58127 | Analyzed | 未確認 | CWE-306, CWE-502 | PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any aut |
| CVE-2026-58143 | Deferred | 未確認 | CWE-352 | Cotonti Siena 0.9.26 and earlier contains a cross-site request forgery vulnerability that allows unauthenticated attackers to modify administrator configuration by tricking a logge |
| CVE-2026-58144 | Deferred | 未確認 | CWE-79 | Cotonti Siena 0.9.26 and earlier contains a stored cross-site scripting vulnerability that allows authenticated users with PFS access to inject arbitrary script payloads by supplyi |
| CVE-2026-58148 | Deferred | 未確認 | CWE-79 | Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS |
| CVE-2026-58149 | Deferred | 未確認 | CWE-200 | Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that all |
| CVE-2026-58150 | Modified | 未確認 | CWE-444 | Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8. |
| CVE-2026-58151 | Modified | 未確認 | CWE-400 | Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This issue affects Apache Traffic Server: from 8.0.0 through 8. |
| CVE-2026-58152 | Modified | 未確認 | CWE-190 | Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 |
| CVE-2026-58153 | Analyzed | 未確認 | CWE-444 | Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: |
| CVE-2026-58154 | Modified | 未確認 | CWE-787 | Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from |
| CVE-2026-58155 | Modified | 未確認 | CWE-444 | Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects Apache Traffic Server: from 8.0.0 thro |
| CVE-2026-58156 | Modified | 未確認 | CWE-863 | Apache Traffic Server mis-parses ports in URLs and userinfo, allowing port-based access-control bypass. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from |
| CVE-2026-58157 | Modified | 未確認 | CWE-200 | Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This issue affects Apache Traffic Server: from 8.0.0 through 8.1 |
| CVE-2026-58158 | Modified | 未確認 | CWE-121 | Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0. |
| CVE-2026-58159 | Modified | 未確認 | CWE-863 | Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9 |
| CVE-2026-58160 | Modified | 未確認 | CWE-125 | Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 |
| CVE-2026-58161 | Modified | 未確認 | CWE-476 | Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from |
| CVE-2026-58162 | Modified | 未確認 | CWE-295 | The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, f |
| CVE-2026-58163 | Modified | 未確認 | CWE-502 | Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, fr |
| CVE-2026-58164 | Modified | 未確認 | CWE-416 | Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.1 |
| CVE-2026-58175 | Modified | 未確認 | CWE-401 | Apache Traffic Server leaks memory when handling HostDB SRV records. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 |
| CVE-2026-58177 | Analyzed | 未確認 | CWE-787 | The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1. |
| CVE-2026-58178 | Modified | 未確認 | CWE-674 | The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0. |
| CVE-2026-58179 | Modified | 未確認 | CWE-121 | The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from |
| CVE-2026-58180 | Modified | 未確認 | CWE-121 | The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 thro |
| CVE-2026-58181 | Modified | 未確認 | CWE-121 | The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, |
| CVE-2026-58182 | Modified | 未確認 | CWE-400 | The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11 |
| CVE-2026-58183 | Modified | 未確認 | CWE-20 | The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 th |
| CVE-2026-58184 | Modified | 未確認 | CWE-787 | The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Server: from |
| CVE-2026-58185 | Modified | 未確認 | CWE-416 | The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 thro |
| CVE-2026-58186 | Modified | 未確認 | CWE-20 | The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.1 |
| CVE-2026-58187 | Modified | 未確認 | CWE-787 | The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 |
| CVE-2026-58188 | Modified | 未確認 | CWE-787 | Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 th |
| CVE-2026-58189 | Modified | 未確認 | CWE-918 | Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server: from 8.0.0 throug |
| CVE-2026-58191 | Analyzed | 未確認 | CWE-489, CWE-79 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the |
| CVE-2026-58192 | Analyzed | 未確認 | CWE-22, CWE-73 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin exposes POST /storage/d |
| CVE-2026-58195 | Deferred | 未確認 | CWE-78 | Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk.ts, src/m |
| CVE-2026-58198 | Deferred | 未確認 | CWE-367, CWE-59 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output director |
| CVE-2026-58203 | Analyzed | 未確認 | CWE-22, CWE-400, CWE-59 | pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secrets_dir. Whe |
| CVE-2026-58207 | Analyzed | 未確認 | CWE-190 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client able to send account-scoped connection monit |
| CVE-2026-58208 | Analyzed | 未確認 | CWE-248 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQT |
| CVE-2026-58209 | Analyzed | 未確認 | CWE-863 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable repl |
| CVE-2026-5821 | Deferred | 未確認 | CWE-73 | The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insufficient path validation in the Image_Ba |
| CVE-2026-58210 | Analyzed | 未確認 | CWE-400 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an unauthenticated MQTT client could cause the server |
| CVE-2026-58211 | Analyzed | 未確認 | CWE-863 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured no_aut |
| CVE-2026-58212 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulne | |
| CVE-2026-58213 | Analyzed | 未確認 | CWE-74 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characte |
| CVE-2026-58214 | Analyzed | 未確認 | CWE-863 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the i |
| CVE-2026-58216 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos passwor |
| CVE-2026-58218 | Awaiting Analysis | 未確認 | CWE-410 | A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated |
| CVE-2026-58222 | Awaiting Analysis | 未確認 | CWE-90 | A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare reques |
| CVE-2026-58225 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of se |
| CVE-2026-58226 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integer decoding. hpax decodes HPACK variable-len |
| CVE-2026-58227 | Analyzed | 未確認 | CWE-674 | The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_ |
| CVE-2026-58228 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. T |
| CVE-2026-58229 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. The Mint.H |
| CVE-2026-58233 | Awaiting Analysis | 未確認 | CWE-502 | SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker to supply a specially crafted archive file which, when processed by the application�s libra |
| CVE-2026-58246 | Awaiting Analysis | 未確認 | CWE-497 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user |
| CVE-2026-58250 | Analyzed | 未確認 | CWE-476 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leaf |
| CVE-2026-58251 | Analyzed | 未確認 | CWE-285 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user with subscription deny |
| CVE-2026-58252 | Analyzed | 未確認 | CWE-285 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages |
| CVE-2026-58253 | Analyzed | 未確認 | CWE-287 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser f |
| CVE-2026-58254 | Analyzed | 未確認 | CWE-863 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to ordin |
| CVE-2026-58263 | Deferred | 未確認 | CWE-79, CWE-83 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4.12.28, the built-in clean-html sanitizer can be bypassed by a MathML/<style> ca |
| CVE-2026-58266 | Deferred | 未確認 | CWE-346 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user sc |
| CVE-2026-58275 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-58276 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58277 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-58278 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58279 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-58281 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58282 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58283 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58284 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58285 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58286 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58287 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58288 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58289 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58290 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58291 | Analyzed | 未確認 | CWE-672 | Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58292 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58293 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58294 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58295 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-58296 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58297 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58298 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a n |
| CVE-2026-58299 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58300 | Analyzed | 未確認 | CWE-36 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
| CVE-2026-58303 | Deferred | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before b30b63fc63b403907d8137da1c65aaa4521fe74e. |
| CVE-2026-58304 | Deferred | 未確認 | CWE-125, CWE-787 | Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b |
| CVE-2026-58305 | Deferred | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: before 779f6b |
| CVE-2026-58306 | Deferred | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before ef525f337fafddecde77a3c426212a84bb20cb98. |
| CVE-2026-58307 | Deferred | 未確認 | CWE-125, CWE-617 | Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f |
| CVE-2026-58315 | Deferred | 未確認 | CWE-352 | Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed. |
| CVE-2026-58317 | Deferred | 未確認 | CWE-196 | Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connectio |
| CVE-2026-58319 | Analyzed | 未確認 | CWE-306 | Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could pe |
| CVE-2026-58378 | Awaiting Analysis | 未確認 | CWE-489 | Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim al |
| CVE-2026-58379 | Analyzed | 未確認 | CWE-122 | A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial o |
| CVE-2026-58380 | Undergoing Analysis | 未確認 | CWE-193 | A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a |
| CVE-2026-58381 | Analyzed | 未確認 | CWE-415 | A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow |
| CVE-2026-58384 | Undergoing Analysis | 未確認 | CWE-190 | A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-ro |
| CVE-2026-58389 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgra |
| CVE-2026-58399 | Deferred | 未確認 | CWE-287 | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unauthenticated authentication bypass in validateToken() through |
| CVE-2026-58402 | Analyzed | 未確認 | CWE-79 | Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block renderer wrote the Markdown code-fence language or info-string into the code class="language-… |
| CVE-2026-58403 | Analyzed | 未確認 | CWE-59 | Hugo is a static site generator. From v0.123.0 through v0.163.0, Hugo's virtual filesystem is designed so that files under a mount cannot reach outside the mount tree, but a regres |
| CVE-2026-58404 | Analyzed | 未確認 | CWE-918 | Hugo is a static site generator. From v0.162.0 through v0.163.0, the default security.http.urls policy denies requests to loopback, internal, and cloud-metadata IPv4 literals, but |
| CVE-2026-58407 | Rejected | 未確認 | Rejected reason: Please submit CVE requests for each vulnerability. | |
| CVE-2026-58408 | Deferred | 未確認 | CWE-862, CWE-863 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admin/export UI and exfiltrate the entire member directory. The |
| CVE-2026-58409 | Deferred | 未確認 | CWE-434 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve Remote Code Execution (RCE) on the server by installing a m |
| CVE-2026-58410 | Deferred | 未確認 | CWE-639, CWE-862 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to r |
| CVE-2026-58411 | Deferred | 未確認 | CWE-79 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities were identified due to insufficient output encoding of user |
| CVE-2026-58413 | Analyzed | 未確認 | CWE-22, CWE-23 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.back |
| CVE-2026-58414 | Analyzed | 未確認 | CWE-22, CWE-59 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_coll |
| CVE-2026-58418 | Deferred | 未確認 | CWE-918 | SSRF via HTTP Redirect in Repository Migration |
| CVE-2026-58419 | Deferred | 未確認 | CWE-200 | Notification API leaks private issue metadata after access revocation |
| CVE-2026-58421 | Deferred | 未確認 | CWE-284 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
| CVE-2026-58422 | Deferred | 未確認 | CWE-284 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts |
| CVE-2026-58423 | Deferred | 未確認 | CWE-287 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
| CVE-2026-58424 | Deferred | 未確認 | CWE-285, CWE-732, CWE-863 | Permanent Fork PR Workflow Approval Gate Bypass |
| CVE-2026-58426 | Deferred | 未確認 | CWE-347 | Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write |
| CVE-2026-58451 | Deferred | 未確認 | CWE-22 | Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embeddin |
| CVE-2026-58452 | Deferred | 未確認 | CWE-78 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command injection vulnerability that allows authenticated attackers to achieve remote code execut |
| CVE-2026-58453 | Deferred | 未確認 | CWE-1392 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized acce |
| CVE-2026-58454 | Deferred | 未確認 | CWE-94 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that allows authenticated attackers to execute arbitrary shell sc |
| CVE-2026-58455 | Deferred | 未確認 | CWE-698, CWE-78 | Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing ex |
| CVE-2026-58457 | Deferred | 未確認 | CWE-78 | Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary |
| CVE-2026-58459 | Analyzed | 未確認 | CWE-78 | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execut |
| CVE-2026-5846 | Deferred | 未確認 | CWE-321 | The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS co |
| CVE-2026-58460 | Deferred | 未確認 | CWE-22 | react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache directory by s |
| CVE-2026-58461 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58465 | Deferred | 未確認 | CWE-770 | Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnerability in the CoAP Block1 handler within coap/block.c that allows unauthenticated remote a |
| CVE-2026-58466 | Deferred | 未確認 | CWE-1392 | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to authenticate as the administrator by using the publicly kn |
| CVE-2026-58467 | Deferred | 未確認 | CWE-22 | Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by in |
| CVE-2026-58468 | Deferred | 未確認 | CWE-918 | NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows authenticated administrators to issue arbitrary outbound HTTP |
| CVE-2026-58469 | Analyzed | 未確認 | CWE-125 | GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicio |
| CVE-2026-58470 | Analyzed | 未確認 | CWE-190 | GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled v |
| CVE-2026-58471 | Analyzed | 未確認 | CWE-122 | GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to tri |
| CVE-2026-58472 | Analyzed | 未確認 | CWE-190 | GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker t |
| CVE-2026-58473 | Deferred | 未確認 | CWE-306, CWE-862 | Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering a |
| CVE-2026-58475 | Analyzed | 未確認 | CWE-79 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScri |
| CVE-2026-58476 | Analyzed | 未確認 | CWE-352 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrati |
| CVE-2026-58477 | Analyzed | 未確認 | CWE-915 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration set |
| CVE-2026-58478 | Analyzed | 未確認 | CWE-918 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device is |
| CVE-2026-58479 | Analyzed | 未確認 | CWE-78 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site |
| CVE-2026-58480 | Deferred | 未確認 | CWE-434 | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassi |
| CVE-2026-58481 | Analyzed | 未確認 | CWE-22, CWE-23 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped file access under a configured sandbox `basePath`, but its path |
| CVE-2026-58482 | Analyzed | 未確認 | CWE-352, CWE-862 | Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalInbox` (`lib/approval-inbox.ts`). It is the network surface o |
| CVE-2026-58484 | Analyzed | 未確認 | CWE-22, CWE-73 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup's `_manifest.json` and trusts the manifes |
| CVE-2026-58486 | Deferred | 未確認 | CWE-400, CWE-409 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of |
| CVE-2026-58487 | Deferred | 未確認 | CWE-116, CWE-79 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, H |
| CVE-2026-58488 | Deferred | 未確認 | CWE-290, CWE-770 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Versions prior to 1.11.0 allowed attackers to circumvent the rate-limiting of the /login and /regi |
| CVE-2026-58489 | Deferred | 未確認 | CWE-352 | HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that i |
| CVE-2026-58492 | Deferred | 未確認 | CWE-89 | grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, the PDO::tableExists method interpolates its table argument directly into a raw SQL query string without s |
| CVE-2026-58493 | Deferred | 未確認 | CWE-74 | grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by directly concatenating user-configurable YAML values from field |
| CVE-2026-58494 | Deferred | 未確認 | CWE-281, CWE-863 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching Fil |
| CVE-2026-58499 | Deferred | 未確認 | CWE-22 | EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id fi |
| CVE-2026-58500 | Analyzed | 未確認 | CWE-79 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In versions prior to 1.85.10, the createLocatorGeneratorUI fun |
| CVE-2026-58501 | Analyzed | 未確認 | CWE-918 | Zeep is a Python SOAP client. From 4.0.0 before 4.3.3, Settings.forbid_external is defined but not enforced when parsing WSDL or XSD documents, allowing transitive xsd:import, xsd: |
| CVE-2026-58503 | Deferred | 未確認 | CWE-203 | Frappe is a full-stack web application framework. Prior to 16.16.0 and 15.106.0, user enumeration could be performed via the reset_password endpoint. This issue is fixed in version |
| CVE-2026-58517 | Analyzed | 未確認 | CWE-288 | Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki |
| CVE-2026-58518 | Analyzed | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - |
| CVE-2026-58519 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This |
| CVE-2026-58520 | Analyzed | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Med |
| CVE-2026-58521 | Undergoing Analysis | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. Th |
| CVE-2026-58522 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
| CVE-2026-58523 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-58524 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a n |
| CVE-2026-58525 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-58526 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58527 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58528 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-58529 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. |
| CVE-2026-58530 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
| CVE-2026-58531 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-58532 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58533 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58534 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58535 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58536 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58537 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58538 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58539 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58540 | Analyzed | 未確認 | CWE-285 | Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58541 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58542 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
| CVE-2026-58543 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a p |
| CVE-2026-58544 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58545 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-58546 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58547 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58549 | Deferred | 未確認 | CWE-120 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58550 | Deferred | 未確認 | CWE-120 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58551 | Deferred | 未確認 | CWE-120 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58552 | Deferred | 未確認 | CWE-120 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58553 | Deferred | 未確認 | CWE-120 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58554 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58555 | Deferred | 未確認 | CWE-264 | Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58556 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58557 | Deferred | 未確認 | CWE-701 | Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58558 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-58559 | Deferred | 未確認 | CWE-789 | DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58578 | Deferred | 未確認 | CWE-1333 | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows authenticated attackers to block the Node.js event loop b |
| CVE-2026-58579 | Deferred | 未確認 | CWE-79 | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs J |
| CVE-2026-58580 | Deferred | 未確認 | CWE-639 | LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginErro |
| CVE-2026-58583 | Awaiting Analysis | 未確認 | CWE-269 | FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical m |
| CVE-2026-58586 | Deferred | 未確認 | Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3. | |
| CVE-2026-58587 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Dru |
| CVE-2026-58588 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Dru |
| CVE-2026-58589 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0. |
| CVE-2026-58590 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0. |
| CVE-2026-58591 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox |
| CVE-2026-58592 | Deferred | 未確認 | CWE-787, CWE-825, CWE-843 | Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a WebA |
| CVE-2026-58593 | Analyzed | 未確認 | CWE-290, CWE-345 | NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies the HTTP-signature actor and checks the |
| CVE-2026-58594 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58595 | Analyzed | 未確認 | CWE-1021 | Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58596 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-58597 | Analyzed | 未確認 | CWE-357 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58598 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58601 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58602 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58608 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a |
| CVE-2026-58609 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
| CVE-2026-58610 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
| CVE-2026-58613 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58614 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-58617 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-58618 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-58619 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58624 | Analyzed | 未確認 | CWE-20 | Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides t |
| CVE-2026-58626 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
| CVE-2026-58627 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-58628 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges local |
| CVE-2026-58629 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58630 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-58631 | Analyzed | 未確認 | CWE-285 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. |
| CVE-2026-58632 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58633 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58634 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58635 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58636 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58637 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58638 | Analyzed | 未確認 | CWE-325 | Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-58640 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-58643 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-58644 | Analyzed | 掲載 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58647 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-58652 | Deferred | 未確認 | CWE-78 | luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-app-travelmate write ACL is granted config-wide UCI write |
| CVE-2026-58653 | Deferred | 未確認 | CWE-639 | PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects |
| CVE-2026-58654 | Deferred | 未確認 | CWE-434 | The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload endpoint (/api/v1/users/user/avatar). The endpoint valid |
| CVE-2026-58655 | Deferred | 未確認 | CWE-94 | The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic collecti |
| CVE-2026-58656 | Deferred | 未確認 | CWE-598 | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-Allow-Origin: *, allowing unauthenticated attackers to m |
| CVE-2026-58657 | Deferred | 未確認 | CWE-79 | Grav before 2.0.0 (affected through 2.0.0-rc.9 and the 2.0 branch) contains a stored CSS injection vulnerability in the Markdown image resize() media action. Prior media hardening |
| CVE-2026-58658 | Deferred | 未確認 | CWE-306 | GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inferenc |
| CVE-2026-58659 | Analyzed | 未確認 | CWE-470 | PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled m |
| CVE-2026-58660 | Deferred | 未確認 | CWE-639 | Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the attacker-su |
| CVE-2026-58661 | Analyzed | 未確認 | CWE-770 | n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. The per-request quota check does no |
| CVE-2026-58662 | Analyzed | 未確認 | CWE-125, CWE-1284 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are rec |
| CVE-2026-59083 | Analyzed | 未確認 | CWE-177 | Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apac |
| CVE-2026-59084 | Analyzed | 未確認 | CWE-1059 | Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue aff |
| CVE-2026-59089 | Analyzed | 未確認 | CWE-190 | A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an |
| CVE-2026-59092 | Analyzed | 未確認 | CWE-489 | JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics e |
| CVE-2026-59093 | Analyzed | 未確認 | CWE-266 | Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleToUser and assignRoleTo |
| CVE-2026-59094 | Deferred | 未確認 | CWE-407 | Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branche |
| CVE-2026-59095 | Deferred | 未確認 | CWE-918 | LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attackers to direct internal HTTP requests to arbitrary URLs by supp |
| CVE-2026-59096 | Deferred | 未確認 | CWE-346 | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from the request Host, honoring an attacker-controlled X-For |
| CVE-2026-59097 | Deferred | 未確認 | CWE-862 | Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unpr |
| CVE-2026-59098 | Deferred | 未確認 | CWE-639 | LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-augmented-generation semantic search functionality that allows authenticated attackers to acc |
| CVE-2026-59099 | Awaiting Analysis | 未確認 | CWE-323 | Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM |
| CVE-2026-59100 | Deferred | 未確認 | CWE-639 | LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to access and modify other users' chat-group agent data by sup |
| CVE-2026-59101 | Deferred | 未確認 | CWE-918 | AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote attackers to probe internal network services by supplying ar |
| CVE-2026-59102 | Deferred | 未確認 | CWE-79 | Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by setting a |
| CVE-2026-59117 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. |
| CVE-2026-59139 | Deferred | 未確認 | CWE-125 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_locked. The attach-time validator reqrep_v |
| CVE-2026-59140 | Deferred | 未確認 | CWE-125 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ss_va |
| CVE-2026-59141 | Deferred | 未確認 | CWE-125 | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_locked. The attach-time validator rdx_validate |
| CVE-2026-59142 | Deferred | 未確認 | CWE-125 | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copy. The attach-time validator shm_validate_ |
| CVE-2026-59143 | Deferred | 未確認 | CWE-125 | Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalidated container offset and cardinality in rb_contains_locked. The attach-time va |
| CVE-2026-59144 | Deferred | 未確認 | CWE-121 | Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq. The attach-time validator ring_validate_header |
| CVE-2026-59145 | Deferred | 未確認 | CWE-125 | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find. The attach-time validator si_validat |
| CVE-2026-59146 | Deferred | 未確認 | CWE-125, CWE-787 | Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot. |
| CVE-2026-59147 | Deferred | 未確認 | CWE-125, CWE-787 | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach-time validator dsu_validate_he |
| CVE-2026-59148 | Deferred | 未確認 | CWE-306, CWE-352, CWE-732, CWE-942 | Mockoon provides way to design and run mock APIs. Prior to 9.7.0, Mockoon's admin API in commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as user |
| CVE-2026-59149 | Deferred | 未確認 | CWE-22, CWE-23 | Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is confined by getSafeFilePath in packages/commons-server/src/l |
| CVE-2026-59151 | Analyzed | 未確認 | CWE-287 | Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should rece |
| CVE-2026-59152 | Awaiting Analysis | 未確認 | CWE-22, CWE-346, CWE-843 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server running the LangSmith SDK's T |
| CVE-2026-59153 | Deferred | 未確認 | CWE-346 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files and web pages for parts of its interface, but requ |
| CVE-2026-59154 | Deferred | 未確認 | CWE-863 | Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistI |
| CVE-2026-59155 | Deferred | 未確認 | CWE-200 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to 2.2.5, the GET /api/v1/ddns and GET /api/v1/notification endpoints return f |
| CVE-2026-59161 | Analyzed | 未確認 | CWE-400, CWE-770 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce th |
| CVE-2026-59162 | Analyzed | 未確認 | CWE-248, CWE-755 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only |
| CVE-2026-59173 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.13, from 10.0.0 through 10.1.2. Users a |
| CVE-2026-59180 | Deferred | 未確認 | CWE-200, CWE-601 | Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based not |
| CVE-2026-59190 | Deferred | 未確認 | CWE-639 | grav-plugin-admin is an HTML user interface that provides a way to configure Grav and create and modify pages. In 1.10.52 and earlier, an authenticated attacker with admin.users pe |
| CVE-2026-59193 | Modified | 未確認 | CWE-409 | Grav is a file-based Web platform. Prior to 2.0.0, an authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct |
| CVE-2026-59194 | Analyzed | 未確認 | CWE-22, CWE-73 | pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry could resolve outside the configured patches directory and cause pnpm patch-remove to delete an arbitr |
| CVE-2026-59195 | Analyzed | 未確認 | CWE-22 | pnpm is a package manager. Prior to 10.34.4 and 11.8.0, pnpm accepts package names from the env lockfile configDependencies section and uses those names directly when creating conf |
| CVE-2026-59196 | Analyzed | 未確認 | CWE-22, CWE-73 | pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted lockfile alias could be joined directly under a hoisted node_modules directory. Traversal aliases could escape tha |
| CVE-2026-59197 | Modified | 未確認 | CWE-190, CWE-787 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because I |
| CVE-2026-59198 | Analyzed | 未確認 | CWE-125 | Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing |
| CVE-2026-59199 | Modified | 未確認 | CWE-190, CWE-787 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit |
| CVE-2026-59200 | Analyzed | 未確認 | CWE-400, CWE-770 | Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length fiel |
| CVE-2026-59203 | Modified | 未確認 | CWE-835 | Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing |
| CVE-2026-59204 | Modified | 未確認 | CWE-770, CWE-789 | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of reco |
| CVE-2026-59205 | Analyzed | 未確認 | CWE-787 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies |
| CVE-2026-59206 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.p |
| CVE-2026-59207 | Analyzed | 未確認 | CWE-693 | n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on cre |
| CVE-2026-59208 | Analyzed | 未確認 | CWE-287, CWE-346 | n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior to 2.28.1, n8n instances configured with more than one trusted token-exchange issuer resol |
| CVE-2026-59209 | Analyzed | 未確認 | CWE-200, CWE-522 | n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read cred |
| CVE-2026-59212 | Analyzed | 未確認 | CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _verify_knowledge_file_access only checked read access while file wr |
| CVE-2026-59213 | Analyzed | 未確認 | CWE-524 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 before 0.10.0, get_all_models handlers in routers/openai.py and routers/ollama.py |
| CVE-2026-59214 | Analyzed | 未確認 | CWE-79 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, Open WebUI runs client-side Python with Pyodide in a same-origin web worker, |
| CVE-2026-59215 | Analyzed | 未確認 | CWE-639 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, channel thread parent and reply handling did not bind parent_id to the channe |
| CVE-2026-59216 | Analyzed | 未確認 | CWE-200, CWE-639, CWE-862, CWE-94 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to |
| CVE-2026-59217 | Modified | 未確認 | CWE-862, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadata.knowledge_id and auto-linked uploaded |
| CVE-2026-59218 | Analyzed | 未確認 | CWE-208 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the /api/v1/auths/signin endpoint looked users up by email and only ran bcryp |
| CVE-2026-59219 | Analyzed | 未確認 | CWE-613 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket.IO connect, user-join, join-channels, j |
| CVE-2026-5922 | Awaiting Analysis | 未確認 | CWE-79 | The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage. |
| CVE-2026-59220 | Analyzed | 未確認 | CWE-1333 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKILL_MENTION_RE and strip_re regular expressions in backend/ope |
| CVE-2026-59221 | Analyzed | 未確認 | CWE-22, CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py deco |
| CVE-2026-59222 | Analyzed | 未確認 | CWE-200 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse object |
| CVE-2026-59223 | Analyzed | 未確認 | CWE-693 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, WEB_FETCH_FILTER_LIST matching compared configured host entries against URL s |
| CVE-2026-59224 | Analyzed | 未確認 | CWE-287, CWE-290 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, backend/open_webui/routers/terminals.py built the ws_terminal upstream URL fr |
| CVE-2026-59225 | Analyzed | 未確認 | CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.12 before 0.10.0, an authenticated non-admin user with read access to an arena wrappe |
| CVE-2026-59226 | Analyzed | 未確認 | CWE-285, CWE-862, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without rechecking t |
| CVE-2026-59227 | Modified | 未確認 | CWE-862, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 before 0.10.0, POST /api/v1/images/edit required only a verified account and did n |
| CVE-2026-5923 | Awaiting Analysis | 未確認 | CWE-352 | Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage. |
| CVE-2026-59231 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitra |
| CVE-2026-59232 | Deferred | 未確認 | CWE-79 | Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding the create or update lead permission to execute arbitrary Ja |
| CVE-2026-59234 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at GET /calen |
| CVE-2026-59235 | Deferred | 未確認 | CWE-639 | Missing Authorization (CWE-862) in BankAccountListController (app/Http/Controllers/Api/BankAccount/BankAccountListController.php), exposed at GET /api/bank-account, in Prospero Flo |
| CVE-2026-59236 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in the Excel import handlers (CustomerImport, LeadImport, ProductImport) in Roskus Prospero Flow CRM before 5.14.0 allows |
| CVE-2026-59237 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Prospero Flow CRM before 5.5.3 allows a remote, authenticated u |
| CVE-2026-59238 | Awaiting Analysis | 未確認 | CWE-79 | Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderAuditData in js/app.js) in maalfer Pentestify before 1.1.0 al |
| CVE-2026-59239 | Deferred | 未確認 | CWE-79 | Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user to execute arbitrary JavaScript |
| CVE-2026-59240 | Deferred | 未確認 | CWE-639 | The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` method at endpoint `GET /notification/delete/{id}`. The flaw a |
| CVE-2026-59243 | Analyzed | 未確認 | CWE-347 | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or unsigned (`alg:none`) ID token |
| CVE-2026-59245 | Modified | 未確認 | CWE-269 | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permission resource name produced by `resource_name()`, so a user granted p |
| CVE-2026-59246 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP/2 server to exhaust memory on the client host and cause a denial of service. The Mint |
| CVE-2026-59247 | Deferred | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. Dur |
| CVE-2026-59248 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or clien |
| CVE-2026-59249 | Deferred | 未確認 | CWE-444 | Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and |
| CVE-2026-59250 | Awaiting Analysis | 未確認 | CWE-120, CWE-787 | Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code |
| CVE-2026-59251 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted |
| CVE-2026-59252 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitima |
| CVE-2026-59253 | Analyzed | 未確認 | CWE-639 | n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and f |
| CVE-2026-59254 | Deferred | 未確認 | CWE-639 | n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope. Authentic |
| CVE-2026-59255 | Deferred | 未確認 | CWE-862 | BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes API endpoints that allows any authenticated user to modify the |
| CVE-2026-59257 | Analyzed | 未確認 | CWE-89 | n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1 node's executeQuery operation. The operation substitu |
| CVE-2026-59258 | Deferred | 未確認 | CWE-863 | immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owne |
| CVE-2026-59259 | Analyzed | 未確認 | CWE-639 | n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused by a mismatch between the static validation check an |
| CVE-2026-59260 | Deferred | 未確認 | CWE-269 | OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controlled command-li |
| CVE-2026-59261 | Analyzed | 未確認 | CWE-184, CWE-522 | OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configur |
| CVE-2026-59262 | Deferred | 未確認 | CWE-862 | AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted conten |
| CVE-2026-59269 | Awaiting Analysis | 未確認 | A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the clusters, only if all the following conditions were true | |
| CVE-2026-59309 | Analyzed | 未確認 | CWE-303 | VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass au |
| CVE-2026-59310 | Analyzed | 掲載 | CWE-22 | VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. |
| CVE-2026-59326 | Analyzed | 未確認 | CWE-532 | The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variable at INFO level whenever it creates an outbound HTTP clie |
| CVE-2026-59327 | Analyzed | 未確認 | CWE-312 | Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the "Spring Boot DevTools Client" launch confi |
| CVE-2026-59328 | Analyzed | 未確認 | CWE-79 | Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browser) with JavaScript enabled. Using untrusted and compromised |
| CVE-2026-59509 | Deferred | 未確認 | CWE-20 | An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling the M |
| CVE-2026-59510 | Deferred | 未確認 | CWE-22 | AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.get_filepath() function construc |
| CVE-2026-59511 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrieve Embedded Sensitive Data. This issue affects Exclusive Ad |
| CVE-2026-59512 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions. |
| CVE-2026-59513 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. |
| CVE-2026-59514 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions. |
| CVE-2026-59515 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sergey AIWU ai-copilot-content-generator allows Blind SQL Injection.This issue |
| CVE-2026-59516 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS. |
| CVE-2026-59517 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. |
| CVE-2026-59518 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <= 8.8.2. |
| CVE-2026-59519 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows Retrieve Embedded Sensitive Data. This issue affects FormLayer: from n/a through 1. |
| CVE-2026-59520 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site Request Forgery. This issue affects CrawlWP SEO: from n/a through 3.0.16. |
| CVE-2026-59521 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a throug |
| CVE-2026-59522 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. |
| CVE-2026-59523 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-59524 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions. |
| CVE-2026-59525 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions. |
| CVE-2026-59526 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. |
| CVE-2026-59527 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. |
| CVE-2026-59528 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. |
| CVE-2026-59529 | Deferred | 未確認 | CWE-862 | Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions. |
| CVE-2026-59530 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. |
| CVE-2026-59531 | Deferred | 未確認 | CWE-1284 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. |
| CVE-2026-59532 | Deferred | 未確認 | CWE-1284 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. |
| CVE-2026-59533 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. |
| CVE-2026-59534 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. |
| CVE-2026-59535 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. |
| CVE-2026-59536 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. |
| CVE-2026-59537 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. |
| CVE-2026-59538 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. |
| CVE-2026-59539 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. |
| CVE-2026-59540 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. |
| CVE-2026-59541 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. |
| CVE-2026-59542 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions. |
| CVE-2026-59543 | Deferred | 未確認 | CWE-94 | Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. |
| CVE-2026-59544 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. |
| CVE-2026-59545 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions. |
| CVE-2026-59546 | Deferred | 未確認 | CWE-639 | Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. |
| CVE-2026-59547 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. |
| CVE-2026-59548 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. |
| CVE-2026-59549 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. |
| CVE-2026-5955 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This i |
| CVE-2026-59550 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. |
| CVE-2026-59551 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. |
| CVE-2026-59552 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. |
| CVE-2026-59553 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. |
| CVE-2026-59554 | Deferred | 未確認 | CWE-1390 | Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions. |
| CVE-2026-59555 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions. |
| CVE-2026-59556 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions. |
| CVE-2026-59557 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions. |
| CVE-2026-59558 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. |
| CVE-2026-59559 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. |
| CVE-2026-59560 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. |
| CVE-2026-59674 | Deferred | 未確認 | CWE-61 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbl |
| CVE-2026-59676 | Deferred | 未確認 | CWE-367 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux |
| CVE-2026-59677 | Deferred | 未確認 | CWE-862 | A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in un |
| CVE-2026-59678 | Deferred | 未確認 | CWE-863 | An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkM |
| CVE-2026-59686 | Analyzed | 未確認 | CWE-78 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with |
| CVE-2026-59687 | Analyzed | 未確認 | CWE-78 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with |
| CVE-2026-59688 | Analyzed | 未確認 | CWE-78 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with |
| CVE-2026-59689 | Analyzed | 未確認 | CWE-863 | An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker w |
| CVE-2026-59690 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated |
| CVE-2026-59691 | Awaiting Analysis | 未確認 | CWE-787 | A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hext |
| CVE-2026-59692 | Awaiting Analysis | 未確認 | CWE-121 | A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 20 |
| CVE-2026-59694 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, deg |
| CVE-2026-59695 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily |
| CVE-2026-59702 | Deferred | 未確認 | CWE-918 | repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint |
| CVE-2026-59703 | Deferred | 未確認 | CWE-552 | repomix contains a local file inclusion vulnerability in the git clone endpoint that allows unauthenticated attackers to read arbitrary local git repositories. The isValidRemoteVal |
| CVE-2026-59704 | Deferred | 未確認 | CWE-862 | Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated |
| CVE-2026-59705 | Deferred | 未確認 | CWE-306 | mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary user memories by accessi |
| CVE-2026-59706 | Deferred | 未確認 | CWE-306 | mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Un |
| CVE-2026-59707 | Deferred | 未確認 | CWE-918 | LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoin |
| CVE-2026-59708 | Deferred | 未確認 | CWE-862 | The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs without validating granteeUserId filtering, allowing unauthenticated access to full por |
| CVE-2026-59709 | Deferred | 未確認 | CWE-862 | Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-onl |
| CVE-2026-59710 | Deferred | 未確認 | CWE-79 | showdown contains a stored cross-site scripting vulnerability in the parseHeaders function of src/subParsers/makehtml/tables.js that fails to properly escape table header ID attrib |
| CVE-2026-59711 | Deferred | 未確認 | CWE-79 | showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitrary HTML and JavaScript. When completeHTMLDocument option is |
| CVE-2026-59712 | Deferred | 未確認 | CWE-639 | Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retrieve full user credential rows including password hashes |
| CVE-2026-59713 | Deferred | 未確認 | CWE-352 | Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without validating state parameters. Attackers can craft malicious |
| CVE-2026-59715 | Analyzed | 未確認 | CWE-306 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.IO server is configured with always_connect=True. The yd |
| CVE-2026-59720 | Deferred | 未確認 | CWE-200, CWE-284 | Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.ts does not persist the isPublic input field while schema.pri |
| CVE-2026-59721 | Deferred | 未確認 | CWE-77, CWE-78, CWE-915 | Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepts an attacker-controlled MAILER_ |
| CVE-2026-59723 | Analyzed | 未確認 | CWE-346 | Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebS |
| CVE-2026-59724 | Analyzed | 未確認 | CWE-20 | Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session |
| CVE-2026-59725 | Analyzed | 未確認 | CWE-404 | Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP |
| CVE-2026-59726 | Deferred | 未確認 | CWE-306, CWE-78, CWE-942 | Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints |
| CVE-2026-59727 | Deferred | 未確認 | CWE-116, CWE-79, CWE-83 | Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a transition:persist, transition:scope, or transition:persist-props directive is applie |
| CVE-2026-59728 | Deferred | 未確認 | CWE-91 | Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are inter |
| CVE-2026-59729 | Deferred | 未確認 | CWE-79 | Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2 |
| CVE-2026-59730 | Deferred | 未確認 | CWE-601 | Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is configured, the @astrojs/node standalone server's static fil |
| CVE-2026-59731 | Deferred | 未確認 | CWE-647 | Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit, |
| CVE-2026-59732 | Modified | 未確認 | CWE-22 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write extracted files outs |
| CVE-2026-59733 | Analyzed | 未確認 | CWE-22, CWE-639 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-repos enforces authoriz |
| CVE-2026-59734 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, Coolify's app/Jobs/ApplicationDeploymentJob.php generat |
| CVE-2026-59762 | Analyzed | 未確認 | CWE-770 | When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degra |
| CVE-2026-59764 | Deferred | 未確認 | CWE-78 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be exe |
| CVE-2026-59776 | Deferred | 未確認 | CWE-325 | Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip |
| CVE-2026-59791 | Analyzed | 未確認 | CWE-1021 | In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible |
| CVE-2026-59792 | Analyzed | 未確認 | CWE-23 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible |
| CVE-2026-59793 | Analyzed | 未確認 | CWE-73 | In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration |
| CVE-2026-59794 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data |
| CVE-2026-59795 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible |
| CVE-2026-59796 | Analyzed | 未確認 | CWE-862 | In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks |
| CVE-2026-59800 | Deferred | 未確認 | CWE-78 | 9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not covered by the dashboard |
| CVE-2026-59801 | Deferred | 未確認 | CWE-306 | 9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests |
| CVE-2026-59802 | Deferred | 未確認 | CWE-183 | PasswordPusher before 2.8.1 accepts data URI schemes in URL push payloads due to insufficient validation in the valid_url function. Attackers can create malicious pushes containing |
| CVE-2026-59803 | Deferred | 未確認 | CWE-409 | rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in protocol.Message.Decode (protocol/message.go). When a message has the compression flag se |
| CVE-2026-59804 | Deferred | 未確認 | CWE-1385, CWE-306 | Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attacke |
| CVE-2026-59805 | Deferred | 未確認 | CWE-862 | Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the PurchasesController that allows authenticated sellers to manipulate purchase access for other sell |
| CVE-2026-59806 | Deferred | 未確認 | CWE-601, CWE-918 | Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF b |
| CVE-2026-59807 | Deferred | 未確認 | CWE-73 | Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeF |
| CVE-2026-59817 | Deferred | 未確認 | CWE-472, CWE-639 | Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout meta |
| CVE-2026-59818 | Analyzed | 未確認 | CWE-295 | etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRP |
| CVE-2026-59819 | Analyzed | 未確認 | CWE-73 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied |
| CVE-2026-59820 | Analyzed | 未確認 | CWE-22 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file p |
| CVE-2026-59821 | Analyzed | 未確認 | CWE-94 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths di |
| CVE-2026-59822 | Analyzed | 掲載 | CWE-287, CWE-306 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to |
| CVE-2026-59826 | Analyzed | 未確認 | CWE-94 | Metabase is an open-source business intelligence and embedded analytics tool. From 1.55.0 until 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2, Metabase did not validate unsafe H2 connec |
| CVE-2026-59827 | Analyzed | 未確認 | CWE-502 | Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, |
| CVE-2026-59828 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked throug |
| CVE-2026-59831 | Awaiting Analysis | 未確認 | CWE-829 | GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution becaus |
| CVE-2026-59832 | Deferred | 未確認 | CWE-22, CWE-23 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler serveSnippets in kernel/server/serve.go joins a single-decoded |
| CVE-2026-59833 | Deferred | 未確認 | CWE-116, CWE-79, CWE-94 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, SiYuan renders note and package content to HTML through the Lute engine with sanitization enabled, bu |
| CVE-2026-59834 | Deferred | 未確認 | CWE-89 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths |
| CVE-2026-59835 | Analyzed | 未確認 | CWE-668 | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access |
| CVE-2026-59836 | Analyzed | 未確認 | CWE-295 | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attack |
| CVE-2026-59837 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 |
| CVE-2026-59838 | Analyzed | 未確認 | CWE-80 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7. |
| CVE-2026-59839 | Modified | 未確認 | CWE-22 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all |
| CVE-2026-59840 | Modified | 未確認 | CWE-126 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, |
| CVE-2026-59841 | Analyzed | 未確認 | CWE-923 | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privil |
| CVE-2026-59842 | Analyzed | 未確認 | CWE-125 | A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validat |
| CVE-2026-59843 | Modified | 未確認 | CWE-400, CWE-835 | A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and cons |
| CVE-2026-59844 | Modified | 未確認 | CWE-789 | A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memor |
| CVE-2026-59845 | Modified | 未確認 | CWE-390 | A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's acce |
| CVE-2026-59846 | Modified | 未確認 | CWE-77, CWE-78 | A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended |
| CVE-2026-59847 | Analyzed | 未確認 | CWE-1310, CWE-253 | A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to m |
| CVE-2026-59848 | Modified | 未確認 | CWE-770 | A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and cli |
| CVE-2026-59849 | Analyzed | 未確認 | CWE-835 | A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are mis |
| CVE-2026-59850 | Modified | 未確認 | CWE-416 | A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading |
| CVE-2026-59851 | Modified | 未確認 | CWE-863 | A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requ |
| CVE-2026-59853 | Deferred | 未確認 | CWE-862 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/storage/getCriteria endpoint returns saved search criteria from data/storage/criteria.json w |
| CVE-2026-59854 | Deferred | 未確認 | CWE-693 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacker-supplied absolute source paths and relies on util.IsS |
| CVE-2026-59855 | Deferred | 未確認 | CWE-80 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, Asset.render in app/src/asset/index.ts interpolates the unsanitized this.path value into HTML assigne |
| CVE-2026-59856 | Analyzed | 未確認 | CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken fro |
| CVE-2026-59857 | Analyzed | 未確認 | CWE-787 | Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word through a spell file's SAL soun |
| CVE-2026-59858 | Analyzed | 未確認 | CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension |
| CVE-2026-59859 | Deferred | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.4, Kiota's PHP generator embedded OpenAPI description, default fields, property names, and other sche |
| CVE-2026-59860 | Deferred | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.3, Kiota is affected by a code-generation injection vulnerability in the C# XML documentation-comment |
| CVE-2026-59861 | Deferred | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Ruby generator embedded OpenAPI default fields, property names, and other schema-derived s |
| CVE-2026-59862 | Deferred | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Python generator let attacker-controlled enum value descriptions from x-ms-enum.values[].d |
| CVE-2026-59863 | Deferred | 未確認 | CWE-22 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota honored a poisoned .kiota/workspace.json workspace configuration without validating per-clie |
| CVE-2026-59864 | Deferred | 未確認 | CWE-22, CWE-829 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`) emitted attacker-controlled s |
| CVE-2026-59865 | Deferred | 未確認 | CWE-829, CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.<language>.dependencyInstallCommand plus de |
| CVE-2026-59866 | Deferred | 未確認 | CWE-22, CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota emitted x-ms-kiota-info clientClassName and clientNamespaceName values without identifier or |
| CVE-2026-59867 | Deferred | 未確認 | CWE-22, CWE-829, CWE-918 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota resolved OpenAPI $ref values by fetching remote http(s) URLs and reading local absolute or o |
| CVE-2026-59868 | Analyzed | 未確認 | CWE-407, CWE-770 | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows only |
| CVE-2026-59869 | Analyzed | 未確認 | CWE-407 | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only |
| CVE-2026-59870 | Modified | 未確認 | CWE-407, CWE-770 | js-yaml is a JavaScript YAML parser and dumper. Prior to 3.15.1, 4.3.1, and 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses omapTag.addItem() to pe |
| CVE-2026-59871 | Analyzed | 未確認 | CWE-704 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing do |
| CVE-2026-59873 | Analyzed | 未確認 | CWE-770 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression |
| CVE-2026-59874 | Analyzed | 未確認 | CWE-835 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing th |
| CVE-2026-59875 | Deferred | 未確認 | CWE-248 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted |
| CVE-2026-59876 | Analyzed | 未確認 | CWE-1321 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary |
| CVE-2026-59877 | Analyzed | 未確認 | CWE-835 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching |
| CVE-2026-59878 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector c |
| CVE-2026-59879 | Analyzed | 未確認 | CWE-1284, CWE-190, CWE-400, CWE-835 | Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and upd |
| CVE-2026-59880 | Analyzed | 未確認 | CWE-407 | Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollis |
| CVE-2026-59881 | Deferred | 未確認 | CWE-20 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even whe |
| CVE-2026-59882 | Analyzed | 未確認 | CWE-436 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not reject URI host components containing authority delimiters, |
| CVE-2026-59883 | Analyzed | 未確認 | CWE-346, CWE-384 | Guzzle is an extensible PHP HTTP client. Prior to 7.12.3, CookieJar did not restrict cookies scoped to IP-address or bare-numeric Domain values to the exact host that set them, bec |
| CVE-2026-59884 | Analyzed | 未確認 | CWE-400 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an |
| CVE-2026-59885 | Analyzed | 未確認 | CWE-400, CWE-407 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the num |
| CVE-2026-59886 | Analyzed | 未確認 | CWE-400, CWE-770 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponent |
| CVE-2026-59887 | Analyzed | 未確認 | CWE-407 | linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test() and .match() can be invoked at every mailto: occur |
| CVE-2026-59888 | Awaiting Analysis | 未確認 | CWE-915 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using |
| CVE-2026-59889 | Awaiting Analysis | 未確認 | CWE-863 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, Unwr |
| CVE-2026-59890 | Analyzed | 未確認 | CWE-176, CWE-697 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude |
| CVE-2026-59891 | Awaiting Analysis | 未確認 | CWE-522 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects |
| CVE-2026-59892 | Awaiting Analysis | 未確認 | CWE-248 | OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx-* HTTP header values wi |
| CVE-2026-59895 | Analyzed | 未確認 | CWE-116, CWE-79 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class names from plain strings but marks |
| CVE-2026-59896 | Analyzed | 未確認 | CWE-362 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server- |
| CVE-2026-59897 | Analyzed | 未確認 | CWE-348 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request |
| CVE-2026-59898 | Analyzed | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 (or |
| CVE-2026-59899 | Analyzed | 未確認 | CWE-770 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, `HttpContentEncoder` (the superclass of the production handl |
| CVE-2026-59900 | Analyzed | 未確認 | CWE-444 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFr |
| CVE-2026-59901 | Analyzed | 未確認 | CWE-835 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty's compression codec pipe |
| CVE-2026-59919 | Analyzed | 未確認 | CWE-93 | Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder ( HAProxyMessageEncoder ) writes |
| CVE-2026-59920 | Analyzed | 未確認 | CWE-93 | Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder ( StompSubframeEncoder ) does not e |
| CVE-2026-59921 | Analyzed | 未確認 | CWE-93 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bod |
| CVE-2026-59922 | Analyzed | 未確認 | CWE-1333, CWE-407 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work i |
| CVE-2026-59923 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied M |
| CVE-2026-59924 | Analyzed | 未確認 | CWE-22 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() joins and normalizes user-supplied include paths without verifying that the result r |
| CVE-2026-59925 | Analyzed | 未確認 | CWE-1333, CWE-407 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character c |
| CVE-2026-59926 | Analyzed | 未確認 | CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() in src/mistune/directives/admonition.py concatenates the Admonition directive :c |
| CVE-2026-59927 | Analyzed | 未確認 | CWE-674, CWE-755 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not |
| CVE-2026-59928 | Analyzed | 未確認 | CWE-1333, CWE-407 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic |
| CVE-2026-59929 | Analyzed | 未確認 | CWE-184, CWE-79 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and |
| CVE-2026-59930 | Analyzed | 未確認 | CWE-1284, CWE-345 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values withou |
| CVE-2026-59931 | Deferred | 未確認 | CWE-918 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, an |
| CVE-2026-59932 | Deferred | 未確認 | CWE-400, CWE-409 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, an |
| CVE-2026-59933 | Deferred | 未確認 | CWE-400, CWE-835 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, an |
| CVE-2026-59935 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses |
| CVE-2026-59936 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing a |
| CVE-2026-59937 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long |
| CVE-2026-59938 | Analyzed | 未確認 | CWE-789 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual |
| CVE-2026-59939 | Modified | 未確認 | CWE-409 | httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip o |
| CVE-2026-59941 | Analyzed | 未確認 | CWE-400 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bou |
| CVE-2026-59942 | Analyzed | 未確認 | CWE-400 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack via resource exhaustion. An attacker can crash the PHP proces |
| CVE-2026-59943 | Analyzed | 未確認 | CWE-209 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG render |
| CVE-2026-59946 | Deferred | 未確認 | CWE-22, CWE-732 | Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install |
| CVE-2026-59947 | Deferred | 未確認 | CWE-532 | Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug verbosity, it could print a credential embedded in the usern |
| CVE-2026-59948 | Deferred | 未確認 | CWE-22, CWE-787 | Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Pa |
| CVE-2026-59950 | Analyzed | 未確認 | CWE-1385, CWE-346 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transp |
| CVE-2026-59952 | Deferred | 未確認 | CWE-755 | Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its flatten() helper when validation issues contain attacker-controlled object keys |
| CVE-2026-59954 | Deferred | 未確認 | CWE-20, CWE-287 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized acces |
| CVE-2026-59955 | Deferred | 未確認 | CWE-20, CWE-287 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized acces |
| CVE-2026-59995 | Analyzed | 未確認 | CWE-23 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. |
| CVE-2026-59996 | Analyzed | 未確認 | CWE-23 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. |
| CVE-2026-59997 | Analyzed | 未確認 | CWE-1284 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure |
| CVE-2026-59998 | Analyzed | 未確認 | CWE-573 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. |
| CVE-2026-59999 | Analyzed | 未確認 | CWE-348 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. |
| CVE-2026-60000 | Analyzed | 未確認 | CWE-770 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled f |
| CVE-2026-60001 | Analyzed | 未確認 | CWE-770 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. |
| CVE-2026-60002 | Analyzed | 未確認 | CWE-416 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.) |
| CVE-2026-60005 | Analyzed | 未確認 | CWE-908 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background c |
| CVE-2026-60024 | Deferred | 未確認 | CWE-1188 | Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthent |
| CVE-2026-60025 | Deferred | 未確認 | CWE-352 | Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that |
| CVE-2026-60026 | Deferred | 未確認 | CWE-94 | Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP |
| CVE-2026-60027 | Deferred | 未確認 | CWE-22 | Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthen |
| CVE-2026-60028 | Deferred | 未確認 | CWE-79 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS |
| CVE-2026-60029 | Deferred | 未確認 | CWE-79 | Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS |
| CVE-2026-60030 | Deferred | 未確認 | CWE-284 | Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an imprope |
| CVE-2026-60031 | Deferred | 未確認 | CWE-200 | Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw |
| CVE-2026-60032 | Deferred | 未確認 | CWE-434 | Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 - The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, lea |
| CVE-2026-60033 | Deferred | 未確認 | CWE-918 | Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download c |
| CVE-2026-60034 | Deferred | 未確認 | CWE-79 | Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG |
| CVE-2026-60060 | Deferred | 未確認 | CWE-130 | Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish |
| CVE-2026-60062 | Analyzed | 未確認 | CWE-22 | The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config_dirs di |
| CVE-2026-60063 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in p |
| CVE-2026-60065 | Analyzed | 未確認 | CWE-125 | When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with |
| CVE-2026-60073 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of ke |
| CVE-2026-60074 | Deferred | 未確認 | CWE-1289 | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month an |
| CVE-2026-60075 | Deferred | 未確認 | CWE-1333 | Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time. _parse_time removes a time from anyw |
| CVE-2026-60080 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefi |
| CVE-2026-60081 | Deferred | 未確認 | CWE-770 | DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An un |
| CVE-2026-60082 | Deferred | 未確認 | CWE-125 | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal |
| CVE-2026-60085 | Deferred | 未確認 | CWE-273 | PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow |
| CVE-2026-60086 | Deferred | 未確認 | CWE-693 | PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more det |
| CVE-2026-60087 | Deferred | 未確認 | CWE-863 | PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. Attackers can |
| CVE-2026-60088 | Deferred | 未確認 | CWE-22 | PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. Attackers can include path trave |
| CVE-2026-60089 | Deferred | 未確認 | CWE-22 | PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not validate the |
| CVE-2026-60090 | Deferred | 未確認 | CWE-89 | PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keys |
| CVE-2026-60091 | Deferred | 未確認 | CWE-918 | PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhook_url parameter is validated at reque |
| CVE-2026-60092 | Deferred | 未確認 | CWE-79 | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetInfo.json.php endpoint |
| CVE-2026-60094 | Deferred | 未確認 | CWE-787 | Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash or memory corruption |
| CVE-2026-60095 | Deferred | 未確認 | CWE-121 | Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlink_server service that allows unauthentic |
| CVE-2026-60102 | Deferred | 未確認 | CWE-78 | Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize |
| CVE-2026-60103 | Deferred | 未確認 | CWE-125 | Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or read adjacent heap memory by supplying a crafted .blend file wi |
| CVE-2026-60104 | Analyzed | 未確認 | CWE-639 | Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, allowing a low-privileged organizat |
| CVE-2026-60105 | Deferred | 未確認 | CWE-918 | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP() function |
| CVE-2026-60108 | Analyzed | 未確認 | CWE-770 | Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending |
| CVE-2026-60109 | Analyzed | 未確認 | CWE-476 | Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a |
| CVE-2026-60112 | Analyzed | 未確認 | CWE-306 | AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue |
| CVE-2026-60113 | Analyzed | 未確認 | CWE-306 | AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE) interface manager t |
| CVE-2026-60114 | Analyzed | 未確認 | CWE-22 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files t |
| CVE-2026-60118 | Deferred | 未確認 | CWE-862 | Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden p |
| CVE-2026-60119 | Deferred | 未確認 | CWE-862 | Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaS |
| CVE-2026-60120 | Deferred | 未確認 | CWE-79 | Bagisto before 2.4.4 contains a stored cross-site scripting vulnerability via client-side template injection that allows unauthenticated attackers to execute arbitrary JavaScript i |
| CVE-2026-60121 | Analyzed | 未確認 | CWE-78 | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands |
| CVE-2026-60122 | Deferred | 未確認 | CWE-94 | gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute |
| CVE-2026-60124 | Deferred | 未確認 | CWE-862 | An authorization bypass in MISP’s EventsController::importModule() allowed authenticated users or read-only API keys with event view access to persist data to events they were not |
| CVE-2026-60125 | Deferred | 未確認 | CWE-863 | MISP’s importModule() path used getEnabledModule() to resolve a single import module by name, but this lookup did not enforce the per-organisation module restriction checked by get |
| CVE-2026-60134 | Deferred | 未確認 | CWE-784 | Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges. |
| CVE-2026-60135 | Deferred | 未確認 | CWE-286 | An attacker can modify data that should be restricted to read‑only access. |
| CVE-2026-60137 | Analyzed | 掲載 | CWE-89 | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a |
| CVE-2026-60140 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exp |
| CVE-2026-60143 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60144 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-60145 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0 |
| CVE-2026-60146 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60147 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte |
| CVE-2026-60149 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-60150 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-60152 | Analyzed | 未確認 | CWE-285 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61 and 8.62. Easily e |
| CVE-2026-60153 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a |
| CVE-2026-60154 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60155 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability |
| CVE-2026-60156 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows unauthenticated attacker w |
| CVE-2026-60157 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle GoldenGate (component: Service Manager). Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and 23.4-23.26.1.0.0. Easily exploitabl |
| CVE-2026-60158 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability |
| CVE-2026-60159 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability |
| CVE-2026-60160 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-60161 | Analyzed | 未確認 | CWE-362 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability a |
| CVE-2026-60162 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability |
| CVE-2026-60163 | Modified | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4. |
| CVE-2026-60164 | Analyzed | 未確認 | CWE-693 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated at |
| CVE-2026-60165 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily explo |
| CVE-2026-60166 | Analyzed | 未確認 | CWE-693 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated at |
| CVE-2026-60167 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60168 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60169 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60170 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60171 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.47. Easily exploitable vulnerability |
| CVE-2026-60172 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). Supported versions that are affected are 26.0.0, 26.1.0 and 26.2.0. Difficult to exp |
| CVE-2026-60173 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily |
| CVE-2026-60174 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL |
| CVE-2026-60175 | Analyzed | 未確認 | CWE-269 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerabili |
| CVE-2026-60176 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60177 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9. |
| CVE-2026-60178 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9. |
| CVE-2026-60179 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability |
| CVE-2026-60180 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability al |
| CVE-2026-60181 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MyS |
| CVE-2026-60182 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9. |
| CVE-2026-60183 | Analyzed | 未確認 | CWE-269 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9. |
| CVE-2026-60184 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60185 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60186 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4. |
| CVE-2026-60187 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60188 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60189 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60190 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60191 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60192 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability |
| CVE-2026-60193 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability |
| CVE-2026-60194 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MyS |
| CVE-2026-60195 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MyS |
| CVE-2026-60196 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-60197 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60198 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60199 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60200 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60201 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60202 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60203 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60204 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60205 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-60206 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60207 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-60208 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60209 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60210 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60211 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60212 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60213 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Diffi |
| CVE-2026-60214 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60215 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60216 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60217 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60218 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60219 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60220 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60221 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60222 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60223 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60224 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60225 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60226 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60227 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60228 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60229 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60230 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60231 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60232 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60233 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerabilit |
| CVE-2026-60234 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60235 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerabilit |
| CVE-2026-60236 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60237 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60238 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60239 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60240 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60241 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60242 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitabl |
| CVE-2026-60243 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60244 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitabl |
| CVE-2026-60245 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60246 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60247 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitabl |
| CVE-2026-60248 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60249 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60250 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60251 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60252 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60253 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60254 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60255 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60256 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60257 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60258 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60259 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60260 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60261 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60262 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60263 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60264 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60265 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60266 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60267 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60268 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60269 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60270 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60271 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60272 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60273 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60274 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60275 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60276 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60277 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60278 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitabl |
| CVE-2026-60279 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60280 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60281 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60282 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60283 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60284 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60285 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60286 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60287 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60288 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60289 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60290 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60291 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60292 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily expl |
| CVE-2026-60293 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 1 |
| CVE-2026-60294 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60295 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Diffi |
| CVE-2026-60296 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60297 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60298 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60299 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60300 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60301 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60302 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60303 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60304 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60305 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60306 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60307 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60308 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-60309 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-60310 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60311 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.0.0-9.7.1; MySQL |
| CVE-2026-60312 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60313 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60314 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable |
| CVE-2026-60315 | Analyzed | 未確認 | CWE-200 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0- |
| CVE-2026-60316 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0- |
| CVE-2026-60317 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability |
| CVE-2026-60318 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0. |
| CVE-2026-60319 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0. |
| CVE-2026-60320 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0. |
| CVE-2026-60321 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to |
| CVE-2026-60322 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-60323 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60324 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL |
| CVE-2026-60325 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60326 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60327 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60328 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60329 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60330 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. D |
| CVE-2026-60331 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60332 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8 |
| CVE-2026-60333 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60334 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60335 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60336 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to |
| CVE-2026-60337 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to |
| CVE-2026-60338 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to |
| CVE-2026-60339 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to |
| CVE-2026-60340 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60342 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60343 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily expl |
| CVE-2026-60344 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60345 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60346 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security). The supported version that is affected is 9.2.26.3. Diffi |
| CVE-2026-60347 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). The supported version that is affected is 9.2.26 |
| CVE-2026-60348 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult t |
| CVE-2026-60349 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60350 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-60351 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult t |
| CVE-2026-60352 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult t |
| CVE-2026-60353 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult t |
| CVE-2026-60354 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-60355 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60356 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60357 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange). Supported versions that are affected are 17.0-26.5. Difficul |
| CVE-2026-60358 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60359 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60360 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60361 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60362 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60363 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60364 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported ver |
| CVE-2026-60365 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supporte |
| CVE-2026-60366 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60367 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60368 | Analyzed | 未確認 | CWE-1104 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60369 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60370 | Analyzed | 未確認 | CWE-1021 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60371 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60372 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60373 | Analyzed | 未確認 | CWE-269, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60374 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60375 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60376 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60377 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60378 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60379 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60380 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60381 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60382 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60383 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60384 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60385 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60386 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60387 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60388 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60389 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60394 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability al |
| CVE-2026-60395 | Analyzed | 未確認 | CWE-200 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily explo |
| CVE-2026-60396 | Analyzed | 未確認 | CWE-306 | Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerabi |
| CVE-2026-60397 | Analyzed | 未確認 | CWE-404 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploi |
| CVE-2026-60398 | Analyzed | 未確認 | CWE-306 | Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easil |
| CVE-2026-60399 | Analyzed | 未確認 | CWE-400 | Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily ex |
| CVE-2026-60400 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploi |
| CVE-2026-60401 | Analyzed | 未確認 | CWE-284 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60402 | Analyzed | 未確認 | CWE-284 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60403 | Analyzed | 未確認 | CWE-400 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60404 | Analyzed | 未確認 | CWE-400 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60405 | Analyzed | 未確認 | CWE-200 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60406 | Analyzed | 未確認 | CWE-269 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60407 | Analyzed | 未確認 | CWE-284 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60408 | Analyzed | 未確認 | CWE-200 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60409 | Analyzed | 未確認 | CWE-284 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60410 | Analyzed | 未確認 | CWE-400 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1. |
| CVE-2026-60411 | Analyzed | 未確認 | CWE-400 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). The supported version that is affected is 26.1.1.1.0. Easil |
| CVE-2026-60416 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60417 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60418 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60419 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60420 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60421 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60422 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). The supported version that is affected is 14.1.2.1.0. Easily exploitable |
| CVE-2026-60423 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60424 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60425 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60426 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60427 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60428 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60429 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60430 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60431 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exp |
| CVE-2026-60433 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration). The supported version that is affected is 6.5.3. Easily exploitable |
| CVE-2026-60434 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.5.3. Easily exploita |
| CVE-2026-60435 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60436 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60437 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60438 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily explo |
| CVE-2026-60439 | Analyzed | 未確認 | CWE-269, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60440 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60441 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60442 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60443 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60444 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60445 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60446 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60447 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60448 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60449 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60450 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60451 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60452 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60454 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploita |
| CVE-2026-60455 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-60456 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60457 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60458 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60459 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60460 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60461 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60462 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60463 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60464 | Modified | 未確認 | CWE-284, CWE-287 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60465 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60466 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60467 | Analyzed | 未確認 | CWE-601 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficu |
| CVE-2026-60468 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60469 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60470 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60471 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficu |
| CVE-2026-60472 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60489 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily explo |
| CVE-2026-60490 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily explo |
| CVE-2026-60491 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-60492 | Analyzed | 未確認 | CWE-269 | Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Foundation). The supported version that is affected is 9.2. Easily |
| CVE-2026-60493 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. |
| CVE-2026-60494 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Difficult to |
| CVE-2026-60495 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). The supported version that is affected is 9.2 |
| CVE-2026-60496 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). The supported version that is affected is |
| CVE-2026-60497 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to |
| CVE-2026-60498 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. |
| CVE-2026-60499 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor). The supported version that is affected is 9.2. Easily e |
| CVE-2026-60501 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60502 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60503 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60519 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60520 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60521 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60522 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60523 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60524 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60525 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60526 | Analyzed | 未確認 | CWE-20 | Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allow |
| CVE-2026-60527 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily e |
| CVE-2026-60528 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily e |
| CVE-2026-60529 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily e |
| CVE-2026-60530 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so). The supported version that is affected is 14.1.2.0.0. Easily exploitable vu |
| CVE-2026-60531 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60532 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4. |
| CVE-2026-60533 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 |
| CVE-2026-60534 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4. |
| CVE-2026-60535 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4. |
| CVE-2026-60536 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4. |
| CVE-2026-60537 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60538 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60539 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60540 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60541 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60542 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 |
| CVE-2026-60543 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult t |
| CVE-2026-60544 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-60545 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60546 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60547 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60548 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-60549 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60550 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60551 | Analyzed | 未確認 | CWE-200, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60552 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60553 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60554 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60555 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60556 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60557 | Analyzed | 未確認 | CWE-200, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60558 | Analyzed | 未確認 | CWE-200, CWE-287 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60559 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60560 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0 |
| CVE-2026-60561 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60562 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60563 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60564 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60565 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60566 | Modified | 未確認 | CWE-269 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60567 | Modified | 未確認 | CWE-269 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60568 | Modified | 未確認 | CWE-287 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-60569 | Analyzed | 未確認 | CWE-306 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. |
| CVE-2026-60570 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker w |
| CVE-2026-60571 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60572 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Web Service Provider). Supported versions that are affected are |
| CVE-2026-60573 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60574 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Cover Letter). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60575 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60576 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploi |
| CVE-2026-60577 | Analyzed | 未確認 | CWE-284, CWE-287 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploi |
| CVE-2026-60578 | Analyzed | 未確認 | CWE-284, CWE-287 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploi |
| CVE-2026-60579 | Analyzed | 未確認 | CWE-284, CWE-287 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Difficult to |
| CVE-2026-60580 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploi |
| CVE-2026-60581 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Difficult to |
| CVE-2026-60582 | Analyzed | 未確認 | CWE-284, CWE-400, CWE-89 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). The supported version that is affected is V16. Easily exploi |
| CVE-2026-60583 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.5.3. Easily exploitable vul |
| CVE-2026-60584 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). The supported version that is affected is 6.5.3. Easily exploita |
| CVE-2026-60585 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60586 | Analyzed | 未確認 | CWE-306 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allo |
| CVE-2026-60587 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Project Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60588 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-60593 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Office). The supported version that is affected is 9. |
| CVE-2026-60594 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). The supported version that is affected is 9.2 |
| CVE-2026-60595 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Management). The supported version that is affected is 9.2. Ea |
| CVE-2026-60596 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploita |
| CVE-2026-60597 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult |
| CVE-2026-60598 | Analyzed | 未確認 | CWE-284, CWE-287 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Diffi |
| CVE-2026-60599 | Analyzed | 未確認 | CWE-284, CWE-287 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Easil |
| CVE-2026-60600 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitab |
| CVE-2026-60601 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to expl |
| CVE-2026-60602 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.2.38. Easily explo |
| CVE-2026-60603 | Analyzed | 未確認 | CWE-20, CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian Features). The supported version that is affected is 9.2.38. Eas |
| CVE-2026-60604 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-60605 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA). The supported version that is affec |
| CVE-2026-60606 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affec |
| CVE-2026-60607 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). The supported version that is affected is 9.2.3 |
| CVE-2026-60608 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affec |
| CVE-2026-60609 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). The supported version that is affected is 9.2.38. Easily e |
| CVE-2026-60610 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-60611 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Easily exploi |
| CVE-2026-60612 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Commonline Loans). The supported version that is affected is 9.2.38. Difficul |
| CVE-2026-60613 | Analyzed | 未確認 | CWE-20, CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Diffi |
| CVE-2026-60614 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Data). The supported version that is affected is 9.2.38. Difficult |
| CVE-2026-60615 | Analyzed | 未確認 | CWE-287 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Easily exploi |
| CVE-2026-60616 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-60617 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-60618 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement). The supported version that is affected |
| CVE-2026-60619 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting and HRM Base). The supported version that is affected is 9.2 |
| CVE-2026-60620 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-284, CWE-400 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported version that is affected is 9.2. Diff |
| CVE-2026-60621 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). The supported version that is affected is 9.2.26.3. Difficult |
| CVE-2026-60622 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Ea |
| CVE-2026-60623 | Analyzed | 未確認 | CWE-306 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability al |
| CVE-2026-60624 | Analyzed | 未確認 | CWE-404 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allo |
| CVE-2026-60625 | Analyzed | 未確認 | CWE-269, CWE-863 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex |
| CVE-2026-60626 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily ex |
| CVE-2026-60627 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily ex |
| CVE-2026-60628 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Difficult |
| CVE-2026-60629 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-60630 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows low privileged attac |
| CVE-2026-60631 | Analyzed | 未確認 | CWE-284, CWE-352 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60632 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60633 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60634 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60635 | Analyzed | 未確認 | CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60636 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60637 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60638 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60639 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60640 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60641 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60642 | Analyzed | 未確認 | CWE-284, CWE-352, CWE-601 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60643 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60644 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60645 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60646 | Analyzed | 未確認 | CWE-352, CWE-601, CWE-640, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60647 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-400 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60648 | Analyzed | 未確認 | CWE-20, CWE-295, CWE-352, CWE-601, CWE-640 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60649 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60650 | Analyzed | 未確認 | CWE-20, CWE-352, CWE-601, CWE-640, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60651 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60652 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60653 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60654 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60655 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60656 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60657 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60658 | Analyzed | 未確認 | CWE-352, CWE-451, CWE-601, CWE-640 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60659 | Analyzed | 未確認 | CWE-284, CWE-732 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo |
| CVE-2026-60661 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows |
| CVE-2026-60663 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-863 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-60664 | Analyzed | 未確認 | CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60665 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is |
| CVE-2026-60666 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exp |
| CVE-2026-60667 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core). The supported version that is affected is 9.2. Difficult to exploit |
| CVE-2026-60668 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public Sector Specific). The supported version that is affected is |
| CVE-2026-60669 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (component: Global Payroll for Mexico). The supported version that is affected i |
| CVE-2026-60670 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60671 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-60673 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Ea |
| CVE-2026-60674 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-60675 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60676 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60677 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-60678 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60681 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected a |
| CVE-2026-60683 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected a |
| CVE-2026-60684 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.8-12.2.15. Eas |
| CVE-2026-60685 | Analyzed | 未確認 | CWE-284, CWE-352, CWE-601 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60686 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60687 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-60688 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-60689 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60690 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60691 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60692 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60694 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60695 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60697 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-6070 | Deferred | 未確認 | CWE-73 | The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to insufficient path valid |
| CVE-2026-60700 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: UWQ Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60701 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-60703 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-60704 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60705 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to |
| CVE-2026-60706 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-60708 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60709 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Difficult to |
| CVE-2026-60710 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60711 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60712 | Analyzed | 未確認 | CWE-306, CWE-862 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60713 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.5. Easily explo |
| CVE-2026-60714 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60717 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Common Utilities). Supported versions that are affected are 12. |
| CVE-2026-60718 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Clust |
| CVE-2026-60719 | Analyzed | 未確認 | CWE-20, CWE-269, CWE-284, CWE-400 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. |
| CVE-2026-60723 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Eas |
| CVE-2026-60724 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60725 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploi |
| CVE-2026-60732 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60734 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Supported versions that are affected are 12.2.3-12.2.12. Easily expl |
| CVE-2026-60735 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60736 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60738 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60739 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60740 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60741 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60744 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60747 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-60749 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60750 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60755 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60756 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-60760 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60761 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60762 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-60763 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60764 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60768 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-60770 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-60771 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-60772 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60773 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60774 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60775 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-60776 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: AOL Generic Loader). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60777 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60778 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60780 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp |
| CVE-2026-60783 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60784 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60785 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-60786 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60787 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60788 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60789 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60790 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult t |
| CVE-2026-60793 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60794 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60795 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60799 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60800 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60801 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-60802 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60804 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60805 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-60806 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Errors). Supported versions that are affected are 12.2.3-12.2.15. Di |
| CVE-2026-60807 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60810 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60811 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60812 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-60813 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-60815 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-60816 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vul |
| CVE-2026-60817 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-60823 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp |
| CVE-2026-60824 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60825 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp |
| CVE-2026-60826 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp |
| CVE-2026-60827 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60828 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-60829 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-60832 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-60833 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low |
| CVE-2026-60834 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low |
| CVE-2026-60835 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60836 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-60837 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60838 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60840 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60842 | Analyzed | 未確認 | CWE-285, CWE-352, CWE-601 | Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitabl |
| CVE-2026-60843 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60844 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-285 | Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite (component: Update Service Request). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-60845 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-60846 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60847 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-60848 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60852 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-60854 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60855 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-60857 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60859 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-60862 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60863 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60864 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60867 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60868 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). Supported versions that are affected are 12.2.14-12.2.15. Diffic |
| CVE-2026-60870 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60871 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60872 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60875 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60877 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60880 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60886 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-285, CWE-352 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60888 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-6089 | Deferred | 未確認 | CWE-918 | The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'sticky_s_media' parameter in imported JSON files in all versions up to, and including, 2.1.2. |
| CVE-2026-60890 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60891 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60892 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payroll). Supported versions that are affected are 12.2.8-12.2.15. Difficult to exp |
| CVE-2026-60893 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60894 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-60896 | Analyzed | 未確認 | CWE-200, CWE-404 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60897 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-60898 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-60899 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-60900 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-60901 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-60904 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60907 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Difficult |
| CVE-2026-60908 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60910 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60911 | Analyzed | 未確認 | CWE-285, CWE-352, CWE-601 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60912 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-60913 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-60917 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Core Receiving). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-60918 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.12-12.2.15. Easil |
| CVE-2026-60919 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-60920 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-60922 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-60923 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60924 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60925 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.4-12.2.15. Eas |
| CVE-2026-60926 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-60927 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60929 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60930 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60931 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60932 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60936 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-60937 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-60938 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-60939 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-60940 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-60941 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60942 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60943 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60945 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-60948 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-60950 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle HRMS (Ireland) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60951 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60952 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60953 | Analyzed | 未確認 | CWE-284, CWE-862 | Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12. |
| CVE-2026-60957 | Analyzed | 未確認 | CWE-269, CWE-285, CWE-352, CWE-601 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-60959 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-60960 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-60962 | Analyzed | 未確認 | CWE-284, CWE-352 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-60963 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-60965 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu |
| CVE-2026-60966 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-60972 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60973 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60974 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60978 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60979 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-60982 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60984 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60985 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60986 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60987 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60988 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-60989 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-60997 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Non-Media Integration issues). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-60999 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitabl |
| CVE-2026-61000 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61004 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-61005 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-61006 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-61009 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-6101 | Deferred | 未確認 | CWE-73 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to and including 1.1.12. This is due to unsafe ZIP file extracti |
| CVE-2026-61010 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61012 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-61013 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-61014 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-61015 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-61019 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-6102 | Awaiting Analysis | 未確認 | CWE-346 | MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations |
| CVE-2026-61020 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61023 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-61024 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-61025 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-61026 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-61027 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Inventory Costing). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-61028 | Analyzed | 未確認 | CWE-404 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-61030 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-61031 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-61035 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-61036 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-61037 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-61039 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-61041 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-61043 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-61044 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-61046 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-61047 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-61048 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-61049 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-640 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-61050 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-61051 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-61052 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo |
| CVE-2026-61053 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affect |
| CVE-2026-61055 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploita |
| CVE-2026-61056 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Grants product of Oracle PeopleSoft (component: Grants). The supported version that is affected is 9.2. Difficult to exploit vulner |
| CVE-2026-61057 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Difficult to ex |
| CVE-2026-61059 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploita |
| CVE-2026-61060 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions that are affect |
| CVE-2026-61061 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Di |
| CVE-2026-61062 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Easily ex |
| CVE-2026-61063 | Analyzed | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Eas |
| CVE-2026-61064 | Analyzed | 未確認 | CWE-269, CWE-639 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61065 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-61067 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-61068 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Billing Argentina product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.1. Easily exploita |
| CVE-2026-61069 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. D |
| CVE-2026-61070 | Analyzed | 未確認 | CWE-400 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.1. |
| CVE-2026-61071 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft (component: Engineering). The supported version that is affected is 9.1. Difficu |
| CVE-2026-61072 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Eas |
| CVE-2026-61073 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.1. Easily e |
| CVE-2026-61074 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Diffic |
| CVE-2026-61075 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-61076 | Analyzed | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported version that is affected is 9.2. Ea |
| CVE-2026-61077 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Mobile Inventory Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Diff |
| CVE-2026-61078 | Analyzed | 未確認 | CWE-284, CWE-601 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affec |
| CVE-2026-61079 | Analyzed | 未確認 | CWE-20, CWE-284, CWE-362 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulner |
| CVE-2026-61080 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-61081 | Analyzed | 未確認 | CWE-200 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4. |
| CVE-2026-61082 | Analyzed | 未確認 | CWE-200, CWE-285, CWE-352, CWE-601 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allo |
| CVE-2026-61083 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-61084 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Easily exploitable vulnerab |
| CVE-2026-61085 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vul |
| CVE-2026-61086 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploita |
| CVE-2026-61087 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vuln |
| CVE-2026-61088 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable |
| CVE-2026-61089 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vul |
| CVE-2026-61090 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-61091 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-61092 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61093 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL |
| CVE-2026-61094 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7 |
| CVE-2026-61095 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 |
| CVE-2026-61096 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, |
| CVE-2026-61097 | Analyzed | 未確認 | CWE-284, CWE-352, CWE-601 | Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Services Applications (component: Common). Supported versions that are affected ar |
| CVE-2026-61098 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61099 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61100 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61101 | Analyzed | 未確認 | CWE-284, CWE-352 | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61102 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.6.0-14 |
| CVE-2026-61103 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-61104 | Analyzed | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Diffi |
| CVE-2026-61105 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 14.6.0-14 |
| CVE-2026-61106 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supported versions that are affected are 23.4-23.26.2. Difficult to exploit vulnerability allows unauthe |
| CVE-2026-61107 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61108 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluste |
| CVE-2026-61109 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7. |
| CVE-2026-61110 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-61111 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-61112 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-61113 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-61114 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-61115 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-61116 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-61117 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Difficult to ex |
| CVE-2026-61119 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-61120 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-61121 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulne |
| CVE-2026-61122 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulne |
| CVE-2026-61123 | Analyzed | 未確認 | CWE-200, CWE-400 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-61125 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-61126 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 |
| CVE-2026-61127 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer). Supported versions that are affected are 8.0 |
| CVE-2026-61128 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL |
| CVE-2026-61129 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). The supported version that is affected is 11.4.0. Easily exploitable vulnerabil |
| CVE-2026-61130 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61131 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61132 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61133 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61134 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to |
| CVE-2026-61135 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to |
| CVE-2026-61136 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61137 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to |
| CVE-2026-61138 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-61140 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploit |
| CVE-2026-61141 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported versions that are affected are 12.2.7-12.2.15. Difficu |
| CVE-2026-61142 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-61143 | Analyzed | 未確認 | CWE-284, CWE-304, CWE-601, CWE-640 | Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communications (component: Prov IF). Supported versions that are affected are 15.0.0.0. |
| CVE-2026-61144 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL |
| CVE-2026-61145 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-61146 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-61147 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-61148 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61149 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61150 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61151 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61152 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61153 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61154 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61155 | Analyzed | 未確認 | CWE-284, CWE-306, CWE-400, CWE-732 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61156 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61157 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61158 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61159 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61160 | Analyzed | 未確認 | CWE-20, CWE-284, CWE-400 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-61161 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-61162 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-61163 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-61164 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-61165 | Analyzed | 未確認 | CWE-200, CWE-400 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-61166 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnera |
| CVE-2026-61167 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-61168 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-61169 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-61170 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability al |
| CVE-2026-61171 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-61172 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-61173 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability al |
| CVE-2026-61174 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-61175 | Analyzed | 未確認 | CWE-200, CWE-306 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-61176 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-61178 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2 |
| CVE-2026-61179 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-61180 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-61181 | Analyzed | 未確認 | CWE-284, CWE-601, CWE-640 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-61182 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import). The supported version that is affected is 6.2. |
| CVE-2026-61183 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting). The supported version that is affected is 6.2.4. |
| CVE-2026-61184 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-61185 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2 |
| CVE-2026-61186 | Analyzed | 未確認 | CWE-284, CWE-306, CWE-400, CWE-732 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploit |
| CVE-2026-61187 | Analyzed | 未確認 | CWE-404 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploit |
| CVE-2026-61188 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2 |
| CVE-2026-61189 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploit |
| CVE-2026-61190 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to e |
| CVE-2026-61191 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Ea |
| CVE-2026-61192 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to e |
| CVE-2026-61194 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitabl |
| CVE-2026-61195 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). The supported version that is affected is 6.2.1. Easily exploitabl |
| CVE-2026-61196 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-61197 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-61200 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61201 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficul |
| CVE-2026-61202 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Difficult to exploit vulnerability all |
| CVE-2026-61203 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vuln |
| CVE-2026-61204 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-352 | Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration). The supported version that is affected is 9.2. |
| CVE-2026-61205 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable |
| CVE-2026-61207 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). The supported version that is affected is 9.2. Ea |
| CVE-2026-61209 | Analyzed | 未確認 | CWE-269 | Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: Project Discovery). The supported version that is affected is 9.2. Easily exp |
| CVE-2026-61210 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to explo |
| CVE-2026-61211 | Analyzed | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows lo |
| CVE-2026-61214 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vul |
| CVE-2026-61216 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil |
| CVE-2026-61217 | Analyzed | 未確認 | CWE-284, CWE-290, CWE-352 | Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle SSL API). The supported version that is affected is 12.2.1.4.0. Difficult to e |
| CVE-2026-61218 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions that are affect |
| CVE-2026-61220 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Configuration). The supported version that is affected is 14.5.0.16. |
| CVE-2026-61221 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-61223 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8 |
| CVE-2026-61224 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). The supported version that is affected is 8.3. Dif |
| CVE-2026-61225 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. |
| CVE-2026-61226 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy). The supported version that is affected is 8.3. Di |
| CVE-2026-61232 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easi |
| CVE-2026-61233 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-287, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily |
| CVE-2026-61234 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Diffic |
| CVE-2026-61235 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is |
| CVE-2026-61236 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exp |
| CVE-2026-61237 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easi |
| CVE-2026-61238 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Eas |
| CVE-2026-61239 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Eas |
| CVE-2026-61240 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.1. Eas |
| CVE-2026-61242 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily |
| CVE-2026-61243 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily |
| CVE-2026-61244 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing). The supported version that is affected is 9.1. Eas |
| CVE-2026-61245 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily e |
| CVE-2026-61246 | Analyzed | 未確認 | CWE-269, CWE-306, CWE-502 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-61247 | Analyzed | 未確認 | CWE-306, CWE-400 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-61249 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61250 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil |
| CVE-2026-61251 | Analyzed | 未確認 | CWE-200 | Vulnerability in the HRMS (Australia) product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerab |
| CVE-2026-61252 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (Hong Kong) product of Oracle E-Business Suite (component: Hong Kong Payroll). Supported versions that are affected are 12.2.13-12.2.15. Easily ex |
| CVE-2026-61253 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle HRMS (Japanese) product of Oracle E-Business Suite (component: Oracle Payroll Japanese). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-61254 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-61255 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (New Zealand) product of Oracle E-Business Suite (component: New Zealand Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61256 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Servers). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-61257 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-61260 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-61261 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-61262 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.215. Easily |
| CVE-2026-61263 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-61264 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-61266 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-89 | Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Organization). Supported versions that are affected are 12.2.3 |
| CVE-2026-61267 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-306, CWE-862 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Spreadsheet Loading). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-61269 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu |
| CVE-2026-61271 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61274 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-61275 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Role Based Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-61277 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-61278 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61279 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-61280 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Outlook Sync Win 32). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-61282 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Supported versions that are affected are 12.2.4-12.2.15. Easil |
| CVE-2026-61283 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Web Services). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-61285 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12. |
| CVE-2026-61287 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61289 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs). The supported version that is affe |
| CVE-2026-61292 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-61294 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-89 | Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchronizations). Supported versions that are affected are 12.2.3 |
| CVE-2026-61297 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61299 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-61301 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-61303 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-61304 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61309 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe |
| CVE-2026-61310 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-61311 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-61312 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-61314 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-61315 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil |
| CVE-2026-61316 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil |
| CVE-2026-61320 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitab |
| CVE-2026-61322 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-61323 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily explo |
| CVE-2026-61324 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily explo |
| CVE-2026-61325 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily explo |
| CVE-2026-61327 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Easily |
| CVE-2026-61328 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-61329 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61333 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61334 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-61335 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-61336 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2 |
| CVE-2026-61337 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2 |
| CVE-2026-61338 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-61343 | Awaiting Analysis | 未確認 | CWE-23 | LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentia |
| CVE-2026-61344 | Awaiting Analysis | 未確認 | CWE-306 | The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes an API endpoint that returns court reminder records containing potentially sensit |
| CVE-2026-61371 | Awaiting Analysis | 未確認 | CWE-59 | Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is p |
| CVE-2026-61376 | Deferred | 未確認 | CWE-78 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command |
| CVE-2026-61378 | Awaiting Analysis | 未確認 | CWE-369 | A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash. |
| CVE-2026-61389 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in p |
| CVE-2026-61390 | Deferred | 未確認 | CWE-122 | There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets. |
| CVE-2026-61391 | Deferred | 未確認 | CWE-121 | There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted pac |
| CVE-2026-61392 | Deferred | 未確認 | CWE-200 | There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory. |
| CVE-2026-61424 | Deferred | 未確認 | CWE-434 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated fi |
| CVE-2026-61425 | Deferred | 未確認 | CWE-288 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin ac |
| CVE-2026-61426 | Deferred | 未確認 | CWE-200 | PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call GET |
| CVE-2026-61427 | Deferred | 未確認 | CWE-20 | PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorizati |
| CVE-2026-61428 | Deferred | 未確認 | CWE-290 | PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attacke |
| CVE-2026-61429 | Deferred | 未確認 | CWE-918 | PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting |
| CVE-2026-61430 | Deferred | 未確認 | CWE-918 | PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at check time but re-resolves them at connection time wi |
| CVE-2026-61431 | Deferred | 未確認 | CWE-22 | PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and .praisoninclude files. Attackers can |
| CVE-2026-61432 | Deferred | 未確認 | CWE-22 | PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast). FastContextAgent.execute_tool() prepend |
| CVE-2026-61433 | Deferred | 未確認 | CWE-94 | PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions |
| CVE-2026-61434 | Deferred | 未確認 | CWE-78 | PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's built-in -exec |
| CVE-2026-61435 | Deferred | 未確認 | CWE-287 | PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUTH=disabled |
| CVE-2026-61436 | Deferred | 未確認 | CWE-287 | PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to forge message.received events. Attackers can send c |
| CVE-2026-61437 | Deferred | 未確認 | CWE-693 | PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiag |
| CVE-2026-61438 | Deferred | 未確認 | CWE-78 | PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Att |
| CVE-2026-61439 | Deferred | 未確認 | CWE-1188 | PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass th |
| CVE-2026-61440 | Deferred | 未確認 | CWE-862 | PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels |
| CVE-2026-61441 | Deferred | 未確認 | CWE-862 | PraisonAI Platform (praisonai-platform) before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency route accepts either endpoint of a dependency edge |
| CVE-2026-61442 | Deferred | 未確認 | CWE-862 | PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-m |
| CVE-2026-61443 | Deferred | 未確認 | CWE-22 | PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. Attackers can sup |
| CVE-2026-61444 | Deferred | 未確認 | CWE-94 | PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitizat |
| CVE-2026-61445 | Deferred | 未確認 | CWE-22 | PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM |
| CVE-2026-61446 | Deferred | 未確認 | CWE-94 | PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from project-l |
| CVE-2026-61447 | Deferred | 未確認 | CWE-94 | PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restric |
| CVE-2026-61448 | Deferred | 未確認 | CWE-434 | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8.6.83. When an uploaded file's extension is not recogni |
| CVE-2026-61449 | Deferred | 未確認 | CWE-409 | Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZI |
| CVE-2026-61450 | Deferred | 未確認 | CWE-94 | Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author (any admin.pages user, or anyone able to write to user/pages) to exfiltrate configuration secrets. Althou |
| CVE-2026-61451 | Deferred | 未確認 | CWE-601 | The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in the POST /api/v1/auth/forgot-password endpoint. The s |
| CVE-2026-61452 | Deferred | 未確認 | CWE-613 | The Grav API plugin (getgrav/grav-plugin-api) before 2.0.4 contains an improper session invalidation vulnerability where JWT access tokens are issued without a jti (JWT ID) claim a |
| CVE-2026-61453 | Deferred | 未確認 | CWE-79 | Grav v2.0.0 contains a cross-site scripting vulnerability (fixed in 2.0.1). The XSS blueprint validator (Security::detectXss()) runs on raw page content before Twig processing. Whe |
| CVE-2026-61454 | Deferred | 未確認 | CWE-200 | The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFIG__ in the Admin2 SPA bootstrap page at /grav/admin (and its |
| CVE-2026-61455 | Deferred | 未確認 | CWE-409 | Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply |
| CVE-2026-61456 | Deferred | 未確認 | CWE-79 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/media endpoint. The HandlesMediaUploads::processUploadedFil |
| CVE-2026-61457 | Deferred | 未確認 | CWE-434 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controller. HandlesMediaUploads::validateFileExtension() inspect |
| CVE-2026-61458 | Deferred | 未確認 | CWE-307 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Atta |
| CVE-2026-61459 | Analyzed | 未確認 | CWE-88 | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass |
| CVE-2026-61460 | Deferred | 未確認 | CWE-639 | Krayin CRM through 2.2.3 contains an insecure direct object reference vulnerability in LeadController, PersonController, OrganizationController, QuoteController, and ActivityContro |
| CVE-2026-61461 | Analyzed | 未確認 | CWE-89 | Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search par |
| CVE-2026-61462 | Deferred | 未確認 | CWE-73 | mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers |
| CVE-2026-61463 | Deferred | 未確認 | CWE-269 | Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to modify the owner field without authorization checks. Attacker |
| CVE-2026-61464 | Deferred | 未確認 | CWE-122 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result |
| CVE-2026-61465 | Analyzed | 未確認 | CWE-770 | ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted im |
| CVE-2026-61474 | Deferred | 未確認 | CWE-863 | An improper authorization check in MISP’s attribute creation endpoint allowed an authenticated user with permission to add attributes to submit a sharing_group_id without triggerin |
| CVE-2026-61487 | Analyzed | 未確認 | CWE-285 | Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL b |
| CVE-2026-61492 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible |
| CVE-2026-61498 | Analyzed | 未確認 | CWE-78 | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execu |
| CVE-2026-61500 | Deferred | 未確認 | CWE-338 | Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthentic |
| CVE-2026-61501 | Deferred | 未確認 | CWE-79 | Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a cra |
| CVE-2026-61502 | Deferred | 未確認 | CWE-352 | Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its anti-CSRF header check. A remote attacker can perform admin |
| CVE-2026-61503 | Deferred | 未確認 | CWE-204 | Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker |
| CVE-2026-61504 | Deferred | 未確認 | CWE-79 | Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web listing, and this listing can be forced by any browser via the ?get=basic parameter. A user w |
| CVE-2026-61505 | Deferred | 未確認 | CWE-22 | Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared f |
| CVE-2026-61511 | Deferred | 未確認 | CWE-95 | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows un |
| CVE-2026-61520 | Deferred | 未確認 | CWE-918 | Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vulnerability in the image proxy that allows authenticated |
| CVE-2026-61526 | Deferred | 未確認 | CWE-79 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interp |
| CVE-2026-61536 | Deferred | 未確認 | CWE-470, CWE-94 | Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool JSON objects from the rendered body of {% completion %} block |
| CVE-2026-61605 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-58655. Reason: This candidate is a duplicate of CVE-2026-58655. Notes: All CVE users should ref | |
| CVE-2026-61606 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61457. Reason: This candidate is a duplicate of CVE-2026-61457. Notes: All CVE users should ref | |
| CVE-2026-61609 | Deferred | 未確認 | CWE-770 | Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limiter defined in RouteServiceProvider::configureRateLimiting() a |
| CVE-2026-61613 | Deferred | 未確認 | CWE-306 | Cursor is a code editor built for programming with AI. Prior to the Cloud Agent fix on 03/31/2026, browser-enabled Cursor Cloud Agent sessions allowed attacker-controlled web conte |
| CVE-2026-61643 | Deferred | 未確認 | CWE-863 | FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can save a workflow node that points to another user's private |
| CVE-2026-61644 | Deferred | 未確認 | CWE-863 | FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat an |
| CVE-2026-61646 | Deferred | 未確認 | CWE-918 | FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta5, FastGPT's shared SSRF guard validates only the initial request URL before handing the request to axios, |
| CVE-2026-61684 | Deferred | 未確認 | CWE-798 | FastGPT is a knowledge-based AI application platform. In 4.15.0-beta4, FastGPT plugin invoke reverse-call endpoints under /api/invoke/* authenticate only by verifying a JWT signed |
| CVE-2026-61692 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: This candidate is a duplicate of CVE-2026-61454. Notes: All CVE users should ref | |
| CVE-2026-61710 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61453. Reason: This candidate is a duplicate of CVE-2026-61453. Notes: All CVE users should ref | |
| CVE-2026-61718 | Deferred | 未確認 | CWE-285, CWE-862 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb web UI BiscuitMiddleware authorization bypass list included t |
| CVE-2026-61736 | Deferred | 未確認 | CWE-942 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combined with allow_credentials=True in lightrag/api/lightra |
| CVE-2026-61740 | Deferred | 未確認 | CWE-287, CWE-798 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAG_API_KEY set but AUTH_ACCOUNTS unset, X-API-Key protection |
| CVE-2026-61828 | Deferred | 未確認 | CWE-276 | Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mys |
| CVE-2026-61829 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61452. Reason: This candidate is a duplicate of CVE-2026-61452. Notes: All CVE users should ref | |
| CVE-2026-61835 | Analyzed | 未確認 | CWE-918 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, the SSRF protection on Directus's file-import-from-URL feature can be bypassed usi |
| CVE-2026-61836 | Analyzed | 未確認 | CWE-524, CWE-639 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key derivation in api/src/utils/get-ca |
| CVE-2026-61839 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61451. Reason: This candidate is a duplicate of CVE-2026-61451. Notes: All CVE users should ref | |
| CVE-2026-61841 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61449. Reason: This candidate is a duplicate of CVE-2026-61449. Notes: All CVE users should ref | |
| CVE-2026-61857 | Analyzed | 未確認 | CWE-252 | ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with spec |
| CVE-2026-61858 | Analyzed | 未確認 | CWE-59 | ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallo |
| CVE-2026-61859 | Analyzed | 未確認 | CWE-59 | ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading |
| CVE-2026-61860 | Deferred | 未確認 | CWE-416 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memo |
| CVE-2026-61861 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures |
| CVE-2026-61862 | Deferred | 未確認 | CWE-125 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not print |
| CVE-2026-61863 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory l |
| CVE-2026-61864 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released. |
| CVE-2026-61865 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak occurs. |
| CVE-2026-61866 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG f |
| CVE-2026-61867 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image proce |
| CVE-2026-61868 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. Repeated triggering can lead to resourc |
| CVE-2026-61869 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to deni |
| CVE-2026-61870 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially |
| CVE-2026-61871 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an all |
| CVE-2026-61872 | Deferred | 未確認 | CWE-401 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters c |
| CVE-2026-61873 | Deferred | 未確認 | CWE-73 | Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Twig process |
| CVE-2026-61874 | Deferred | 未確認 | CWE-863 | filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in DeleteWithPathPrefix, allowing authenticated users to leave stale public shares behin |
| CVE-2026-61875 | Deferred | 未確認 | CWE-79 | luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. Attackers |
| CVE-2026-61876 | Awaiting Analysis | 未確認 | CWE-79 | LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCP |
| CVE-2026-61884 | Deferred | 未確認 | CWE-306 | The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in th |
| CVE-2026-61886 | Deferred | 未確認 | CWE-256 | Weintek cMT3092X HMI stores user account passwords in plaintext. |
| CVE-2026-61892 | Deferred | 未確認 | CWE-732 | Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. |
| CVE-2026-61893 | Deferred | 未確認 | CWE-125 | A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated me |
| CVE-2026-61900 | Deferred | 未確認 | CWE-434 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upl |
| CVE-2026-61901 | Deferred | 未確認 | CWE-601 | Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect. |
| CVE-2026-61943 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. |
| CVE-2026-61944 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions. |
| CVE-2026-61945 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. T |
| CVE-2026-61946 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions. |
| CVE-2026-61947 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions. |
| CVE-2026-61948 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions. |
| CVE-2026-61949 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Bookly <= 27.7 versions. |
| CVE-2026-61950 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions. |
| CVE-2026-61951 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. |
| CVE-2026-61952 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Sec |
| CVE-2026-61953 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions. |
| CVE-2026-61954 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. |
| CVE-2026-61955 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hannan گرویتی فرم فارسی persian-gravity-forms allows Blind SQL Injection.This |
| CVE-2026-61956 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in hamsalam ووسلام – همگام سازی ووکامرس و باسلام sync-basalam allows Cross Site Request Forgery.This issue affects ووسلام R |
| CVE-2026-61957 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions. |
| CVE-2026-61958 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security L |
| CVE-2026-61968 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through |
| CVE-2026-61970 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Au |
| CVE-2026-61971 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control S |
| CVE-2026-61972 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
| CVE-2026-61973 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
| CVE-2026-61975 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue aff |
| CVE-2026-61976 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.Th |
| CVE-2026-61977 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affec |
| CVE-2026-61981 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions. |
| CVE-2026-61983 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: |
| CVE-2026-61985 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec |
| CVE-2026-6212 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Privilege Abuse. This issue affects TeraMIS: from V03.26.01.14 |
| CVE-2026-62143 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion module of misp-modules. The module attempts to prevent requests to loopback, priva |
| CVE-2026-62144 | Awaiting Analysis | 未確認 | CWE-287 | An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative c |
| CVE-2026-62145 | Awaiting Analysis | 未確認 | CWE-269 | A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges. |
| CVE-2026-62147 | Awaiting Analysis | 未確認 | CWE-863 | The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticat |
| CVE-2026-62164 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60087. Reason: This candidate is a duplicate of CVE-2026-60087. Notes: All CVE users should ref | |
| CVE-2026-62165 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61446. Reason: This candidate is a duplicate of CVE-2026-61446. Notes: All CVE users should ref | |
| CVE-2026-62168 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61443. Reason: This candidate is a duplicate of CVE-2026-61443. Notes: All CVE users should ref | |
| CVE-2026-62169 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61430. Reason: This candidate is a duplicate of CVE-2026-61430. Notes: All CVE users should ref | |
| CVE-2026-62172 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61436. Reason: This candidate is a duplicate of CVE-2026-61436. Notes: All CVE users should ref | |
| CVE-2026-62173 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61433. Reason: This candidate is a duplicate of CVE-2026-61433. Notes: All CVE users should ref | |
| CVE-2026-62174 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61435. Reason: This candidate is a duplicate of CVE-2026-61435. Notes: All CVE users should ref | |
| CVE-2026-62175 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60091. Reason: This candidate is a duplicate of CVE-2026-60091. Notes: All CVE users should ref | |
| CVE-2026-62177 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60085. Reason: This candidate is a duplicate of CVE-2026-60085. Notes: All CVE users should ref | |
| CVE-2026-62178 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a duplicate of CVE-2026-61427. Notes: All CVE users should ref | |
| CVE-2026-62180 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61440. Reason: This candidate is a duplicate of CVE-2026-61440. Notes: All CVE users should ref | |
| CVE-2026-62183 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configured, or * the Flowable user workflow adapter is configured, be |
| CVE-2026-62184 | Deferred | 未確認 | CWE-116 | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to in |
| CVE-2026-62185 | Awaiting Analysis | 未確認 | CWE-1188 | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this u |
| CVE-2026-62186 | Analyzed | 未確認 | CWE-862, CWE-863 | OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiri |
| CVE-2026-62187 | Analyzed | 未確認 | CWE-863 | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform act |
| CVE-2026-62188 | Analyzed | 未確認 | CWE-863 | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement s |
| CVE-2026-62189 | Analyzed | 未確認 | CWE-367, CWE-59 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authori |
| CVE-2026-62190 | Analyzed | 未確認 | CWE-706, CWE-863 | OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their inte |
| CVE-2026-62191 | Analyzed | 未確認 | CWE-862, CWE-863 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling that allows lower-trust callers to perform actions requiring s |
| CVE-2026-62192 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stron |
| CVE-2026-62193 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected featur |
| CVE-2026-62194 | Analyzed | 未確認 | CWE-732, CWE-862 | OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to execute or persist actions be |
| CVE-2026-62195 | Analyzed | 未確認 | CWE-732 | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers to execute owner-only tools. A |
| CVE-2026-62196 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trus |
| CVE-2026-62197 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network de |
| CVE-2026-62198 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger |
| CVE-2026-62199 | Analyzed | 未確認 | CWE-184 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, |
| CVE-2026-62200 | Analyzed | 未確認 | CWE-184 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reacha |
| CVE-2026-62201 | Analyzed | 未確認 | CWE-918 | OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations bl |
| CVE-2026-62202 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Atta |
| CVE-2026-62203 | Analyzed | 未確認 | CWE-184 | OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lowe |
| CVE-2026-62205 | Analyzed | 未確認 | CWE-862 | OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and r |
| CVE-2026-62206 | Analyzed | 未確認 | CWE-862 | OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path c |
| CVE-2026-62207 | Analyzed | 未確認 | CWE-862 | OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requirin |
| CVE-2026-62208 | Analyzed | 未確認 | CWE-522 | OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input |
| CVE-2026-62209 | Analyzed | 未確認 | CWE-863 | OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. Wh |
| CVE-2026-62210 | Analyzed | 未確認 | CWE-770 | OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers w |
| CVE-2026-62211 | Analyzed | 未確認 | CWE-532 | OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should re |
| CVE-2026-62212 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected feature is enabled and reachable, a lower-trust caller or confi |
| CVE-2026-62213 | Analyzed | 未確認 | CWE-522 | OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. Attackers can |
| CVE-2026-62214 | Analyzed | 未確認 | CWE-522 | OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing |
| CVE-2026-62215 | Analyzed | 未確認 | CWE-345 | OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers c |
| CVE-2026-62216 | Analyzed | 未確認 | CWE-918 | OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach n |
| CVE-2026-62217 | Analyzed | 未確認 | CWE-863 | OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. When the feature is enabled and reachable, a lower-trust caller or con |
| CVE-2026-62218 | Analyzed | 未確認 | CWE-862 | OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust callers to bypass role-management check |
| CVE-2026-62219 | Analyzed | 未確認 | CWE-863 | OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass |
| CVE-2026-62220 | Analyzed | 未確認 | CWE-307 | OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected fe |
| CVE-2026-62221 | Analyzed | 未確認 | CWE-863 | OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. When the affected feature is enabled and reachable, a lowe |
| CVE-2026-62222 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control ov |
| CVE-2026-62223 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended |
| CVE-2026-62224 | Awaiting Analysis | 未確認 | CWE-290, CWE-863 | OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can p |
| CVE-2026-62225 | Analyzed | 未確認 | CWE-863 | OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers to execute or persist actions beyond thei |
| CVE-2026-62226 | Analyzed | 未確認 | CWE-918 | OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lo |
| CVE-2026-62227 | Analyzed | 未確認 | CWE-918 | OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers wit |
| CVE-2026-62228 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization |
| CVE-2026-62229 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authoriza |
| CVE-2026-62230 | Deferred | 未確認 | CWE-178 | Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive file types (.yaml, .php, .json, etc.) lack the [ |
| CVE-2026-62231 | Deferred | 未確認 | CWE-863 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator cla |
| CVE-2026-62232 | Deferred | 未確認 | CWE-862 | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence, not authorization, du |
| CVE-2026-62233 | Deferred | 未確認 | CWE-639, CWE-862 | grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints, allowing non-super api.users.write managers to escalate to |
| CVE-2026-62234 | Deferred | 未確認 | CWE-918 | Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or |
| CVE-2026-62235 | Deferred | 未確認 | CWE-636, CWE-862 | Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to |
| CVE-2026-62236 | Deferred | 未確認 | CWE-352 | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret frontend task, which regenerates and persists a new TOTP |
| CVE-2026-62237 | Deferred | 未確認 | CWE-1333 | Grav before 2.0.4 contains a regular expression denial of service (ReDoS) vulnerability in the regex_replace filter and function, which are allowlisted in the Twig content sandbox. |
| CVE-2026-62238 | Analyzed | 未確認 | CWE-89 | OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset di |
| CVE-2026-62239 | Deferred | 未確認 | CWE-59 | FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py that extracts NVIDIA |
| CVE-2026-62240 | Analyzed | 未確認 | CWE-918 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning t |
| CVE-2026-62241 | Analyzed | 未確認 | CWE-306, CWE-321 | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. Bec |
| CVE-2026-62242 | Deferred | 未確認 | CWE-918 | Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled heal |
| CVE-2026-62246 | Deferred | 未確認 | CWE-284, CWE-653 | Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a los |
| CVE-2026-62248 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61438. Reason: This candidate is a duplicate of CVE-2026-61438. Notes: All CVE users should ref | |
| CVE-2026-62287 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a duplicate of CVE-2026-61873. Notes: All CVE users should ref | |
| CVE-2026-62290 | Analyzed | 未確認 | CWE-863 | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. Fro |
| CVE-2026-62294 | Deferred | 未確認 | CWE-362, CWE-377 | Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creatin |
| CVE-2026-62299 | Analyzed | 未確認 | CWE-476 | CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response rules, edns0SetRespon |
| CVE-2026-6230 | Deferred | 未確認 | CWE-89 | The Tainacan plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geoquery' parameter in all versions up to and including 1.0.3 due to insufficient escapin |
| CVE-2026-62309 | Analyzed | 未確認 | CWE-476 | CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/proxypr |
| CVE-2026-62312 | Deferred | 未確認 | CWE-78 | 9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining |
| CVE-2026-62314 | Deferred | 未確認 | CWE-284 | Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.g |
| CVE-2026-62323 | Deferred | 未確認 | CWE-863 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does not enforce |
| CVE-2026-62324 | Deferred | 未確認 | CWE-79, CWE-83 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElement method fails to use isDangerousUrl to normalize javascri |
| CVE-2026-62325 | Deferred | 未確認 | CWE-306 | goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Passw |
| CVE-2026-62327 | Deferred | 未確認 | CWE-306, CWE-522 | 9Router through version 0.4.41 contains an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI pro |
| CVE-2026-62328 | Deferred | 未確認 | CWE-359, CWE-862 | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to access sensitive user data by sending requests to unp |
| CVE-2026-62343 | Analyzed | 未確認 | CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid ke |
| CVE-2026-62348 | Deferred | 未確認 | CWE-862 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL user to run KILL SSMI |
| CVE-2026-62349 | Deferred | 未確認 | CWE-121, CWE-787 | TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for on |
| CVE-2026-62350 | Deferred | 未確認 | CWE-94 | TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf privilege could upload a crafted shared library |
| CVE-2026-62351 | Deferred | 未確認 | CWE-125 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLe |
| CVE-2026-62353 | Deferred | 未確認 | CWE-125, CWE-126 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backsl |
| CVE-2026-62355 | Deferred | 未確認 | CWE-269 | TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a Data Reader admin_user on a TDengine Cloud DB instance could run cre |
| CVE-2026-62361 | Deferred | 未確認 | CWE-89 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parame |
| CVE-2026-62363 | Analyzed | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation |
| CVE-2026-62378 | Deferred | 未確認 | CWE-79 | RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and components/ob |
| CVE-2026-62386 | Deferred | 未確認 | CWE-598 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route (JwtAuthenticator::extractBear |
| CVE-2026-62387 | Deferred | 未確認 | CWE-942 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default CORS configuration on all responses, including authenticated |
| CVE-2026-62389 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-48779. | |
| CVE-2026-62390 | Modified | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table catalog may cause the injection t |
| CVE-2026-62391 | Analyzed | 未確認 | CWE-22, CWE-27 | The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.loca |
| CVE-2026-62392 | Modified | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job config parameters to OS comman |
| CVE-2026-62393 | Modified | 未確認 | CWE-280 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to |
| CVE-2026-62414 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page l |
| CVE-2026-62415 | Deferred | 未確認 | CWE-1188 | Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthent |
| CVE-2026-62418 | Analyzed | 未確認 | CWE-918 | Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via Connectors and Resources check. This issue affects Apache Syncope: from 3.0. |
| CVE-2026-62422 | Analyzed | 未確認 | CWE-306 | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to adm |
| CVE-2026-62423 | Deferred | 未確認 | CWE-130 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsi |
| CVE-2026-62424 | Deferred | 未確認 | CWE-130 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsi |
| CVE-2026-62425 | Deferred | 未確認 | CWE-20 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in libfsi |
| CVE-2026-62426 | Deferred | 未確認 | CWE-412, CWE-667 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform operatio |
| CVE-2026-62427 | Deferred | 未確認 | CWE-284, CWE-305 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform operatio |
| CVE-2026-62428 | Deferred | 未確認 | CWE-367 | When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the refere |
| CVE-2026-62429 | Deferred | 未確認 | CWE-362 | Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchroni |
| CVE-2026-62430 | Deferred | 未確認 | CWE-362 | Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take t |
| CVE-2026-62431 | Deferred | 未確認 | CWE-369 | The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault. |
| CVE-2026-62432 | Deferred | 未確認 | CWE-362 | The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in derefer |
| CVE-2026-62433 | Deferred | 未確認 | CWE-665 | Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain opera |
| CVE-2026-62434 | Deferred | 未確認 | CWE-787 | A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. |
| CVE-2026-62435 | Deferred | 未確認 | CWE-362 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant Table v2 came the r |
| CVE-2026-62436 | Deferred | 未確認 | CWE-362 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant Table v2 came the r |
| CVE-2026-62443 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62444 | Analyzed | 未確認 | CWE-285, CWE-601 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62445 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Eas |
| CVE-2026-62447 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-62451 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily e |
| CVE-2026-62453 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62456 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-62464 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-62465 | Analyzed | 未確認 | CWE-284, CWE-400 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.9-12.2.15. Easily exploita |
| CVE-2026-62466 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-62468 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.14-12.2.15. Ea |
| CVE-2026-62469 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.14-12.2.15. Ea |
| CVE-2026-62470 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Manager Self-Service). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-62472 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Easily ex |
| CVE-2026-62473 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-62474 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-62476 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62478 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-62479 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-62480 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-62482 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-62483 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-62484 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-62486 | Analyzed | 未確認 | CWE-284, CWE-640 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-62487 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62488 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62489 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-62490 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-62493 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Difficult to |
| CVE-2026-62494 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-62495 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is |
| CVE-2026-62496 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily ex |
| CVE-2026-62497 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Easil |
| CVE-2026-62498 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.15. Easily |
| CVE-2026-62503 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-62504 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-62505 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-62507 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-62508 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-6251 | Deferred | 未確認 | CWE-89 | The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection in versions up to and including 3.5.5. This is due to the fetch_custom_field() func |
| CVE-2026-62513 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected a |
| CVE-2026-62514 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected a |
| CVE-2026-62515 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-62516 | Analyzed | 未確認 | CWE-284, CWE-89 | Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-62517 | Analyzed | 未確認 | CWE-345, CWE-601, CWE-640 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-62518 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-400 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-62519 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-284, CWE-732 | Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-62521 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.7-12.2.15. Easily exploit |
| CVE-2026-62524 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-62525 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-62527 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-89 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-62528 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-89 | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-62530 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu |
| CVE-2026-62534 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.11-12.2.15. Easily |
| CVE-2026-62542 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-62546 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily e |
| CVE-2026-62547 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-62548 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62549 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-62556 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploita |
| CVE-2026-62557 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-62559 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62560 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-62561 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62562 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62563 | Analyzed | 未確認 | CWE-285, CWE-352, CWE-601 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily ex |
| CVE-2026-62565 | Analyzed | 未確認 | CWE-200, CWE-269, CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62567 | Analyzed | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-62574 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected |
| CVE-2026-62641 | Analyzed | 未確認 | CWE-770 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size. |
| CVE-2026-62642 | Analyzed | 未確認 | CWE-835 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNE |
| CVE-2026-62643 | Analyzed | 未確認 | CWE-918 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure |
| CVE-2026-62644 | Analyzed | 未確認 | CWE-290 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to accou |
| CVE-2026-62655 | Deferred | 未確認 | CWE-121 | A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network co |
| CVE-2026-62656 | Deferred | 未確認 | CWE-20 | A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could |
| CVE-2026-62657 | Deferred | 未確認 | CWE-599 | A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized pers |
| CVE-2026-62658 | Deferred | 未確認 | CWE-20 | A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the |
| CVE-2026-62659 | Deferred | 未確認 | CWE-20 | A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the |
| CVE-2026-62663 | Deferred | 未確認 | CWE-22 | Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untruste |
| CVE-2026-6267 | Analyzed | 未確認 | CWE-201 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have |
| CVE-2026-62683 | Deferred | 未確認 | CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser can leave a |
| CVE-2026-62685 | Deferred | 未確認 | CWE-647, CWE-706 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser builds new u |
| CVE-2026-62764 | Analyzed | 未確認 | CWE-274 | Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gr |
| CVE-2026-6280 | Deferred | 未確認 | CWE-213 | Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Proper |
| CVE-2026-62825 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62826 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-62828 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-6283 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This i |
| CVE-2026-62835 | Analyzed | 未確認 | CWE-285 | Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62843 | Deferred | 未確認 | CWE-22, CWE-23 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's arch |
| CVE-2026-62845 | Deferred | 未確認 | CWE-89 | Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied |
| CVE-2026-62946 | Analyzed | 未確認 | CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX f |
| CVE-2026-62947 | Analyzed | 未確認 | CWE-22 | OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session |
| CVE-2026-62948 | Analyzed | 未確認 | CWE-117, CWE-150, CWE-79 | OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefil |
| CVE-2026-62959 | Deferred | 未確認 | CWE-125, CWE-195 | Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect <URL> and exposes a plaintext-TCP listen |
| CVE-2026-62963 | Deferred | 未確認 | CWE-409 | Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket transport with uni_websocket.compression enabled enforced uni_ |
| CVE-2026-62994 | Analyzed | 未確認 | CWE-248, CWE-755 | CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with |
| CVE-2026-62995 | Deferred | 未確認 | CWE-345 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. in versions 1.7.1 and prior, joserfc accepts JWTs with |
| CVE-2026-62999 | Deferred | 未確認 | CWE-180, CWE-22 | Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments or encoded path separators in a template URL c |
| CVE-2026-63030 | Analyzed | 掲載 | CWE-436 | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (C |
| CVE-2026-63033 | Deferred | 未確認 | CWE-125 | A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of t |
| CVE-2026-63035 | Awaiting Analysis | 未確認 | CWE-416 | A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbi |
| CVE-2026-63047 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 |
| CVE-2026-63048 | Deferred | 未確認 | CWE-434 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authen |
| CVE-2026-63071 | Analyzed | 未確認 | CWE-653 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class con |
| CVE-2026-63077 | Analyzed | 掲載 | CWE-502 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol |
| CVE-2026-63080 | Deferred | 未確認 | CWE-89 | Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by |
| CVE-2026-63081 | Deferred | 未確認 | CWE-79 | Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privile |
| CVE-2026-63082 | Deferred | 未確認 | CWE-862 | Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to |
| CVE-2026-63085 | Deferred | 未確認 | CWE-863 | Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenf |
| CVE-2026-63086 | Deferred | 未確認 | CWE-918 | text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauth |
| CVE-2026-63087 | Awaiting Analysis | 未確認 | CWE-306 | Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the inte |
| CVE-2026-63088 | Deferred | 未確認 | CWE-918 | stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by |
| CVE-2026-63089 | Deferred | 未確認 | CWE-338, CWE-613 | WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers |
| CVE-2026-63090 | Analyzed | 未確認 | CWE-122 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low-privilege attackers to achieve arbitrar |
| CVE-2026-63091 | Analyzed | 未確認 | CWE-126, CWE-190 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attacke |
| CVE-2026-63092 | Deferred | 未確認 | CWE-862 | kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerability that allows any authenticated Kirby Panel user to retrieve the full plaintext |
| CVE-2026-63093 | Analyzed | 未確認 | CWE-426 | Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in t |
| CVE-2026-63094 | Deferred | 未確認 | CWE-345, CWE-601 | SigNoz before 0.134.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated attackers to steal session tokens from any user on instance |
| CVE-2026-63095 | Deferred | 未確認 | CWE-639 | Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier b |
| CVE-2026-63096 | Deferred | 未確認 | CWE-918 | Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary |
| CVE-2026-63097 | Deferred | 未確認 | CWE-863 | Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticated local users to acc |
| CVE-2026-63098 | Analyzed | 未確認 | CWE-306 | TheHive through 4.1.24 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by sending a |
| CVE-2026-63099 | Deferred | 未確認 | CWE-639 | TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the attachment download endpoints that allows any authenticated user to access attachments belo |
| CVE-2026-63100 | Deferred | 未確認 | CWE-862 | Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploit |
| CVE-2026-63101 | Deferred | 未確認 | CWE-306 | Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including |
| CVE-2026-63102 | Analyzed | 未確認 | CWE-915 | rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role f |
| CVE-2026-63107 | Deferred | 未確認 | CWE-918 | LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the serv |
| CVE-2026-63108 | Deferred | 未確認 | CWE-184 | Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting com |
| CVE-2026-63118 | Deferred | 未確認 | CWE-346, CWE-350 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not vali |
| CVE-2026-63119 | Deferred | 未確認 | CWE-400, CWE-770 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem |
| CVE-2026-63136 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a speciall |
| CVE-2026-63139 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can exploit an uncont |
| CVE-2026-63140 | Analyzed | 未確認 | CWE-617 | Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value in |
| CVE-2026-63141 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges |
| CVE-2026-63142 | Analyzed | 未確認 | CWE-863 | Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured |
| CVE-2026-63143 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse (CAPEC-122). A user with limited feature privileges can access workflo |
| CVE-2026-63144 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with |
| CVE-2026-63145 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained |
| CVE-2026-63175 | Deferred | 未確認 | CWE-613 | PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objec |
| CVE-2026-63220 | Deferred | 未確認 | CWE-348 | CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure() trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming r |
| CVE-2026-63221 | Deferred | 未確認 | CWE-89 | CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound values from where() conditions into generated SQL while ignor |
| CVE-2026-63222 | Deferred | 未確認 | CWE-22 | CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument uses the client-provided filename without sanitization, allowi |
| CVE-2026-63223 | Deferred | 未確認 | CWE-434 | CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently enforce a safe client filename extension, allow |
| CVE-2026-63226 | Deferred | 未確認 | CWE-923 | Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When |
| CVE-2026-63227 | Deferred | 未確認 | CWE-434 | An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible |
| CVE-2026-63228 | Deferred | 未確認 | CWE-434 | An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registratio |
| CVE-2026-63229 | Deferred | 未確認 | CWE-89 | A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitiv |
| CVE-2026-63230 | Deferred | 未確認 | CWE-89 | A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiab |
| CVE-2026-63231 | Deferred | 未確認 | CWE-89 | A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to rea |
| CVE-2026-63232 | Deferred | 未確認 | CWE-89 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data pass |
| CVE-2026-63233 | Deferred | 未確認 | CWE-89 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data pas |
| CVE-2026-63234 | Deferred | 未確認 | CWE-89 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed |
| CVE-2026-63235 | Deferred | 未確認 | CWE-284 | An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to forcibly terminate the session of any user given their email address via the login ki |
| CVE-2026-63236 | Deferred | 未確認 | CWE-284 | An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position |
| CVE-2026-63237 | Deferred | 未確認 | CWE-347 | A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass the |
| CVE-2026-63238 | Deferred | 未確認 | CWE-287 | An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID |
| CVE-2026-63239 | Deferred | 未確認 | CWE-798 | A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling mali |
| CVE-2026-63240 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assess |
| CVE-2026-63241 | Deferred | 未確認 | CWE-639 | An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the course completion progress of any other user without authorisation, disc |
| CVE-2026-63242 | Deferred | 未確認 | CWE-639 | A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the |
| CVE-2026-63259 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data fro |
| CVE-2026-63260 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can tr |
| CVE-2026-63261 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can send a specially c |
| CVE-2026-63262 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control. |
| CVE-2026-63263 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially |
| CVE-2026-63264 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product fron |
| CVE-2026-63265 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did |
| CVE-2026-63280 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce t |
| CVE-2026-63281 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries. |
| CVE-2026-63301 | Deferred | 未確認 | CWE-602 | In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language |
| CVE-2026-63302 | Deferred | 未確認 | CWE-98 | Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files loc |
| CVE-2026-63303 | Deferred | 未確認 | CWE-23 | A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash (../) sequences before resolvi |
| CVE-2026-63304 | Deferred | 未確認 | CWE-78 | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the listFFmpegProcesses() function interpolates unsanitized keyword |
| CVE-2026-63305 | Deferred | 未確認 | CWE-78 | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callback parameters are concatenated into a shell command wi |
| CVE-2026-63306 | Deferred | 未確認 | CWE-918 | stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolution f |
| CVE-2026-63307 | Deferred | 未確認 | CWE-639 | Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExiste |
| CVE-2026-63308 | Analyzed | 未確認 | CWE-129 | Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger a |
| CVE-2026-63309 | Deferred | 未確認 | CWE-863 | SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing authenticated users to leak the relative ordering of restricted field values. Atta |
| CVE-2026-63313 | Deferred | 未確認 | CWE-918 | 9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The endpoint accepts a user-controlled url parameter and passes it |
| CVE-2026-63317 | Analyzed | 未確認 | CWE-470 | Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three c |
| CVE-2026-63358 | Analyzed | 未確認 | CWE-732 | FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion |
| CVE-2026-63359 | Analyzed | 未確認 | CWE-89 | The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the logi |
| CVE-2026-6336 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a |
| CVE-2026-63362 | Awaiting Analysis | 未確認 | CWE-191 | An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet. |
| CVE-2026-63397 | Awaiting Analysis | 未確認 | CWE-116 | remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The ma |
| CVE-2026-63428 | Deferred | 未確認 | CWE-20, CWE-915 | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name, value}]` array from the submitter and stores it verba |
| CVE-2026-63429 | Deferred | 未確認 | CWE-306, CWE-434 | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no global guard, no form-context validation, no `openToken` req |
| CVE-2026-63453 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute |
| CVE-2026-63454 | Analyzed | 未確認 | CWE-22 | An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location |
| CVE-2026-6352 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have all |
| CVE-2026-63550 | Awaiting Analysis | 未確認 | CWE-125 | The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over a |
| CVE-2026-63559 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensi |
| CVE-2026-63683 | Deferred | 未確認 | CWE-290 | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing rem |
| CVE-2026-63684 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator act |
| CVE-2026-63685 | Deferred | 未確認 | CWE-284 | Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permissio |
| CVE-2026-6371 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This issue affects LimRAD N |
| CVE-2026-63720 | Deferred | 未確認 | CWE-94 | datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplyi |
| CVE-2026-63727 | Deferred | 未確認 | CWE-648 | Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able |
| CVE-2026-63728 | Awaiting Analysis | 未確認 | CWE-1336 | Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and |
| CVE-2026-63729 | Deferred | 未確認 | CWE-416 | The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attac |
| CVE-2026-63730 | Deferred | 未確認 | CWE-918 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to make requests to arbitrary internal networ |
| CVE-2026-63731 | Deferred | 未確認 | CWE-918 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplyi |
| CVE-2026-63732 | Deferred | 未確認 | CWE-78 | 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticates any fresh installation, a bypass of the LOCAL_ONLY ne |
| CVE-2026-63733 | Analyzed | 未確認 | CWE-863 | SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers w |
| CVE-2026-63734 | Analyzed | 未確認 | CWE-20 | SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading |
| CVE-2026-63735 | Analyzed | 未確認 | CWE-639 | SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints in different namespaces/databas |
| CVE-2026-63736 | Analyzed | 未確認 | CWE-918 | SurrealDB before 3.2.0 contains a server-side request forgery vulnerability in the JWKS fetcher that validates only the URL hostname string against allow-lists without checking res |
| CVE-2026-63737 | Analyzed | 未確認 | CWE-674 | SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries containing long chains of operators. Attackers |
| CVE-2026-63738 | Analyzed | 未確認 | CWE-863 | SurrealDB versions 3.1.0 before 3.1.5 fail to enforce field-level SELECT permissions when records are accessed through graph-edge or back-reference traversals. Attackers with table |
| CVE-2026-63739 | Analyzed | 未確認 | CWE-22 | SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files access |
| CVE-2026-63740 | Analyzed | 未確認 | CWE-863 | SurrealDB versions before 3.1.4 fail to properly enforce SELECT permissions on array elements (field.*) for record users, leaking denied array elements instead of hiding them. Atta |
| CVE-2026-63741 | Analyzed | 未確認 | CWE-862 | SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create |
| CVE-2026-63742 | Analyzed | 未確認 | CWE-863 | SurrealDB versions before 3.1.0 contain a field-level SELECT permission bypass vulnerability in indexed COUNT fast paths. Attackers can execute COUNT queries on indexed fields with |
| CVE-2026-63743 | Analyzed | 未確認 | CWE-918 | SurrealDB before 3.1.0 contains a capability bypass vulnerability in HTTP redirect handling that allows authenticated users to circumvent port-scoped --deny-net rules. Attackers ca |
| CVE-2026-63744 | Analyzed | 未確認 | CWE-918 | SurrealDB before 3.1.5 contains a server-side request forgery vulnerability in the JWKS fetcher that follows HTTP redirects without re-validating redirect targets against network c |
| CVE-2026-63745 | Analyzed | 未確認 | CWE-639 | SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability where authenticated users can spoof composite record-id field values by writing to editable body field |
| CVE-2026-63746 | Analyzed | 未確認 | CWE-200 | SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachab |
| CVE-2026-63747 | Analyzed | 未確認 | CWE-248 | SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is set without a namespace. Unauthenticated attackers can send |
| CVE-2026-63748 | Analyzed | 未確認 | CWE-209 | SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE access can read field values hidden by field-level SELECT perm |
| CVE-2026-63749 | Analyzed | 未確認 | CWE-863 | SurrealDB versions before 3.1.0 contain an authentication bypass vulnerability in LIVE SELECT subscriptions where permission expressions referencing $value, $before, $after, or $ev |
| CVE-2026-63750 | Analyzed | 未確認 | CWE-770 | SurrealDB versions before 3.1.0 fail to apply the SURREAL_WEBSOCKET_MAX_MESSAGE_SIZE limit to anonymous /sql WebSocket connections, allowing attackers to buffer unbounded frames in |
| CVE-2026-63751 | Analyzed | 未確認 | CWE-863 | SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers c |
| CVE-2026-63752 | Analyzed | 未確認 | CWE-285 | SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge reco |
| CVE-2026-63753 | Analyzed | 未確認 | CWE-613 | SurrealDB before 3.1.0 fails to refresh authentication state in LIVE SELECT subscriptions when session state changes. Attackers can continue receiving real-time notifications under |
| CVE-2026-63754 | Analyzed | 未確認 | CWE-754 | SurrealDB versions before 3.1.0 contain a denial of service vulnerability where malicious LIVE queries with WHERE clauses that evaluate to errors cause all CREATE, UPDATE, and DELE |
| CVE-2026-63755 | Analyzed | 未確認 | CWE-863 | SurrealDB before 3.1.0 evaluates user-supplied WHERE clauses in SELECT statements (and SET/MERGE/CONTENT/PATCH clauses in UPDATE, UPSERT, INSERT ON DUPLICATE KEY UPDATE, and RELATE |
| CVE-2026-63756 | Analyzed | 未確認 | CWE-362 | SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit authenticated session s |
| CVE-2026-63757 | Analyzed | 未確認 | CWE-306 | SurrealDB versions before 3.1.0 contain a session hijacking vulnerability where the HTTP /rpc sessions method returns attached session UUIDs without authentication and accepts arbi |
| CVE-2026-63758 | Analyzed | 未確認 | CWE-862 | SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability in the KILL statement that allows authenticated database users to terminate other users' LIVE SELECT s |
| CVE-2026-63759 | Analyzed | 未確認 | CWE-674 | SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply |
| CVE-2026-63760 | Analyzed | 未確認 | CWE-674 | SurrealDB before 3.1.0 fails to enforce the configured recursion depth limit in the value and JSON parser when processing nested braces, brackets, or parentheses. Unauthenticated a |
| CVE-2026-63761 | Analyzed | 未確認 | CWE-327 | SurrealDB before 3.1.0 silently substitutes the ES384 algorithm when a JWT access method is configured with ALGORITHM ES512 (DEFINE ACCESS ... TYPE JWT ALGORITHM ES512), because th |
| CVE-2026-63762 | Analyzed | 未確認 | CWE-476 | SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scriptin |
| CVE-2026-63763 | Analyzed | 未確認 | CWE-639 | SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileged users (e.g., those with the database editor role) can cre |
| CVE-2026-63764 | Analyzed | 未確認 | CWE-918 | LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, |
| CVE-2026-63765 | Deferred | 未確認 | CWE-306 | Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blob |
| CVE-2026-63766 | Deferred | 未確認 | CWE-78 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox val |
| CVE-2026-63767 | Deferred | 未確認 | CWE-502 | ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by |
| CVE-2026-63768 | Deferred | 未確認 | CWE-601 | cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback endpoint that allows attackers to redirect users to arbitrary URLs by crafting mali |
| CVE-2026-63769 | Deferred | 未確認 | CWE-918 | Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP reque |
| CVE-2026-63770 | Deferred | 未確認 | CWE-348 | Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by |
| CVE-2026-63771 | Deferred | 未確認 | CWE-113 | Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to manipulate cookie attributes by injecting arbitrary values through the unsanitized X-Forward |
| CVE-2026-63793 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before cop |
| CVE-2026-63794 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path In sev_dbg_crypt(), the per-iteration transfer |
| CVE-2026-63795 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to fals |
| CVE-2026-63796 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2_validate_gd_parent() only bounds bg_bits against the pa |
| CVE-2026-63797 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly allocated eptdev in |
| CVE-2026-63798 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove The driver allocates domain g |
| CVE-2026-63799 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path In mm_cid_fixup_cpus_to_tasks(), when rq |
| CVE-2026-63800 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layo |
| CVE-2026-63801 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt() goes straight from tipc_beare |
| CVE-2026-63802 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, |
| CVE-2026-63803 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP control protocol (LCP/IPCP/IPV6CP) embedded |
| CVE-2026-63804 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU callback from gfs2_qd_dispose( |
| CVE-2026-63805 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument nx_crypto_ctx_shash_exit calls nx_crypto_ctx_exit with crypto_sha | |
| CVE-2026-63806 | Modified | 未確認 | CWE-400, CWE-617 | In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Drop a BUG_ON() that has b |
| CVE-2026-63807 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the |
| CVE-2026-63808 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer_head obtai |
| CVE-2026-63809 | Analyzed | 未確認 | CWE-763, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_handler() allocates its temporary sysctl buff |
| CVE-2026-63810 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel | |
| CVE-2026-63811 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fs_write | |
| CVE-2026-63812 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() When __destroy_extent_node() sets the ino | |
| CVE-2026-63813 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" This reverts commit 9609dd7047 | |
| CVE-2026-63814 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr | |
| CVE-2026-63815 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, | |
| CVE-2026-63816 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - ioctl(F2FS_IOC_GARBAGE_COLLECT_RANGE) - shrink | |
| CVE-2026-63817 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled F2FS_COMPRESS_INO() uses NM_I(sbi)->max_nid as the synth | |
| CVE-2026-63818 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fs_recover_orphan_inodes() trusts the orphan block entry_count when | |
| CVE-2026-63819 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcod | |
| CVE-2026-6382 | Deferred | 未確認 | The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plu | |
| CVE-2026-63820 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fs_read_data_large_folio() can keep a read bio ac | |
| CVE-2026-63821 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtw_usb_write_port() fails to submit a USB Reque | |
| CVE-2026-63822 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, | |
| CVE-2026-63823 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() B: KEYCTL_INSTANTIATE_IOV ===== |
| CVE-2026-63824 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incor |
| CVE-2026-63825 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global | |
| CVE-2026-63826 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in store_modes() store_modes() replaces a framebuffer's modelist with modes from use | |
| CVE-2026-63827 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aa_replace_profiles() walks ns->rawdata_list to dedup the i | |
| CVE-2026-63828 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg()/sendto() with MSG_FASTOPEN is a comb | |
| CVE-2026-63829 | Analyzed | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at mos |
| CVE-2026-63830 | Analyzed | 未確認 | CWE-269, CWE-863 | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms The sk_msg sg.copy bitmap is part of the scatterlist entry o |
| CVE-2026-63831 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth() |
| CVE-2026-63832 | Analyzed | 未確認 | CWE-662, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt76_sta_add Since mt7925_mac_sta_add publishes wcid, add publish check |
| CVE-2026-63833 | Analyzed | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reserved $LX* xattrs NTFS3 uses $LXUID, $LXGID, $LXMOD and $LXDEV as |
| CVE-2026-63834 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: restrict number of unacked list entries When the unacked_list is unbound, an attacker co | |
| CVE-2026-63835 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is corre | |
| CVE-2026-63836 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd The cwnd is always MSS <= cwnd <= 0x20000000. But the | |
| CVE-2026-63837 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output ena_phc_gettimex64() is setting the output pa | |
| CVE-2026-63838 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] component_dais[RSND_MAX_COMPONENT] is initi | |
| CVE-2026-63839 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() lwmi_dev_evaluate_int() leaks out | |
| CVE-2026-63840 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring JPEG rings do not support 64-bit user fence writes, re |
| CVE-2026-63841 | Analyzed | 未確認 | CWE-20, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring JPEG rings do not support 64-bit user fence writes, re |
| CVE-2026-63842 | Analyzed | 未確認 | CWE-20, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring JPEG rings do not support 64-bit user fence writes, re |
| CVE-2026-63843 | Analyzed | 未確認 | CWE-20, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring JPEG rings do not support 64-bit user fence writes, re |
| CVE-2026-63844 | Analyzed | 未確認 | CWE-20, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring JPEG rings do not support 64-bit user fence writes, re |
| CVE-2026-63845 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, reje |
| CVE-2026-63846 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring JPEG rings do not support 64-bit user fence writes, reje |
| CVE-2026-63847 | Analyzed | 未確認 | CWE-20, CWE-754 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reje |
| CVE-2026-63848 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reje |
| CVE-2026-63849 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring VCN encoder and decoder rings do not support 64-bit |
| CVE-2026-63850 | Analyzed | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not support 64-bit |
| CVE-2026-63851 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not support 64-bit |
| CVE-2026-63852 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encoder and decoder rings do not support 64-bit |
| CVE-2026-63853 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring VCN encoder and decoder rings do not support 64-bit us |
| CVE-2026-63854 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings VCN encoder and decoder rings do not support 64-b |
| CVE-2026-63855 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings VCN encoder and decoder rings do not support 64-b |
| CVE-2026-63856 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-b |
| CVE-2026-63857 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() The transmit loop in airoha_dev_x | |
| CVE-2026-63858 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactions for device deletions Restore the flag that indicates that the hook |
| CVE-2026-63859 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() Similar to airoha_qdma_cleanup_rx_queue(), res | |
| CVE-2026-63860 | Analyzed | 未確認 | CWE-170 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These attributes are evaluated as c-string (passed to strcmp), but NLA_STRING |
| CVE-2026-63861 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback mtk_snand_probe() registers the on | |
| CVE-2026-63862 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtk_pcie_setup_irq(), the IRQ domains ar | |
| CVE-2026-63863 | Undergoing Analysis | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() There is a unbalanced lock/unlock to gpusvm notifier |
| CVE-2026-63864 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit_tailcall_insn Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls | |
| CVE-2026-63865 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called u | |
| CVE-2026-63866 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() Clear WCID pointer removing the sta lin | |
| CVE-2026-63867 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcv_wnd The MPTCP output path access locklessly the MPTCP-level ack_s |
| CVE-2026-63868 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr The receive-side GARP attribute parser comput | |
| CVE-2026-63869 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap When parsing the radiotap header o |
| CVE-2026-63870 | Undergoing Analysis | 未確認 | CWE-119 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates a non-IPv |
| CVE-2026-63871 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls iso_connect_bis(), iso_connect_cis(), is | |
| CVE-2026-63872 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63873 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() aie2_populate_range() jumps back to the a | |
| CVE-2026-63874 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rx_retry cancellation It's possible that sequencing betwee | |
| CVE-2026-63875 | Undergoing Analysis | 未確認 | CWE-459 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD tabl |
| CVE-2026-63876 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash from happening as the first serial port is initia | |
| CVE-2026-63877 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash from happening as the first serial port is initia | |
| CVE-2026-63878 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO kvcalloc(args->num_entries, sizeof(*vm_entries), GFP_ | |
| CVE-2026-63879 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_pages The notifier sequence must only be read once or otherwise we could |
| CVE-2026-63880 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_INFO branc | |
| CVE-2026-63881 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger get_queue_ids() computes array_size = num_ |
| CVE-2026-63882 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bug in svm_range_set_attr The process_info could be NULL if user doesn't call kfd | |
| CVE-2026-63883 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ When uart_flush_buffer() runs be | |
| CVE-2026-63884 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling ttm_bo_va |
| CVE-2026-63885 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and handle_delete drm_gem_change_handle_ioctl leaves the old handle li |
| CVE-2026-63886 | Analyzed | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAP_R length before base64 decode chap_server_compute_hash() allocates client_d |
| CVE-2026-63887 | Analyzed | 未確認 | CWE-120, CWE-122 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output() concatenat |
| CVE-2026-63888 | Undergoing Analysis | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in the Text- |
| CVE-2026-63889 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that ca |
| CVE-2026-63890 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker drivers/scsi/fcoe/fcoe_ctlr.c::fcoe_ctlr_r | |
| CVE-2026-63891 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() A DIRECTORY entry's value field is use | |
| CVE-2026-63892 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow On the non-root path, __tb_property_pars | |
| CVE-2026-63893 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() entry->value is u32 and entry->length is u |
| CVE-2026-63894 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: serialize DMABUF cancel against request completion ffs_epfile_dmabuf_io_complete() calls us | |
| CVE-2026-63895 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: copy only received bytes on short ep0 read ffs_ep0_read() allocates its control-OUT data bu | |
| CVE-2026-63896 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling The WebUSB GET_URL handler in composi | |
| CVE-2026-63897 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size | |
| CVE-2026-63898 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum transfer siz | |
| CVE-2026-63899 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packe | |
| CVE-2026-6390 | Awaiting Analysis | 未確認 | CWE-134 | A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename |
| CVE-2026-63900 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa4 | |
| CVE-2026-63901 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size | |
| CVE-2026-63902 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_read_int_callback() parses the interrupt-in | |
| CVE-2026-63903 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkin_sa: validate interrupt status length The Belkin interrupt callback treats interrupt data a | |
| CVE-2026-63904 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actual_length for interrupt-IN notifications USBTMC devices can use an optional interru | |
| CVE-2026-63905 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove due to race condition This patch follows up Zheng Wang's 20 | |
| CVE-2026-63906 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called pre | |
| CVE-2026-63907 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory uio_pci_sva allocates struct uio_pci_sva_de | |
| CVE-2026-63908 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem When a configuration file provides an object s | |
| CVE-2026-63909 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Commit d07b26f39246 ("ksmbd: require minimu | |
| CVE-2026-63910 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: fix UAF in dma_buf_fd() tracepoint Once FD_ADD() returns, the fd is live in the file descriptor table | |
| CVE-2026-63911 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs iptfs_clone_state() clones the IPTFS mode data with kmemdup( | |
| CVE-2026-63912 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in esp_ |
| CVE-2026-63913 | Undergoing Analysis | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavio |
| CVE-2026-63914 | Undergoing Analysis | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrm_send_migrate() in net/xfrm/xfrm_user.c and pfkey_send |
| CVE-2026-63915 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfc_hci_recv_from_llc() and nci_hci_data_received_ | |
| CVE-2026-63916 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_mode() wacom_hid_set_device_mode() currently assumes that th |
| CVE-2026-63917 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink(). ip netns add ns1 ip netns add ns2 ip -n ns1 link add vti6_test |
| CVE-2026-63918 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname A reader in l2tp_session_get_by_ifname() can ret | |
| CVE-2026-63919 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transport-mode reinjection stores a struct net p |
| CVE-2026-63920 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HO |
| CVE-2026-63921 | Undergoing Analysis | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). After patch 1/2 in this series, vti6_update() unlinks and |
| CVE-2026-63922 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while |
| CVE-2026-63923 | Undergoing Analysis | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() i |
| CVE-2026-63924 | Analyzed | 未確認 | CWE-416, CWE-822 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can c |
| CVE-2026-63925 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsec_post_decrypt(), when pn is U32_MAX, pn + 1 overfl |
| CVE-2026-63926 | Analyzed | 未確認 | CWE-190, CWE-681 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data When bpf_msg_push_data() inserts data in the middl |
| CVE-2026-63927 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usb_hcd_giveb |
| CVE-2026-63928 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at lea | |
| CVE-2026-63929 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() iio_buffer_enqueue_dmabuf() allocates a struct | |
| CVE-2026-63930 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the err_put_buffers cleanup path of iio_hw_consu | |
| CVE-2026-63931 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: fix division by zero in write_raw Add a zero check for val2 before using it as a divisor | |
| CVE-2026-63932 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19b_receive_buf() appends each serdev chunk into the | |
| CVE-2026-63933 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16260: fix division by zero in write_raw Add a validation check for the sampling frequency valu | |
| CVE-2026-63934 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200_read_all_channels() takes `__be16 *buf' | |
| CVE-2026-63935 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: nxp-sar-adc: fix division by zero in write_raw Add a validation check for the sampling frequency val | |
| CVE-2026-63936 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358_read_imp In mt6358_read_imp(), the variable val_v is pa | |
| CVE-2026-63937 | Undergoing Analysis | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Use READ_ONCE() when reading entries/in |
| CVE-2026-63938 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Page State Change (P |
| CVE-2026-63939 | Undergoing Analysis | 未確認 | CWE-122 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area When setting the length of the GHCB scrat |
| CVE-2026-63940 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or count ' |
| CVE-2026-63941 | Analyzed | 未確認 | CWE-20, CWE-862 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor ZCR_EL2 can be updated by a VHE guest hypervi |
| CVE-2026-63942 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: parport: Fix race between port and client registration The parport subsystem registers port devices before the |
| CVE-2026-63943 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from ur | |
| CVE-2026-63944 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync hci_le_create_cis_sync() dereferences conn->conn_timeou |
| CVE-2026-63945 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock iso_sock_close() calls iso_sock_clear_timer() |
| CVE-2026-63946 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but releases the l |
| CVE-2026-63947 | Undergoing Analysis | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_input_report() hidp_input_report() reads keyboard and mouse |
| CVE-2026-63948 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn __set_chan_timer() takes a l2cap_chan ref | |
| CVE-2026-63949 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length message_store() linedisp_display() unconditionally reads | |
| CVE-2026-63950 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one Initialize nr_pages to 1 at the start of e | |
| CVE-2026-63951 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_writeback_endio A crash was observed in zram_writeback_endio due to a NULL po | |
| CVE-2026-63952 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_WRITE When SEAL_EXEC is added, SEAL_WRITE is implied to make |
| CVE-2026-63953 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page When migrate_vma_insert_huge_pmd_page( | |
| CVE-2026-63954 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hpfs: fix a crash if hpfs_map_dnode_bitmap fails If hpfs_map_dnode_bitmap fails, the code would call hpfs_brel | |
| CVE-2026-63955 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: do not trigger BUG() on BH disabled context __get_vm_area_node() currently triggers a BUG() if in_ | |
| CVE-2026-63956 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint m | |
| CVE-2026-63957 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is | |
| CVE-2026-63958 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_connector_change() The connector number in a UCSI CCI noti | |
| CVE-2026-63959 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious port can transmit a C | |
| CVE-2026-63960 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() wcove_read_rx_buffer() copies | |
| CVE-2026-63961 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device ca | |
| CVE-2026-63962 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() svdm_consume_modes() checks pmdat | |
| CVE-2026-63963 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from | |
| CVE-2026-63964 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header do_flash() locates the first .cyacd | |
| CVE-2026-63965 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580_trigger_handler() declares its scan buf | |
| CVE-2026-63966 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550_trigger_handler() declares the scan data arra | |
| CVE-2026-63967 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iio_buff on the stack | |
| CVE-2026-63968 | Undergoing Analysis | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_path() Found while auditing the same pattern Sashiko reported |
| CVE-2026-63969 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in rt6_fill_node() Sashiko reported this issue [1]. Apply the same fix as com | |
| CVE-2026-63970 | Modified | 未確認 | CWE-401, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transport_send_pkt_info() allocates or reuses the z |
| CVE-2026-63971 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_for_connect() drops and re-acquires the soc |
| CVE-2026-63972 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handler() runs a |
| CVE-2026-63973 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails par |
| CVE-2026-63974 | Undergoing Analysis | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be cal |
| CVE-2026-63975 | Modified | 未確認 | CWE-416, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an already-assigned desti |
| CVE-2026-63976 | Undergoing Analysis | 未確認 | CWE-694 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success l2cap_ecred_reconf_rsp() returns early on |
| CVE-2026-63977 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work The change_work was introduced to send de |
| CVE-2026-63978 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in handshake_n |
| CVE-2026-63979 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept_doit handshake_req_next() removes the request from |
| CVE-2026-63980 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvmet_tcp_state_change(), a socket callback that runs in BH contex |
| CVE-2026-63981 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow tcf_mirred_act() checks sched_ | |
| CVE-2026-63982 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop When mirred redirects to ingress (from | |
| CVE-2026-63983 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix packet loop on netem when duplicate is on When netem duplicates a packet it re-enqueues the cop | |
| CVE-2026-63984 | Undergoing Analysis | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ipv6_rpl_srh_decompress() computes: outhdr->h |
| CVE-2026-63985 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: add more safeties to EEPROM Netlink fallback The Netlink fallback path for reading module EEP |
| CVE-2026-63986 | Analyzed | 未確認 | CWE-763 | In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure The goto err label leads to: genlms |
| CVE-2026-63987 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks the ETHTOOL |
| CVE-2026-63988 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs path Since the start of the git history, brport_store() always ac |
| CVE-2026-63989 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the introduction of the netlink configuration path f |
| CVE-2026-63990 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in can_rx_unregister() in |
| CVE-2026-63991 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() The skb_clone() function can return NUL |
| CVE-2026-63992 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() In some cases, iptunnel_pmtud_check_icm |
| CVE-2026-63993 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb |
| CVE-2026-63994 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Sashiko found that iptunnel_p |
| CVE-2026-63995 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size from module The CMIS firmware update code reads start_cmd_paylo |
| CVE-2026-63996 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpl_len longer than what |
| CVE-2026-63997 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is missing undo |
| CVE-2026-63998 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on module flash errors When validate() fails we are skipping over e | |
| CVE-2026-63999 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection ta |
| CVE-2026-64000 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized be |
| CVE-2026-64001 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly allocated setup |
| CVE-2026-64002 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is |
| CVE-2026-64003 | Modified | 未確認 | CWE-400, CWE-772 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues While a SCSI host is in a recove |
| CVE-2026-64004 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv_sock_setsockopt() and wrap the whole switch in lock_sock()/re |
| CVE-2026-64005 | Modified | 未確認 | CWE-662, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init |
| CVE-2026-64006 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same register operation For lshift and rshift, the shift operation |
| CVE-2026-64007 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensure_writable synproxy_tstamp_adjust() rewrites the TCP timest |
| CVE-2026-64008 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in create_bo rocket_ioctl_create_bo() inserts a GEM handle into |
| CVE-2026-64009 | Modified | 未確認 | CWE-191, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrm_state_mtu Leo Lin reported OOB write issue in esp component: xfrm_state_m |
| CVE-2026-64010 | Analyzed | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() A race condition exists in the NFC LLCP connection st |
| CVE-2026-64011 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket fr |
| CVE-2026-64012 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked When sfb has children (eg q |
| CVE-2026-64013 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ("ACPI: button: Install notifier fo |
| CVE-2026-64014 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size nexio_read_data() pulls data_len and x_l |
| CVE-2026-64015 | Modified | 未確認 | CWE-125, CWE-362 | In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls asso |
| CVE-2026-64016 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reopen_durable |
| CVE-2026-64017 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after pee |
| CVE-2026-64018 | Modified | 未確認 | CWE-125, CWE-129 | In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_id |
| CVE-2026-64019 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if w |
| CVE-2026-64020 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma_vec |
| CVE-2026-64021 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_oa_stream_open_ioctl(), when param.exec_q-> |
| CVE-2026-64022 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we creat |
| CVE-2026-64023 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: fix a potential use-after-free On error we free aggr->lookups->dev_id before removing the en |
| CVE-2026-64024 | Modified | 未確認 | CWE-362, CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-derived ISN f |
| CVE-2026-64025 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_strp_data_ready() already checks tls_sw_has |
| CVE-2026-64026 | Modified | 未確認 | CWE-362, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg This improves the fix for CVE-2026-43 |
| CVE-2026-64027 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking (again) Recent commit changed the semantics from NOT_VALID to VALID. I d |
| CVE-2026-64028 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns "" everywhere except |
| CVE-2026-64029 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with event_input seq_ump_process_event() borrows client->out_rfile.ou |
| CVE-2026-64030 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs IEEE80211_MLE_STA_EPCS_CONTROL_LINK_ID is 0x000f, so |
| CVE-2026-64031 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the fo |
| CVE-2026-64032 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is e |
| CVE-2026-64033 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the error path of rtrs_srv_create_path_files(), |
| CVE-2026-64034 | Modified | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer In mana_hwc_rx_event_handler(), resp->respons |
| CVE-2026-64035 | Modified | 未確認 | CWE-665, CWE-909 | In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_bu |
| CVE-2026-64036 | Modified | 未確認 | CWE-125, CWE-129 | In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css_rstat_cpu() access css_rstat_updated() is exposed as a BPF kfunc and acc |
| CVE-2026-64037 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables A |
| CVE-2026-64038 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko reports: In lm90_probe(), the devm action to ca |
| CVE-2026-64039 | Analyzed | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned regions The snapshotting code internally aligns data segment to |
| CVE-2026-64040 | Modified | 未確認 | CWE-252 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails When vfs_mkdir() fails, the error code is not extracted fr |
| CVE-2026-64041 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: fs210x: fix possible buffer overflow In fs210x_effect_scene_info(), a string was copied like thi |
| CVE-2026-64042 | Analyzed | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although |
| CVE-2026-64043 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there |
| CVE-2026-64044 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER error path ovpn_nl_peer_new_doit()'s error path calls ovpn_peer_re | |
| CVE-2026-64045 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_close() ovpn_tcp_close() loads the ovpn_socket via rcu_derefer |
| CVE-2026-64046 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the curre |
| CVE-2026-64047 | Modified | 未確認 | CWE-191, CWE-193 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring When an sk_msg scatterlist ring wraps |
| CVE-2026-64048 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot On the SMC-D client, slot 0 of ini->ism_dev[] |
| CVE-2026-64049 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBW |
| CVE-2026-64050 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free |
| CVE-2026-64051 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range in qaic_gem_object_m |
| CVE-2026-64052 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() pin_user_pages_fast() can partially succe |
| CVE-2026-64053 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip_vcnt in bio_integrity_copy_user() bio_integrity_add_page() already sets bip_vcnt to |
| CVE-2026-64054 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request net_shaper_nl_group_doit() does not deduplicate NET_SHAP |
| CVE-2026-64055 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmac_rx() NAPI poll function assembles packets in an SKB f | |
| CVE-2026-64056 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is s | |
| CVE-2026-64057 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs_get_link() The afs filesystem in the kernel doesn't do locking correctly for |
| CVE-2026-64058 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_folio() to wait for an ongoing writeback to |
| CVE-2026-64059 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform_write() Under some circumstances, netfs_perform_write() do | |
| CVE-2026-64060 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write_begin() error handling Fix netfs_write_begin() to not leak our ref o |
| CVE-2026-64061 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release the sink page it uses |
| CVE-2026-64062 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advance_writethrough() to always unlock the supp |
| CVE-2026-64063 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "st |
| CVE-2026-64064 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone If a streaming write is made, this | |
| CVE-2026-64065 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The multiple runs of generic/013 test-case is c | |
| CVE-2026-64066 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecache() so that it pause |
| CVE-2026-64067 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests attached to |
| CVE-2026-64068 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_ |
| CVE-2026-64069 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subrequest for a re |
| CVE-2026-64070 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show() callbacks in hv-gpci take get_cp | |
| CVE-2026-64071 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_sgt via dma_free_nonc |
| CVE-2026-64072 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapp |
| CVE-2026-64073 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On PREEMPT_RT, non-HARD irq_work runs in per-C |
| CVE-2026-64074 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap statmount_mnt_idmap() writes one mapping wit |
| CVE-2026-64075 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit 4346ba1604093 ("fprobe: Rewrite fprobe on |
| CVE-2026-64076 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtab |
| CVE-2026-64077 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern |
| CVE-2026-64078 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtables_unregister_table_ | |
| CVE-2026-64079 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add the table to the per- |
| CVE-2026-64080 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers currently look up a notif |
| CVE-2026-64081 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework notifications carry an indirect me |
| CVE-2026-64082 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() calls cregs_to_regs() |
| CVE-2026-64083 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors adm1266_gpio_get() and adm1266_ | |
| CVE-2026-64084 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR adm1266_gpio_get_multiple() iterates t |
| CVE-2026-64085 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer adm1266_pmbus_block_xfer() copi |
| CVE-2026-64086 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer adm1266_pmbus_block_xfer() sets up the | |
| CVE-2026-64087 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackbox() loops over a rec | |
| CVE-2026-64088 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s16, but the field is n | |
| CVE-2026-64089 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared as s16, but | |
| CVE-2026-64090 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent TT request storms by | |
| CVE-2026-64091 | Analyzed | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the |
| CVE-2026-64092 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdown timer handler, bat | |
| CVE-2026-64093 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer on cleanup batadv_tp_sender_cleanup() was calling timer_delete_ | |
| CVE-2026-64094 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hardif might b |
| CVE-2026-64095 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.num_requests The bla.num_requests is increased when no request_ | |
| CVE-2026-64096 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig() removes entries from |
| CVE-2026-64097 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating [Why&How] The GPIO pin table parsers in get |
| CVE-2026-64098 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_update() and virtio_gpu_re |
| CVE-2026-64099 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label calls kvfree( |
| CVE-2026-64100 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressure, we see: === |
| CVE-2026-64101 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-specific RPC input buff | |
| CVE-2026-64102 | Modified | 未確認 | CWE-125, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send |
| CVE-2026-64103 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in isci_host_ |
| CVE-2026-64104 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When set_memory_{encrypted,decrypted}() fail, the user |
| CVE-2026-64105 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails after allocation Companion to commit 250f25367b58 ("KVM: a | |
| CVE-2026-64106 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Devi |
| CVE-2026-64107 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() In the pcm512x chipset driver, |
| CVE-2026-64108 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Since commit 340cea84f691c ("cifs: open files should not hold ref | |
| CVE-2026-64109 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() does skb_peek_tail(&sk-> |
| CVE-2026-64110 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor() fails, no one takes |
| CVE-2026-64111 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling t | |
| CVE-2026-64112 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unmap Given how rbd_lock_add_request() and rbd_img_exclusive_l |
| CVE-2026-64113 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source |
| CVE-2026-64114 | Modified | 未確認 | CWE-125, CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-supplied IPv4 he |
| CVE-2026-64115 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_connecting_server() retur |
| CVE-2026-64116 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_ioam() acce |
| CVE-2026-64117 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx() reads RX status thr |
| CVE-2026-64118 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap allocations fails, qed_ |
| CVE-2026-64119 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local user can pin a host CPU indefinitely in l2 | |
| CVE-2026-64120 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy_prepare_data(), several strings such as 'n |
| CVE-2026-64121 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->num_tx_queue |
| CVE-2026-64122 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover() accesse |
| CVE-2026-64123 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operatio |
| CVE-2026-64124 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length net_devmem_bind_dmabuf() trusts dmabu | |
| CVE-2026-64125 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX pa | |
| CVE-2026-64126 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT_OP_ADD_EXT_ADV_DATA is registered as a var |
| CVE-2026-64127 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 ("Bluetooth: L2CAP | |
| CVE-2026-64128 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START ISO data PDUs carry a packet-boundary fla |
| CVE-2026-64129 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page When check_stable_address_space() fai |
| CVE-2026-64130 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free __GFP_ZEROTAGS semantics ar |
| CVE-2026-64131 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exclusive ent | |
| CVE-2026-64132 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_ioam(), the hdr pointer |
| CVE-2026-64133 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesse |
| CVE-2026-64134 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM data transfer, we bl |
| CVE-2026-64135 | Analyzed | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_read_blackbox() declare |
| CVE-2026-64136 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix |
| CVE-2026-64137 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the userspace witness-notify c | |
| CVE-2026-64138 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() hel | |
| CVE-2026-64139 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd: use check_ |
| CVE-2026-64140 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in proc_show_files() When a SMB2 client opens a file with a durable v2 han |
| CVE-2026-64141 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_op_list dur |
| CVE-2026-64142 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_scavenger() has two related races |
| CVE-2026-64143 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older mo | |
| CVE-2026-64144 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not freed if us |
| CVE-2026-64145 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wlan_firmware_download() allocates dma_buffer |
| CVE-2026-64146 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers for xattr |
| CVE-2026-64147 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with an elevated |
| CVE-2026-64148 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() returns stale success |
| CVE-2026-64149 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_map_resource() uses pfn_valid() to ensur | |
| CVE-2026-64150 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, loca | |
| CVE-2026-64151 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_ | |
| CVE-2026-64152 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where the map error flow ca | |
| CVE-2026-64153 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error code from | |
| CVE-2026-64154 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of_parse_phan | |
| CVE-2026-64155 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return th |
| CVE-2026-64156 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writepages() to | |
| CVE-2026-64157 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region of a parti | |
| CVE-2026-64158 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64159 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the update of the zero point[*] by netfs_release_ | |
| CVE-2026-64160 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Fix potential tearing in using ->remote_i |
| CVE-2026-64161 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error path on of_property_read_u32() failure insid |
| CVE-2026-64162 | Modified | 未確認 | CWE-666 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initiali |
| CVE-2026-64163 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and | |
| CVE-2026-64164 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() The trace event btrfs_sync_file() i |
| CVE-2026-64165 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4 ("ARM: integrator: read counter u |
| CVE-2026-64166 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match callback assumes that |
| CVE-2026-64167 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel kho_fill_kimage() unconditionally populates the kimage with KHO metadata for ev |
| CVE-2026-64168 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fail |
| CVE-2026-64169 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fa |
| CVE-2026-64170 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails |
| CVE-2026-64171 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns wi |
| CVE-2026-64172 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are derive | |
| CVE-2026-64173 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In paths where tracing_map_elt_alloc() failed t | |
| CVE-2026-64174 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80211_merge_profile() reassembles a Multi-BSS | |
| CVE-2026-64175 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g., NMI_INTERRUPT_UNKNOWN |
| CVE-2026-64176 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encod |
| CVE-2026-64177 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networking receive path is usually run from softi | |
| CVE-2026-64178 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem wh |
| CVE-2026-64179 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() is |
| CVE-2026-64180 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and lock | |
| CVE-2026-64181 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() On x86 32-bit with THP en | |
| CVE-2026-64182 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr | |
| CVE-2026-64183 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 ("acpi/prmt: Use EFI runtime san |
| CVE-2026-64184 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() damon_sysfs_memcg_path_to_id() breaks mem_cgroup_ | |
| CVE-2026-64185 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs_update_group() is called for a named group | |
| CVE-2026-64186 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In iommu_mmio_write() and iommu_capability_writ |
| CVE-2026-64187 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transact |
| CVE-2026-64188 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() rmnet_dellink() removes the endpoint from |
| CVE-2026-64189 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_list resize The release path of ip_set_dump_do() and ip_set |
| CVE-2026-64190 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmit during mode change __team_change_mode() clears team->ops |
| CVE-2026-64191 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() use |
| CVE-2026-64192 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized When CONFIG_BPF_LSM=y is set, BPF |
| CVE-2026-64193 | Deferred | 未確認 | CWE-95 | Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an E |
| CVE-2026-64194 | Deferred | 未確認 | CWE-674 | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recu |
| CVE-2026-64205 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task pani | |
| CVE-2026-64206 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l2cap_conn_del() takes conn->lock and then c |
| CVE-2026-64207 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N |
| CVE-2026-64208 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide | |
| CVE-2026-64209 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing_tbl and pre_emphasis_tbl are 4x4 |
| CVE-2026-64210 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when the affinity changes and there's still XS |
| CVE-2026-64211 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcu_struct structure is in the midst of sw | |
| CVE-2026-64212 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwl_mld_remove_link, the link->fw_i |
| CVE-2026-64213 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: lm90_alert() executes in the smbus alert con | |
| CVE-2026-64214 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() A kernel panic is obs |
| CVE-2026-64215 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Check the return value of kzalloc() to prevent |
| CVE-2026-64216 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() netfs_unlock_abandoned_read_pages(rreq) access |
| CVE-2026-64217 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extrac |
| CVE-2026-64218 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_bla_purge_backbone_gw() removes stale backbo | |
| CVE-2026-64219 | Modified | 未確認 | CWE-121, CWE-674 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async [Why&How] dc_pro |
| CVE-2026-64220 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If a firmware node is allocated on the stack ( |
| CVE-2026-64221 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails |
| CVE-2026-64222 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on AQ init failure otx2_pool_aq_init() frees pool->stack when m |
| CVE-2026-64223 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211_tid_to_link_map_size_ok() validates negoti |
| CVE-2026-64224 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init() rvu_rep_rsrc_init() allocates queue memory before calling |
| CVE-2026-64225 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_S |
| CVE-2026-64226 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path In scx_root_enable_workfn(), put_task_struc |
| CVE-2026-64227 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Since every platform driver can be forced to ma |
| CVE-2026-64228 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev->drv can become NULL while the phy_devic |
| CVE-2026-64229 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86_FEATURE_PCID and ke |
| CVE-2026-6423 | Deferred | 未確認 | CWE-269 | A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel. |
| CVE-2026-64230 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64a6b577490c ("regulator: tps65219: Remove de |
| CVE-2026-64231 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internall | |
| CVE-2026-64232 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_request() already recomp |
| CVE-2026-64233 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind uvc_function_bind() walks &opts->extens | |
| CVE-2026-64234 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failure to prev |
| CVE-2026-64235 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DEPTH_TRACKING enabled |
| CVE-2026-64236 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing f |
| CVE-2026-64237 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain t |
| CVE-2026-64238 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call gpio_chip |
| CVE-2026-64239 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON sysfs maintains the DAMOS tried region d |
| CVE-2026-6424 | Deferred | 未確認 | CWE-416 | Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system |
| CVE-2026-64240 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f ("media: rc: igorplugusb: heed co | |
| CVE-2026-64241 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the dri |
| CVE-2026-64242 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initialize_gadget() installs gadget_release() as |
| CVE-2026-64243 | Modified | 未確認 | CWE-125, CWE-129 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simple_mux_control_put() rejects values greater than e |
| CVE-2026-64244 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at xa_ | |
| CVE-2026-64245 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is NULL, it is assigned from mode_option_bu |
| CVE-2026-64246 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_node_put(dn) |
| CVE-2026-64247 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is included in a s |
| CVE-2026-64248 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu() smp_send_stop() parks all secondary CPUs in stop_this_cp | |
| CVE-2026-64249 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() Move of_node_put(child_region) after the err |
| CVE-2026-64250 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop_this_cpu() This is a port of MIPS commit 9f3f3bdc6d9dac1 ("MIPS: sm | |
| CVE-2026-64251 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() pwrseq_debugfs_seq_next() declares 'next' with _ |
| CVE-2026-64252 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial | |
| CVE-2026-64253 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() PF_BLOCK_TS is only set in blk_time_get_ns() when current->pl |
| CVE-2026-64254 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR When BAR_PEER_SPAD and BAR_CONFI |
| CVE-2026-64255 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba |
| CVE-2026-64256 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it h | |
| CVE-2026-64257 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: client: restrict impli | |
| CVE-2026-64258 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref If a copy into the userspace ri |
| CVE-2026-64259 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only findable after memcpy Bad userspace might try to trick us and s |
| CVE-2026-64260 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/read that value under lock There are several readers of queue-> |
| CVE-2026-64261 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues fuse_uring_async_stop_queues() might run when |
| CVE-2026-64262 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task work When io_uring delivers task work with tw.cancel set (PF_ | |
| CVE-2026-64263 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in_userspace list fuse_uring_cancel() moves entries that are ava | |
| CVE-2026-64264 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit copy_from_user() returns the number of bytes not copied as | |
| CVE-2026-64265 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req When fuse_resend() moves a request from fpq- |
| CVE-2026-64266 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_ref_folio() fuse_ref_folio() unlocks the request but does not |
| CVE-2026-64267 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSE_NOTIFY_PRUNE validates the nodeid payload length with: | |
| CVE-2026-64268 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc |
| CVE-2026-64269 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg When the server answers an RTRS READ, rd | |
| CVE-2026-64270 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114_interrupt() reads a packet of touch data from th |
| CVE-2026-64271 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet tw_interrupt() accumulates each non-zero ser |
| CVE-2026-64272 | Modified | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an eve |
| CVE-2026-64273 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_process_packet() handles a status |
| CVE-2026-64274 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodix_ts_read_input_report() copies the number of tou |
| CVE-2026-64275 | Analyzed | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arithmetic underflow The Elan I2C touchpad driver queries the d |
| CVE-2026-64276 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmi_f30_map_gpios() allocates gpioled_key_m |
| CVE-2026-64277 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmi_f3a_initialize() takes the GPIO count from |
| CVE-2026-64278 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client driv | |
| CVE-2026-64279 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2c_get_adapter() which |
| CVE-2026-64280 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() afu_ioctl_dma_map() accepts a 64-bit length | |
| CVE-2026-64281 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters when the transport closes Threads parked in svc_rdma_sq_wait() on sc_sq_ticket_wait o | |
| CVE-2026-64282 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier In the case that kvm_translate_vncr() |
| CVE-2026-64283 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guest_memfd |
| CVE-2026-64284 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fastpath user |
| CVE-2026-64285 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guest_memfd instanc | |
| CVE-2026-64286 | Modified | 未確認 | CWE-822 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU flush_hyp_vcpu() copies the host vCPU con |
| CVE-2026-64287 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU flush_hyp_vcpu() copies the host vGIC state into th |
| CVE-2026-64288 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notifiers or TL |
| CVE-2026-64289 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry_num and entry_len iommufd_hwpt_invalidate() takes a user | |
| CVE-2026-64290 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner l |
| CVE-2026-64291 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_veventq_alloc() accepts any !0 veventq_depth from userspace, wi | |
| CVE-2026-64292 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinl |
| CVE-2026-64293 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read The bound-check in iommufd_veventq_fops_read( |
| CVE-2026-64294 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since idmapped mounts were introduced, inode own | |
| CVE-2026-64295 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access The page_ext iteration API d |
| CVE-2026-64296 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_entry() In exfat_find_dir_entry(), each TYPE_EXTEND (file name) |
| CVE-2026-64297 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc( |
| CVE-2026-64298 | Modified | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC POSIX requires write permission to truncate a fil |
| CVE-2026-64299 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL-terminated, s |
| CVE-2026-64300 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range() reads rb->aux_pages[], rb->aux_nr_pages and rb->aux_pgoff vi |
| CVE-2026-64301 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() scmi_regulator_probe() calls of_find_node | |
| CVE-2026-64302 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages Commit bf9e4e30f353 ("x86/mm: use pagetable_free()"), switched | |
| CVE-2026-64303 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengine_prep_slave_sg() fails for t |
| CVE-2026-64304 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser (rsa_helper.c) bounds each CRT com |
| CVE-2026-64305 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock The service_table list is protected by servic |
| CVE-2026-64306 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when | |
| CVE-2026-64307 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Sashiko notes: > if SEV initialization fails and KV | |
| CVE-2026-64308 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) Sashiko notes: > if SEV initialization fails and | |
| CVE-2026-64309 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) Sashiko notes: > if SEV initialization fails and KV |
| CVE-2026-64310 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: > if SEV initialization fails and KVM is ac | |
| CVE-2026-64311 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rng_alg has several vulnerabilities, |
| CVE-2026-64312 | Modified | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AE |
| CVE-2026-64313 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.m_high is sat |
| CVE-2026-64314 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapoly_create() still accepts the compatibi |
| CVE-2026-64315 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitiv | |
| CVE-2026-64316 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitiv | |
| CVE-2026-64317 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record get_symlink_chunk() and the SL handling in parse_r |
| CVE-2026-64318 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count scan to the ppe array aix_partition() reads the physical volume descriptor | |
| CVE-2026-64319 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesses the vari |
| CVE-2026-64320 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmet_execute_disc_get_log_page() valida |
| CVE-2026-64321 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_rdma_queue_connect() calls nvmet_rdma_find_g | |
| CVE-2026-64322 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udf_load_sparable_map() accepts a spari |
| CVE-2026-64323 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load_vat() takes the virtual partition's start |
| CVE-2026-64324 | Modified | 未確認 | CWE-125, CWE-129 | In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_free_blocks() checks the logical block numbe |
| CVE-2026-64325 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bong |
| CVE-2026-64326 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: skip sync_blockdev() on surprise removal in bdev_mark_dead() bdev_mark_dead()'s @surprise == true means | |
| CVE-2026-64327 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks When parsing endpoint descript | |
| CVE-2026-64328 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA fence leak In ffs_dmabuf_transfer(), a ffs_dma_fence object is kmalloc'd, with the |
| CVE-2026-64329 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccg_irq_handler() calls u |
| CVE-2026-64330 | Analyzed | 未確認 | CWE-129 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() In svdm_consume_modes(), the SVID value is read |
| CVE-2026-64331 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vep_dequeue() vep_alloc_request() wasn't initializing vrequest->udc, so cancell |
| CVE-2026-64332 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI devi |
| CVE-2026-64333 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer corruption The digi_write_inb_command() is supposed to wait for |
| CVE-2026-64334 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently |
| CVE-2026-64335 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the port is closed while throttled, the read urb | |
| CVE-2026-64336 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fix information leak The write() callback is supposed to return the number of charac |
| CVE-2026-64337 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3_gadget_queue() maps the request before checking whether the | |
| CVE-2026-64338 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers a parport before reading the 1 | |
| CVE-2026-64339 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbio_bulk_msg() copies bpkt_len = le |
| CVE-2026-64340 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after r |
| CVE-2026-64341 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after rele |
| CVE-2026-64342 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect Submitted write URBs are not stopped on close() and therefore |
| CVE-2026-64343 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after releasin |
| CVE-2026-64344 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after releas |
| CVE-2026-64345 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character de | |
| CVE-2026-64346 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadget_match_driver The udc structure acts as the management structure |
| CVE-2026-64347 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler The OTG branch of composite_setup() fal |
| CVE-2026-64348 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci_iso_sched before l |
| CVE-2026-64349 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() The dwc3_ulpi_setup() calls the regis | |
| CVE-2026-64350 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates str |
| CVE-2026-64351 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() kalmia_rx_fixup() computes usb_packet_length = sk | |
| CVE-2026-64352 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access from sleepable BPF programs trie_lookup_elem() annotates its rcu_dereference_check() |
| CVE-2026-64353 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner array lookups nullable An ARRAY_OF_MAPS can use an array created with BPF_F_INNER_MAP | |
| CVE-2026-64354 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btf_parse_struct_metas() walks user-supplied BTF duri |
| CVE-2026-64355 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last desti |
| CVE-2026-64356 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_create() If xfs_metadir_create() fails in xfs_dqinode_metadir_crea |
| CVE-2026-64357 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_exchmaps_estimate_overhead() adds the bmbt and rmapbt overhead t | |
| CVE-2026-64358 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms only Since a recent fix the mtk_jpeg_rele |
| CVE-2026-64359 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfs_tra | |
| CVE-2026-64360 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read hfs_bnode_read() can return early without writing to the |
| CVE-2026-64361 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length check_and_correct_requested_length() compa |
| CVE-2026-64362 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lg_g15_data is allocated with devm and hold |
| CVE-2026-64363 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer in remove() appleir_remove() runs hid_hw_stop() before timer_del |
| CVE-2026-64364 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mt_io_flags mt_io_flags is a single unsigned long, but mt_pro |
| CVE-2026-64365 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driver unbind letsketch_driver does not provide a .remove callback |
| CVE-2026-64366 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert wacom_wac_queue_insert() calls kfifo_skip() |
| CVE-2026-64367 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodix_hid_set_raw_report() builds |
| CVE-2026-64368 | Modified | 未確認 | CWE-665 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation i |
| CVE-2026-64369 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligned addresse |
| CVE-2026-64370 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_time | |
| CVE-2026-64371 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where procfs currently cal | |
| CVE-2026-64372 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation pcc_cpufreq_do_osc() calls acpi_evaluate_o |
| CVE-2026-64373 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq_suspend() is called via the kern |
| CVE-2026-64374 | Modified | 未確認 | CWE-667, CWE-835 | In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT RT migration is done aggressively. When a CPU sch |
| CVE-2026-64375 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get_link() and proc_pid_readlink() |
| CVE-2026-64376 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device reference leak in firmware_upload_register() firmware_upload_register() -> fw_cr | |
| CVE-2026-64377 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcom_cpufreq.data is allocated with devm_kzalloc() in probe |
| CVE-2026-64378 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits, the follo |
| CVE-2026-64379 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applie |
| CVE-2026-64380 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subauthority cou |
| CVE-2026-64381 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_ |
| CVE-2026-64382 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error an |
| CVE-2026-64383 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across |
| CVE-2026-64384 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearing attempt can return a replayable error and |
| CVE-2026-64385 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioctl() replay A response-bearing attempt can return a replayable error a |
| CVE-2026-64386 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay double-free A response-bearing attempt can return a replayable error and |
| CVE-2026-64387 | Modified | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double-free A response-bearing attempt can return a replayable error a |
| CVE-2026-64388 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifications were |
| CVE-2026-64389 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_auth_ntlmv2() derives the NTLMv2 session key | |
| CVE-2026-64390 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2_LOCK adds each granted byte-range lock to both the f | |
| CVE-2026-64391 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O | |
| CVE-2026-64392 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or durable hand | |
| CVE-2026-64393 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers call path-based VFS helpers after checking | |
| CVE-2026-64394 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY commit cc57232cae23 ("ksmbd: fix FSCTL perm | |
| CVE-2026-64395 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the source file | |
| CVE-2026-64396 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation When a blocking byte-range lock req |
| CVE-2026-64397 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per file smb2_query_dir() stores a pointer to its stack-allocated pr |
| CVE-2026-64398 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission check for FSCTL_SET_ZERO_DATA FSCTL_SET_ZERO_DATA in smb2_ioctl() destroys file data v | |
| CVE-2026-64399 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE The FSCTL_DUPLICATE_EXTENTS_TO_FILE arm of sm | |
| CVE-2026-6440 | Deferred | 未確認 | CWE-352 | The GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.1. |
| CVE-2026-64400 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbd_vfs_path_lookup() enforces LOOKUP_BEN | |
| CVE-2026-64401 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifs_swn_notify() looks up a witness registration by id |
| CVE-2026-64402 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() When the SMB sink is used as a perf AUX sink, |
| CVE-2026-64403 | Modified | 未確認 | CWE-125, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt value l2cap_get_conf_opt() derives the option |
| CVE-2026-64404 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() iso_conn_big_sync() drops the socket lock to c |
| CVE-2026-64405 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() hci_abort_conn() read hci_skb_event(hdev->sent_cmd |
| CVE-2026-64406 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_accept_dequeue() bt_accept_get() takes a temporary reference before dropping the acce |
| CVE-2026-64407 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() During the v3 firmware download |
| CVE-2026-64408 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2CAP connect |
| CVE-2026-64409 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Every once in a while we see a hung btmtksdio |
| CVE-2026-64410 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, | |
| CVE-2026-64411 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before find_table_lock() update_counters() and compat_update_counter |
| CVE-2026-64412 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may |
| CVE-2026-64413 | Modified | 未確認 | CWE-457, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a s |
| CVE-2026-64414 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments (such as from devme | |
| CVE-2026-64415 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup We hit a real softlockup in an |
| CVE-2026-64416 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host lookup_swap_cgroup_id() passes swap_ |
| CVE-2026-64417 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker_debugfs_add() creates both "count" and "scan" d |
| CVE-2026-64418 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand_shrinker_info() iterates all visible memcg |
| CVE-2026-64419 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Reading the debugfs "count" file of a memcg | |
| CVE-2026-64420 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_device_probe() fails, cros_ec_class_release re |
| CVE-2026-64421 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in __media_entity_remov |
| CVE-2026-64422 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid `net.ipv4.tcp_reordering` val |
| CVE-2026-64423 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroyed under RTNL |
| CVE-2026-64424 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly de |
| CVE-2026-64425 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item commit 10dc95939817 ("io_uring/io-wq: check | |
| CVE-2026-64426 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE NOP file-acquisition support choses between a fixe | |
| CVE-2026-64427 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e ("HID: logitech-dj: Pre |
| CVE-2026-64428 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup path sch_irq_unmask() enables the GPIO IRQ and then updates t | |
| CVE-2026-64429 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq startup path sprd_eic_irq_unmask() enables the GPIO IRQ and then |
| CVE-2026-64430 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_irq_vector() from hardirq context ntb_epf_vec_isr() calls pci_irq_vector() in hard | |
| CVE-2026-64431 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post_write_mst_fixup() for invalid index_block ntfs_icx_ib_sync_write() calls post_write_m |
| CVE-2026-64432 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns In the analysis pass of $LogFile journal |
| CVE-2026-64433 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete add_device_complete() runs from the hci_cmd |
| CVE-2026-64434 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref l2cap_chan_timeout() runs asynchronously and |
| CVE-2026-64435 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on audit_queue Multiple readers access audit_queue.qlen via s |
| CVE-2026-64436 | Modified | 未確認 | CWE-119, CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp states pfkey_msg2xfrm_state() handles the IPComp (SADB_X_SATYPE |
| CVE-2026-64437 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Commit f580d27e8928 ("ksmbd: |
| CVE-2026-64438 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() The VF2PF interrupt handler queues PF-side r |
| CVE-2026-64439 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5_aead_encrypt(), krb5_aead_decrypt() in rfc3 |
| CVE-2026-64440 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_handler() HT_caps_handler() iterates pIE->length bytes and writes |
| CVE-2026-64441 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Three IE/attr |
| CVE-2026-64442 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Two IE parsing loops are |
| CVE-2026-64443 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop The IE parsing loop in update_beacon_info() a |
| CVE-2026-64444 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop The IE parsing loop in OnAssocRsp() advances by (pIE- |
| CVE-2026-64445 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() OnAuth() has two bugs in the shared-key |
| CVE-2026-64446 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() supplicant_ie is a 256-byte array in |
| CVE-2026-64447 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7_isys_init() and ipu7_psys |
| CVE-2026-64448 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc[0] exemption to responses without data area smb2_check_message() has a long- |
| CVE-2026-64449 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound slave read/write to the kern_buf size The SLAVE-path helpers buffer_to_user() and buf |
| CVE-2026-64450 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcast PROTOCOL/STATE_MSG can carry a Gap ACK bl |
| CVE-2026-64451 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in func_set_flag() func_set_flag() dereferences tr->current_trace_flags |
| CVE-2026-64452 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan_nhc_do_uncompression() looks up an NHC descriptor w |
| CVE-2026-64453 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: fix disconnect UAF in client teardown usbio_disconnect() walks usbio->cli_list in reverse an |
| CVE-2026-64454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend context dwc3_gadget_suspend() takes dwc->lock with IRQ | |
| CVE-2026-64455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: Fix slab-use-after-free in chaoskey_release() The chaoskey driver has a use-after-free bug in i | |
| CVE-2026-64456 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random_recv_done() stores the device-reported use |
| CVE-2026-64457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 > | |
| CVE-2026-64458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damon_hot_score() Fix three issues in damon_hot_score() that | |
| CVE-2026-64459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit 51e547e8c89c ("tcp: Free TCP-AO/TCP-MD5 info/keys | |
| CVE-2026-64460 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriov_restore_vf_rebar_state() uses the VF Resizable BAR |
| CVE-2026-64461 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enable_port() fails, mtk_pcie_port_ | |
| CVE-2026-64462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only remo | |
| CVE-2026-64463 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres rt1711h_probe() registers the TCPCI port before r |
| CVE-2026-64464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses | |
| CVE-2026-64465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhci_free_streams() When a USB device with active stream endpoints i | |
| CVE-2026-64466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze listener on node removal Generally userspace is supposed to explicitly clear freeze | |
| CVE-2026-64467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the offsets array (bi | |
| CVE-2026-64468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In binder_free_transaction(), the t->to_proc is read under the t- | |
| CVE-2026-64469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a thread exits, binder_thread_release() walks its transaction | |
| CVE-2026-64470 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during M | |
| CVE-2026-64471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in ca | |
| CVE-2026-64472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-mo | |
| CVE-2026-64473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfs_create_devm | |
| CVE-2026-64474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc vfio_mig_get_next_state() walks vfio_f | |
| CVE-2026-64475 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on register_device() failure The re-order in the Fixes commit below d |
| CVE-2026-64476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When disable_idle_d3 was introduced in vfio-pci, it directly manipu | |
| CVE-2026-64477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled The architecture updates the | |
| CVE-2026-64478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match The DualSense jack-detection input handler verif | |
| CVE-2026-64479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() snd_seq_event_dup() copies an incoming event int | |
| CVE-2026-64480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. | |
| CVE-2026-64481 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA controls whose private data points |
| CVE-2026-64482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_ | |
| CVE-2026-64483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count to the packet payload isight_packet() takes the frame count fro | |
| CVE-2026-64484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. s | |
| CVE-2026-64485 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new() allocates the driver task before validatin |
| CVE-2026-64486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. s | |
| CVE-2026-64487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser snd_usb_caiaq_tks4_dispatch() decod | |
| CVE-2026-64488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. In l | |
| CVE-2026-64489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. s | |
| CVE-2026-64490 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device-provided |
| CVE-2026-64491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_disconnect() cancels capture_work and midi_in_work b | |
| CVE-2026-64492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devm_iio_trigger_register tmp006_probe() allocates the DRDY trigger with devm_ii | |
| CVE-2026-64493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115_read_raw() takes a runtime PM reference with p | |
| CVE-2026-64494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002_read_raw() calls pm_runtime_get_sync() before | |
| CVE-2026-64495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160_get_filter() walks bmg160_samp_freq_t | |
| CVE-2026-64496 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates the event file descriptor with `anon_inode_g |
| CVE-2026-64497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELD_GE | |
| CVE-2026-64498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scan_mask on buffer release The scan_mask lifetime changed in commit 9a2e1233d3 | |
| CVE-2026-64499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119_triggered_buffer_preenable() resumes t | |
| CVE-2026-64500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "lpc32xx_ad | |
| CVE-2026-64501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In ad_sigma_delta_single_conversion(), set_mode | |
| CVE-2026-64502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices ad_sigma_delta_clear_pending_event( | |
| CVE-2026-64503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error kxsd9_write_raw() takes a runtime PM referenc | |
| CVE-2026-64504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FIFO frame count __bmc150_accel_fifo_flush() copies the number o | |
| CVE-2026-64505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_ | |
| CVE-2026-64506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix issue caused by mal | |
| CVE-2026-64507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitiga | |
| CVE-2026-64508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger ex | |
| CVE-2026-64509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build() still has fallible work after __blk_mq_alloc_di | |
| CVE-2026-64510 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails after adding the acpi_desc obje |
| CVE-2026-64511 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify | |
| CVE-2026-64512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg->access_width changes dependin | |
| CVE-2026-64513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPR_THRESHOLD field in the VMCS is used by | |
| CVE-2026-64514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate must_wait writability check on pte_present() userfaultfd_must_wait() and userfaultfd_huge_mu | |
| CVE-2026-64515 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element (MLE) is contained in a no |
| CVE-2026-64516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it w | |
| CVE-2026-64517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwconfig() explicit | |
| CVE-2026-64518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). lockdep_sock_is_held() was added in tcp_ao | |
| CVE-2026-64519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation find_one_sb_stid() skips stids whose sc_status is non-zero, | |
| CVE-2026-64520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path trusted the | |
| CVE-2026-64521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconf_pi | |
| CVE-2026-64522 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_state() handles acquire-flow te |
| CVE-2026-64523 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file pointer ba |
| CVE-2026-64524 | Received | 未確認 | CWE-122 | In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTHVID_RESOLUTION_RESPONSE with resolution_cou |
| CVE-2026-64525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit The struct pernet_operations docstring in i | |
| CVE-2026-64526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complete() tsconfig_prepare_data() calls ethnl_ops_begin(), we need t | |
| CVE-2026-64527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hyperv_receive_sub() reads msg->vid_hdr.type and di | |
| CVE-2026-64528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when | |
| CVE-2026-64529 | Received | 未確認 | CWE-489 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl |
| CVE-2026-64530 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED whil |
| CVE-2026-64531 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, |
| CVE-2026-64532 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRecordDataRo |
| CVE-2026-64533 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() converts DIR_PAGE_ENTRY_32 records into D |
| CVE-2026-64534 | Received | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path In nvmet_tcp_try_recv_ddgst(), when |
| CVE-2026-64535 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data diges |
| CVE-2026-64536 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop The loop in is_ap_in_tkip() iterates over IEs wit |
| CVE-2026-64537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: reject invalid CCM interval at configuration time ccm_tx_work_expired() re-arms itself via queue_ | |
| CVE-2026-64538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). fib6_nh_mtu_change() re-fetches idev via __in6_dev_get(arg-> | |
| CVE-2026-64539 | Received | 未確認 | CWE-121 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_create_adv_data() builds the advertising |
| CVE-2026-6454 | Deferred | 未確認 | CWE-79 | The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and including 2.3.20. This is due to insufficient sanitization of the |
| CVE-2026-64540 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() genelink_rx_fixup() splits an aggregated RX fram |
| CVE-2026-64541 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket smc_cdc_rx_handler() looks up the connection by |
| CVE-2026-64542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_na() accept_untracked_na() re-fetches the inet6_dev with __in6 | |
| CVE-2026-64543 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() bearer_disable() frees b->disc with tipc_disc_de |
| CVE-2026-64544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents pefile_digest_pe_contents() computes the t | |
| CVE-2026-64545 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_redirect() xdp_master_redirect() dereferences the result of netd |
| CVE-2026-64546 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block() drm_parse_tiled_block() casts the DisplayID block to a struc |
| CVE-2026-64547 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup For an even packet_len, net1080_rx_f |
| CVE-2026-64548 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() When the scatterlist ring is full or nearly |
| CVE-2026-64549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() bpa10x_setup() sends the vendor command | |
| CVE-2026-64550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation is disabled, | |
| CVE-2026-64551 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before reading staleness When an ERROR chunk with a STALE_COOKIE caus |
| CVE-2026-64552 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive_big() bounds the device-announced length by (big_packets_nu |
| CVE-2026-64553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA psample open codes nla_put() presumably to avoid wiping the d | |
| CVE-2026-64554 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() br_ip6_fragment() gets prevhdr, a pointer in |
| CVE-2026-64555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() kvm_hyp_handle_mops() resets the single-step sta | |
| CVE-2026-64556 | Received | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling per |
| CVE-2026-64557 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() l2cap_sock_new_connection_cb() returned |
| CVE-2026-64558 | Received | 未確認 | CWE-122 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler implementation Explicitly check the length of the target buffer |
| CVE-2026-64559 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Explicitly check the buffer length request structure provide |
| CVE-2026-64560 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-le |
| CVE-2026-6459 | Deferred | 未確認 | CWE-79 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar widget in all ve |
| CVE-2026-64600 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presente |
| CVE-2026-64606 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected |
| CVE-2026-64607 | Modified | 未確認 | CWE-772 | HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-En |
| CVE-2026-64608 | Analyzed | 未確認 | CWE-502, CWE-787, CWE-843 | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate t |
| CVE-2026-64609 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is used, readAlignedVarUint() can read beyond the bounds of the underlying buffer. |
| CVE-2026-64611 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model |
| CVE-2026-64612 | Awaiting Analysis | 未確認 | CWE-248 | A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image fil |
| CVE-2026-64613 | Deferred | 未確認 | CWE-59, CWE-732 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW. The segment is created in buf_generic.h with open(path |
| CVE-2026-64614 | Deferred | 未確認 | CWE-59, CWE-732 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in deque.h with open(p |
| CVE-2026-64615 | Deferred | 未確認 | CWE-59, CWE-732 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in graph.h with open(p |
| CVE-2026-64616 | Deferred | 未確認 | CWE-59, CWE-732 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in ndarray.h with op |
| CVE-2026-64617 | Deferred | 未確認 | CWE-59, CWE-732 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in pubsub.h with open |
| CVE-2026-64619 | Deferred | 未確認 | CWE-348 | FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers to circumvent request throttling by supplying attac |
| CVE-2026-64620 | Analyzed | 未確認 | CWE-122 | FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the modular-exponentiation |
| CVE-2026-64621 | Analyzed | 未確認 | CWE-415 | FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the sele |
| CVE-2026-64622 | Deferred | 未確認 | CWE-862 | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the configured authorization check (checkAuth/secret) to the ApprovalInbox GET read routes, so even when a |
| CVE-2026-64623 | Deferred | 未確認 | CWE-347 | Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as vali |
| CVE-2026-64624 | Analyzed | 未確認 | CWE-88 | FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can c |
| CVE-2026-64625 | Deferred | 未確認 | CWE-78 | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backt |
| CVE-2026-64626 | Deferred | 未確認 | CWE-918 | AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback |
| CVE-2026-64627 | Deferred | 未確認 | CWE-209 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. When the GraphQL API is mounted with public introspection |
| CVE-2026-64628 | Deferred | 未確認 | CWE-79 | Grav contains a stored cross-site scripting vulnerability in shortcode-core attribute handlers where the XSS detection scan only matches payloads containing literal angle brackets, |
| CVE-2026-64635 | Awaiting Analysis | 未確認 | CWE-640 | Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the gener |
| CVE-2026-64641 | Analyzed | 未確認 | CWE-834 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js application |
| CVE-2026-64642 | Analyzed | 未確認 | CWE-285 | Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built wi |
| CVE-2026-64643 | Analyzed | 未確認 | CWE-201 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server |
| CVE-2026-64644 | Analyzed | 未確認 | CWE-407 | Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default ima |
| CVE-2026-64645 | Analyzed | 未確認 | CWE-601, CWE-918 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds |
| CVE-2026-64646 | Analyzed | 未確認 | CWE-770 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using |
| CVE-2026-64647 | Analyzed | 未確認 | CWE-116 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may re |
| CVE-2026-64648 | Analyzed | 未確認 | CWE-524 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may r |
| CVE-2026-64649 | Analyzed | 未確認 | CWE-918 | Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a r |
| CVE-2026-64650 | Deferred | 未確認 | CWE-863 | The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay auth |
| CVE-2026-64651 | Deferred | 未確認 | CWE-863 | The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose |
| CVE-2026-64685 | Analyzed | 未確認 | CWE-125 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in e |
| CVE-2026-64691 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
| CVE-2026-64692 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sono |
| CVE-2026-64693 | Modified | 未確認 | CWE-843 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8. |
| CVE-2026-64694 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause un |
| CVE-2026-64695 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote |
| CVE-2026-64696 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpe |
| CVE-2026-64697 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected sy |
| CVE-2026-64698 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected sy |
| CVE-2026-64699 | Analyzed | 未確認 | CWE-457 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to |
| CVE-2026-64700 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS S |
| CVE-2026-64702 | Analyzed | 未確認 | CWE-284 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break |
| CVE-2026-64703 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to caus |
| CVE-2026-64704 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause |
| CVE-2026-64707 | Modified | 未確認 | CWE-732 | A permissions issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8 |
| CVE-2026-64708 | Analyzed | 未確認 | CWE-693 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper chec |
| CVE-2026-64709 | Modified | 未確認 | CWE-200 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m |
| CVE-2026-64710 | Analyzed | 未確認 | CWE-200 | A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive u |
| CVE-2026-64711 | Analyzed | 未確認 | CWE-285 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app ma |
| CVE-2026-64713 | Analyzed | 未確認 | CWE-203 | This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may |
| CVE-2026-64716 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m |
| CVE-2026-64718 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and |
| CVE-2026-64719 | Modified | 未確認 | CWE-125 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe |
| CVE-2026-64720 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause |
| CVE-2026-64721 | Modified | 未確認 | CWE-664 | This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8 |
| CVE-2026-64722 | Modified | 未確認 | CWE-120 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Ta |
| CVE-2026-64723 | Modified | 未確認 | CWE-284 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be |
| CVE-2026-64724 | Modified | 未確認 | CWE-400 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m |
| CVE-2026-64725 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64726 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, |
| CVE-2026-64727 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination. |
| CVE-2026-64728 | Analyzed | 未確認 | CWE-693 | A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. |
| CVE-2026-64729 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An |
| CVE-2026-64730 | Analyzed | 未確認 | CWE-451 | The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website |
| CVE-2026-64731 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox |
| CVE-2026-64732 | Modified | 未確認 | CWE-284 | This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with |
| CVE-2026-64733 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be abl |
| CVE-2026-64734 | Modified | 未確認 | CWE-200 | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Taho |
| CVE-2026-64735 | Modified | 未確認 | CWE-451 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15 |
| CVE-2026-64737 | Analyzed | 未確認 | CWE-284 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able |
| CVE-2026-64738 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. |
| CVE-2026-64739 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64740 | Modified | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, mac |
| CVE-2026-64741 | Analyzed | 未確認 | CWE-200 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read |
| CVE-2026-64742 | Modified | 未確認 | CWE-319 | This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visio |
| CVE-2026-64743 | Modified | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, v |
| CVE-2026-64744 | Modified | 未確認 | CWE-200 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. |
| CVE-2026-64745 | Analyzed | 未確認 | CWE-287 | This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked d |
| CVE-2026-64746 | Modified | 未確認 | CWE-862 | An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, wat |
| CVE-2026-64747 | Modified | 未確認 | CWE-120 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 1 |
| CVE-2026-64749 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visi |
| CVE-2026-64751 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An |
| CVE-2026-64754 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26 |
| CVE-2026-64755 | Modified | 未確認 | CWE-200 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to access s |
| CVE-2026-64757 | Modified | 未確認 | CWE-119 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26 |
| CVE-2026-64758 | Modified | 未確認 | CWE-119 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, vis |
| CVE-2026-64762 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26. |
| CVE-2026-64763 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, m |
| CVE-2026-64764 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64765 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-64766 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-64767 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to |
| CVE-2026-64768 | Modified | 未確認 | CWE-125 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64769 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64770 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac |
| CVE-2026-64771 | Modified | 未確認 | CWE-119 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26 |
| CVE-2026-64772 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, ma |
| CVE-2026-64774 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonom |
| CVE-2026-64775 | Analyzed | 未確認 | CWE-665 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 2 |
| CVE-2026-64776 | Analyzed | 未確認 | CWE-125 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memor |
| CVE-2026-64783 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. P |
| CVE-2026-64785 | Analyzed | 未確認 | CWE-444 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 |
| CVE-2026-64791 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall process |
| CVE-2026-64792 | Deferred | 未確認 | CWE-524 | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content usi |
| CVE-2026-64793 | Deferred | 未確認 | CWE-284 | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property ov |
| CVE-2026-64794 | Deferred | 未確認 | CWE-284 | Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insuffic |
| CVE-2026-64795 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded mo |
| CVE-2026-64796 | Deferred | 未確認 | CWE-284 | Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users befor |
| CVE-2026-64797 | Deferred | 未確認 | CWE-290 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. At |
| CVE-2026-64798 | Deferred | 未確認 | CWE-338 | Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with i |
| CVE-2026-64799 | Deferred | 未確認 | CWE-918 | Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or res |
| CVE-2026-64800 | Analyzed | 未確認 | CWE-532 | In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default |
| CVE-2026-64802 | Analyzed | 未確認 | CWE-94 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration |
| CVE-2026-64803 | Analyzed | 未確認 | CWE-94 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK |
| CVE-2026-64804 | Analyzed | 未確認 | CWE-829 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling |
| CVE-2026-64805 | Analyzed | 未確認 | CWE-829 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling |
| CVE-2026-64806 | Analyzed | 未確認 | CWE-829 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter |
| CVE-2026-64807 | Analyzed | 未確認 | CWE-829 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration |
| CVE-2026-64808 | Analyzed | 未確認 | CWE-829 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling |
| CVE-2026-64809 | Analyzed | 未確認 | CWE-829 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter |
| CVE-2026-64810 | Analyzed | 未確認 | CWE-79 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking |
| CVE-2026-64811 | Analyzed | 未確認 | CWE-829 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration |
| CVE-2026-64812 | Analyzed | 未確認 | CWE-306 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session |
| CVE-2026-64813 | Analyzed | 未確認 | CWE-602 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session |
| CVE-2026-64814 | Analyzed | 未確認 | CWE-862 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session |
| CVE-2026-64815 | Analyzed | 未確認 | CWE-94 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files |
| CVE-2026-64816 | Deferred | 未確認 | CWE-73 | RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in lut_processing.rs. On Windows, a UNC path in lutPath causes an outbou |
| CVE-2026-64821 | Deferred | 未確認 | CWE-352 | djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated attackers to cancel sales or purchase orders on behalf of a |
| CVE-2026-64822 | Deferred | 未確認 | CWE-203 | djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers |
| CVE-2026-64823 | Deferred | 未確認 | CWE-79 | Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers controlling a She |
| CVE-2026-64824 | Deferred | 未確認 | CWE-22 | Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem pat |
| CVE-2026-64825 | Deferred | 未確認 | CWE-22 | Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem b |
| CVE-2026-64828 | Deferred | 未確認 | CWE-79 | Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the ord |
| CVE-2026-64829 | Deferred | 未確認 | CWE-613 | Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by ex |
| CVE-2026-64830 | Analyzed | 未確認 | CWE-122 | FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a |
| CVE-2026-64831 | Analyzed | 未確認 | CWE-121 | FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and |
| CVE-2026-64832 | Analyzed | 未確認 | CWE-415 | FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corrupt |
| CVE-2026-64833 | Analyzed | 未確認 | CWE-125 | FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a c |
| CVE-2026-64834 | Analyzed | 未確認 | CWE-835 | FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of se |
| CVE-2026-64835 | Analyzed | 未確認 | CWE-787 | FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out |
| CVE-2026-64863 | Deferred | 未確認 | CWE-284 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and di |
| CVE-2026-64870 | Deferred | 未確認 | CWE-918 | MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update_tool passes caller-supplied download_url and download_callback_url |
| CVE-2026-64871 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid to |
| CVE-2026-64872 | Deferred | 未確認 | CWE-22 | Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory. |
| CVE-2026-64873 | Deferred | 未確認 | CWE-918 | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services. |
| CVE-2026-64874 | Deferred | 未確認 | CWE-200 | Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs. |
| CVE-2026-64875 | Deferred | 未確認 | CWE-290 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass. |
| CVE-2026-64876 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, |
| CVE-2026-64877 | Analyzed | 未確認 | CWE-20 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database. |
| CVE-2026-64878 | Analyzed | 未確認 | CWE-78 | Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the |
| CVE-2026-64879 | Analyzed | 未確認 | CWE-78 | A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve comm |
| CVE-2026-64880 | Analyzed | 未確認 | CWE-89 | Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL inject |
| CVE-2026-64881 | Analyzed | 未確認 | CWE-78 | The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command inject |
| CVE-2026-65007 | Deferred | 未確認 | CWE-862 | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks |
| CVE-2026-65008 | Deferred | 未確認 | CWE-94 | Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php), which passes a Class::method cal |
| CVE-2026-65009 | Deferred | 未確認 | CWE-200 | OpenRemote versions before 1.26.2 contain an information disclosure vulnerability in the SyslogResource REST endpoint that fails to filter operational logs by realm. Attackers with |
| CVE-2026-65010 | Deferred | 未確認 | CWE-61 | Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planti |
| CVE-2026-65011 | Deferred | 未確認 | CWE-862 | Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /events/definitions/{definitionId}/duplicate endpoint that allows authenticated use |
| CVE-2026-65012 | Deferred | 未確認 | CWE-306 | InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path par |
| CVE-2026-65013 | Deferred | 未確認 | CWE-639 | Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' |
| CVE-2026-65014 | Analyzed | 未確認 | CWE-306 | n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before authentication middleware is applied, allowing any |
| CVE-2026-65015 | Analyzed | 未確認 | CWE-863 | n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer u |
| CVE-2026-65016 | Analyzed | 未確認 | CWE-639 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance-role provisioning. The provisioning path maps an IdP-assert |
| CVE-2026-65048 | Deferred | 未確認 | CWE-79 | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parse |
| CVE-2026-65049 | Deferred | 未確認 | CWE-863 | Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide de |
| CVE-2026-65050 | Deferred | 未確認 | CWE-862 | Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the `ninja-forms/submissions-table` Gutenberg block t |
| CVE-2026-65051 | Deferred | 未確認 | CWE-602 | Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-side security vulnerability that allows unauthenticated attackers to bypass all form valida |
| CVE-2026-65052 | Deferred | 未確認 | CWE-472 | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values i |
| CVE-2026-65054 | Deferred | 未確認 | CWE-863 | MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metadata belonging to other users by adding arbitrary media |
| CVE-2026-65055 | Deferred | 未確認 | CWE-862 | Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any priv |
| CVE-2026-65056 | Deferred | 未確認 | CWE-918 | mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud met |
| CVE-2026-65057 | Deferred | 未確認 | CWE-918 | Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying atta |
| CVE-2026-65058 | Awaiting Analysis | 未確認 | CWE-358 | Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device confirms only |
| CVE-2026-65061 | Deferred | 未確認 | CWE-59, CWE-732 | Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in reqrep.h with open |
| CVE-2026-65062 | Deferred | 未確認 | CWE-59, CWE-732 | Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h wit |
| CVE-2026-65063 | Deferred | 未確認 | CWE-59, CWE-732 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in radix.h with op |
| CVE-2026-65064 | Deferred | 未確認 | CWE-59, CWE-732 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in shm_generic.h wit |
| CVE-2026-65065 | Deferred | 未確認 | CWE-59, CWE-732 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in roaring.h w |
| CVE-2026-65066 | Deferred | 未確認 | CWE-59, CWE-732 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in ring.h with op |
| CVE-2026-65067 | Deferred | 未確認 | CWE-59, CWE-732 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in intern.h with open |
| CVE-2026-65068 | Deferred | 未確認 | CWE-59, CWE-732 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sphash.h with |
| CVE-2026-65069 | Deferred | 未確認 | CWE-59, CWE-732 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with op |
| CVE-2026-6509 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation. This issue affects Pardus Update: from <= |
| CVE-2026-65100 | Modified | 未確認 | CWE-696 | Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the p |
| CVE-2026-6511 | Awaiting Analysis | 未確認 | CWE-306 | During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated |
| CVE-2026-6516 | Awaiting Analysis | 未確認 | CWE-78 | Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API. |
| CVE-2026-65309 | Deferred | 未確認 | CWE-257, CWE-327 | ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attack |
| CVE-2026-65310 | Deferred | 未確認 | CWE-306, CWE-942 | ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CO |
| CVE-2026-65311 | Deferred | 未確認 | CWE-284, CWE-306, CWE-532 | The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target withou |
| CVE-2026-65313 | Deferred | 未確認 | CWE-1392, CWE-798 | A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied |
| CVE-2026-65314 | Deferred | 未確認 | CWE-203 | Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to infer the values of excluded columns by crafting subset where |
| CVE-2026-65315 | Awaiting Analysis | 未確認 | CWE-789 | Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted G |
| CVE-2026-65316 | Deferred | 未確認 | CWE-639 | XXL-Job version 2.4.2 contains an insecure direct object reference vulnerability that allows authenticated users to read execution log content from job groups they are not authoriz |
| CVE-2026-65317 | Deferred | 未確認 | CWE-918 | Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers |
| CVE-2026-65318 | Deferred | 未確認 | CWE-918 | Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitr |
| CVE-2026-65319 | Deferred | 未確認 | CWE-306 | Feedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending reque |
| CVE-2026-65324 | Modified | 未確認 | CWE-400 | Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses, letting a slow client exhaust server memory. This issue affects Apache Traffic |
| CVE-2026-65325 | Analyzed | 未確認 | CWE-295 | Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Serv |
| CVE-2026-6540 | Analyzed | 未確認 | CWE-22, CWE-23 | Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path- |
| CVE-2026-6541 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.7.x <= 11.7.1, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to restrict metric configuration changes to the playbook being saved, which allows an authenticated |
| CVE-2026-65421 | Awaiting Analysis | 未確認 | CWE-125 | The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past the end of a hea |
| CVE-2026-65423 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write. |
| CVE-2026-65430 | Deferred | 未確認 | CWE-200 | Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability. |
| CVE-2026-65431 | Deferred | 未確認 | CWE-22 | Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extrac |
| CVE-2026-65433 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. |
| CVE-2026-65434 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. |
| CVE-2026-65435 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. |
| CVE-2026-65436 | Deferred | 未確認 | CWE-22 | Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions. |
| CVE-2026-65437 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 versions. |
| CVE-2026-65438 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions. |
| CVE-2026-65439 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions. |
| CVE-2026-65440 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. |
| CVE-2026-65441 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. |
| CVE-2026-65442 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions. |
| CVE-2026-65443 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions. |
| CVE-2026-65445 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions. |
| CVE-2026-65446 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. |
| CVE-2026-65447 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions. |
| CVE-2026-65448 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner – AcyChecker <= 1.8.1 versions. |
| CVE-2026-65449 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. |
| CVE-2026-65450 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in MapSVG <= 8.14.0 versions. |
| CVE-2026-65451 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in MapSVG <= 8.14.0 versions. |
| CVE-2026-65452 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. |
| CVE-2026-65453 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. |
| CVE-2026-65454 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions. |
| CVE-2026-65455 | Deferred | 未確認 | CWE-434 | Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions. |
| CVE-2026-65456 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions. |
| CVE-2026-65457 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. |
| CVE-2026-65458 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This i |
| CVE-2026-65460 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions. |
| CVE-2026-65461 | Deferred | 未確認 | CWE-434 | Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions. |
| CVE-2026-65462 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions. |
| CVE-2026-65463 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions. |
| CVE-2026-65464 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions. |
| CVE-2026-65465 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. |
| CVE-2026-65466 | Deferred | 未確認 | CWE-918 | Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions. |
| CVE-2026-65467 | Deferred | 未確認 | CWE-918 | Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions. |
| CVE-2026-65468 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. |
| CVE-2026-65469 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. |
| CVE-2026-65470 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. |
| CVE-2026-65471 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions. |
| CVE-2026-65472 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions. |
| CVE-2026-65473 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. |
| CVE-2026-65474 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. |
| CVE-2026-65475 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Im |
| CVE-2026-65476 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. |
| CVE-2026-65477 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions. |
| CVE-2026-65478 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ListingPro <= 2.9.10 versions. |
| CVE-2026-65479 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Reviewer <= 3.14.2 versions. |
| CVE-2026-65480 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a |
| CVE-2026-65481 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Vino <= 1.9 versions. |
| CVE-2026-65482 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM- |
| CVE-2026-65483 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions. |
| CVE-2026-65484 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Style Kits <= 2.6.5 versions. |
| CVE-2026-65485 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions. |
| CVE-2026-65486 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Event post <= 6.0.1 versions. |
| CVE-2026-65487 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Photography <= 7.7.6 versions. |
| CVE-2026-65488 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Stored XSS.This issue affects LA-Studio Element Kit for |
| CVE-2026-65489 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-65490 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.Th |
| CVE-2026-65491 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. |
| CVE-2026-65492 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a |
| CVE-2026-65493 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions. |
| CVE-2026-65494 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions. |
| CVE-2026-65495 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions. |
| CVE-2026-65496 | Deferred | 未確認 | CWE-918 | Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions. |
| CVE-2026-65497 | Deferred | 未確認 | CWE-502 | Administrator PHP Object Injection in Complianz <= 7.5.0 versions. |
| CVE-2026-65498 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions. |
| CVE-2026-65499 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. |
| CVE-2026-65500 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. |
| CVE-2026-65501 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions. |
| CVE-2026-65503 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
| CVE-2026-65505 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
| CVE-2026-65506 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions. |
| CVE-2026-65510 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. |
| CVE-2026-65511 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. |
| CVE-2026-65512 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activit |
| CVE-2026-65514 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions. |
| CVE-2026-65516 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions. |
| CVE-2026-65518 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions. |
| CVE-2026-65519 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions. |
| CVE-2026-65521 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. |
| CVE-2026-65522 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. |
| CVE-2026-65524 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions. |
| CVE-2026-65525 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions. |
| CVE-2026-65526 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualize |
| CVE-2026-65527 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions. |
| CVE-2026-65528 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions. |
| CVE-2026-65529 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Acces |
| CVE-2026-65530 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions. |
| CVE-2026-65531 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions. |
| CVE-2026-65532 | Deferred | 未確認 | CWE-89 | Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions. |
| CVE-2026-65533 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions. |
| CVE-2026-65534 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions. |
| CVE-2026-65535 | Deferred | 未確認 | CWE-497 | Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions. |
| CVE-2026-65536 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) <= 4.4.5 versions. |
| CVE-2026-65537 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions. |
| CVE-2026-65538 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Machete <= 5.2 versions. |
| CVE-2026-65539 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap <= 4.0 versions. |
| CVE-2026-65540 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert <= 1.6.5 versions. |
| CVE-2026-65550 | Deferred | 未確認 | CWE-79 | Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions. |
| CVE-2026-65557 | Deferred | 未確認 | CWE-79 | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. |
| CVE-2026-65558 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. |
| CVE-2026-65561 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions. |
| CVE-2026-65562 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. |
| CVE-2026-65563 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. |
| CVE-2026-65564 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. |
| CVE-2026-65567 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. |
| CVE-2026-65568 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. |
| CVE-2026-65589 | Analyzed | 未確認 | CWE-532 | n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution recor |
| CVE-2026-65590 | Analyzed | 未確認 | CWE-78 | n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). |
| CVE-2026-65591 | Analyzed | 未確認 | CWE-917 | n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can cra |
| CVE-2026-65592 | Analyzed | 未確認 | CWE-79 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResult |
| CVE-2026-65593 | Analyzed | 未確認 | CWE-918 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authen |
| CVE-2026-65594 | Analyzed | 未確認 | CWE-863 | n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was introduced) does not verify that the authenticated user has |
| CVE-2026-65595 | Analyzed | 未確認 | CWE-269 | n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of the acting user's role. On instances where the Token E |
| CVE-2026-65596 | Analyzed | 未確認 | CWE-863 | n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials (Header Auth, Basic Auth, Query Auth, OAuth) in th |
| CVE-2026-65597 | Analyzed | 未確認 | CWE-79 | n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the HTML preview, which renders execution output into an iframe |
| CVE-2026-65598 | Analyzed | 未確認 | CWE-367 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows authenticated users to bypass path restrictions by swapping a |
| CVE-2026-65599 | Analyzed | 未確認 | CWE-312 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistak |
| CVE-2026-65600 | Analyzed | 未確認 | CWE-22 | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware. When ReplacePath |
| CVE-2026-65601 | Analyzed | 未確認 | CWE-863 | Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules[].backendRefs[].filters |
| CVE-2026-65602 | Analyzed | 未確認 | CWE-863 | Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references (the allowlist wa |
| CVE-2026-65603 | Awaiting Analysis | 未確認 | CWE-269 | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler (processUserProfile(), the update_ |
| CVE-2026-65604 | Deferred | 未確認 | CWE-20 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) deny-on-presence Rego policies. When a request body exceeds t |
| CVE-2026-65605 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View (database) cell rendering. A Template column value is rendered as HTML via text/template |
| CVE-2026-65606 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/<name> link references a name that is not an installed |
| CVE-2026-65607 | Deferred | 未確認 | CWE-22 | SiYuan before v3.7.2 contains a path traversal vulnerability in the /export/temp/ short-circuit branch of the serveExport handler (kernel/server/serve.go). Unlike the main export b |
| CVE-2026-65608 | Deferred | 未確認 | CWE-470 | Grav versions >= 1.7.0 and before 2.0.9 contain a remote code execution vulnerability. FlexDirectory::dynamicDataField() resolves blueprint data-*@: directives by calling call_user |
| CVE-2026-65616 | Analyzed | 未確認 | CWE-347 | Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token. |
| CVE-2026-65617 | Analyzed | 未確認 | CWE-502 | A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository |
| CVE-2026-65618 | Analyzed | 未確認 | CWE-918 | Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing intern |
| CVE-2026-65623 | Awaiting Analysis | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion during WebSocket fragment reassembly. The siz |
| CVE-2026-65624 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. |
| CVE-2026-65635 | Deferred | 未確認 | CWE-653 | Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients with administrative p |
| CVE-2026-65636 | Awaiting Analysis | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inject arbitrary content into generated YAML documents through |
| CVE-2026-65650 | Deferred | 未確認 | CWE-770 | Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. |
| CVE-2026-65687 | Analyzed | 未確認 | CWE-22 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to r |
| CVE-2026-65688 | Analyzed | 未確認 | CWE-22 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to |
| CVE-2026-65689 | Analyzed | 未確認 | CWE-22 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers t |
| CVE-2026-65690 | Analyzed | 未確認 | CWE-22 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to |
| CVE-2026-65693 | Deferred | 未確認 | CWE-94 | Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administrators to achieve arbitrary OS command execution by injectin |
| CVE-2026-65694 | Deferred | 未確認 | CWE-22 | Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplyin |
| CVE-2026-65695 | Deferred | 未確認 | CWE-22 | Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary |
| CVE-2026-65696 | Deferred | 未確認 | CWE-639 | Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and |
| CVE-2026-65697 | Deferred | 未確認 | CWE-79 | Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: UR |
| CVE-2026-65698 | Deferred | 未確認 | CWE-22 | Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open w |
| CVE-2026-65699 | Deferred | 未確認 | CWE-639 | AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by sup |
| CVE-2026-65700 | Deferred | 未確認 | CWE-22 | h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary fi |
| CVE-2026-65701 | Deferred | 未確認 | CWE-22 | SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers t |
| CVE-2026-65702 | Deferred | 未確認 | CWE-22 | Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration that allows unauthenticated remote attackers to write attacke |
| CVE-2026-65703 | Analyzed | 未確認 | CWE-787 | FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafte |
| CVE-2026-65704 | Analyzed | 未確認 | CWE-191, CWE-787 | FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 fl |
| CVE-2026-65705 | Analyzed | 未確認 | CWE-131, CWE-787 | FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamica |
| CVE-2026-65706 | Analyzed | 未確認 | CWE-131, CWE-787 | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted N |
| CVE-2026-65707 | Deferred | 未確認 | CWE-89 | Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST par |
| CVE-2026-65708 | Deferred | 未確認 | CWE-639 | sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to acc |
| CVE-2026-65709 | Deferred | 未確認 | CWE-639 | sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allows API token holders to enumerate account metadata, overwrit |
| CVE-2026-65710 | Deferred | 未確認 | CWE-639 | sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINK_CREATE profile flag to trigger unauthorized decryp |
| CVE-2026-65711 | Deferred | 未確認 | CWE-78 | sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands as the web server process user |
| CVE-2026-65712 | Deferred | 未確認 | CWE-22 | Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file |
| CVE-2026-65713 | Deferred | 未確認 | CWE-22 | Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories. |
| CVE-2026-65754 | Deferred | 未確認 | CWE-22 | Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory. |
| CVE-2026-65755 | Deferred | 未確認 | CWE-524 | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded |
| CVE-2026-65756 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript. |
| CVE-2026-65757 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authe |
| CVE-2026-65758 | Deferred | 未確認 | CWE-200, CWE-284 | Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated vi |
| CVE-2026-65759 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical order and payment information, including states, are proces |
| CVE-2026-65760 | Deferred | 未確認 | CWE-200, CWE-284 | Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to r |
| CVE-2026-65761 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injec |
| CVE-2026-65762 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability. |
| CVE-2026-65763 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability. |
| CVE-2026-65764 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability. |
| CVE-2026-65765 | Deferred | 未確認 | CWE-22 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulner |
| CVE-2026-65766 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an |
| CVE-2026-65834 | Deferred | 未確認 | CWE-20, CWE-248 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.No |
| CVE-2026-65835 | Deferred | 未確認 | CWE-269, CWE-863 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in i |
| CVE-2026-65841 | Deferred | 未確認 | CWE-80 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script no |
| CVE-2026-65876 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an |
| CVE-2026-65877 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media manager search and date filters |
| CVE-2026-65878 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the me |
| CVE-2026-65879 | Deferred | 未確認 | CWE-798 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the m |
| CVE-2026-65880 | Deferred | 未確認 | CWE-94 | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include th |
| CVE-2026-65881 | Deferred | 未確認 | CWE-1188, CWE-200 | Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 - The default configuration of the extension allowed read a |
| CVE-2026-65882 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector. |
| CVE-2026-65883 | Analyzed | 未確認 | CWE-502 | Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby |
| CVE-2026-65884 | Analyzed | 未確認 | CWE-284 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register |
| CVE-2026-65885 | Analyzed | 未確認 | CWE-434 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into |
| CVE-2026-65886 | Analyzed | 未確認 | CWE-22 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files. |
| CVE-2026-65887 | Analyzed | 未確認 | CWE-284 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login |
| CVE-2026-65888 | Analyzed | 未確認 | CWE-284 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site. |
| CVE-2026-65889 | Analyzed | 未確認 | CWE-22, CWE-284 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories. |
| CVE-2026-65890 | Analyzed | 未確認 | CWE-89 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries. |
| CVE-2026-65891 | Analyzed | 未確認 | CWE-20 | Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input val |
| CVE-2026-65893 | Deferred | 未確認 | CWE-489 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability b |
| CVE-2026-65894 | Deferred | 未確認 | CWE-307 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force |
| CVE-2026-65895 | Deferred | 未確認 | CWE-862 | Grav API Plugin versions before 1.0.10 fail to restrict write access to security-critical plugin configuration scopes, allowing authenticated users with api.config.write privilege |
| CVE-2026-65896 | Deferred | 未確認 | CWE-73 | Grav API Plugin (Composer package getgrav/grav-plugin-api) before 1.0.10 fails to properly validate the slug field in the POST /pages/{route}/move endpoint. PagesController::move() |
| CVE-2026-65897 | Deferred | 未確認 | CWE-269 | Grav API Plugin versions before 1.0.10 fail to validate the groups field in InvitationsController::create(), allowing authenticated api.users.write callers to assign invited accoun |
| CVE-2026-65898 | Analyzed | 未確認 | CWE-79 | DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when setConfig() is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared al |
| CVE-2026-65899 | Analyzed | 未確認 | CWE-693 | DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig() is called, so a DOMPurify instance reused across trust boundaries stays bound to a |
| CVE-2026-65900 | Analyzed | 未確認 | CWE-79 | DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together with a DOM output mode (RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE), fail to strip t |
| CVE-2026-65901 | Analyzed | 未確認 | CWE-79 | DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in IN_PLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile |
| CVE-2026-65902 | Analyzed | 未確認 | CWE-501 | DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the uponSanitizeElement and u |
| CVE-2026-65903 | Analyzed | 未確認 | CWE-697 | DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function where short-circuit evaluation allows forbidden tags to bypass FORBID_TAGS restrictions. Attackers can craft |
| CVE-2026-65904 | Analyzed | 未確認 | CWE-754 | DOMPurify through 3.3.3 fails to sanitize DOM elements passed via IN_PLACE mode when the element originates from a different window/realm (e.g., an iframe's contentDocument). A cro |
| CVE-2026-65906 | Analyzed | 未確認 | CWE-94 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible |
| CVE-2026-65907 | Undergoing Analysis | 未確認 | CWE-94 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible |
| CVE-2026-65908 | Analyzed | 未確認 | CWE-829 | In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open |
| CVE-2026-65911 | Analyzed | 未確認 | CWE-79 | In DOMPurify through 3.3.3, function predicates supplied via ADD_ATTR or ADD_TAGS to DOMPurify.sanitize() persist in internal state (EXTRA_ELEMENT_HANDLING) across subsequent sanit |
| CVE-2026-65912 | Analyzed | 未確認 | CWE-79 | DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADD_ATTR is provided as a predicate function via EXTRA_ELEMENT_HANDLING.attributeCheck. Attackers can sup |
| CVE-2026-65913 | Analyzed | 未確認 | CWE-1321 | DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USE_PROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties |
| CVE-2026-65914 | Analyzed | 未確認 | CWE-79 | DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, |
| CVE-2026-65916 | Deferred | 未確認 | CWE-862 | CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delet |
| CVE-2026-65917 | Deferred | 未確認 | CWE-639 | CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in the IncBackups application's incremental-backup handlers (de |
| CVE-2026-65918 | Analyzed | 未確認 | CWE-125 | PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped |
| CVE-2026-65919 | Deferred | 未確認 | CWE-22 | Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file |
| CVE-2026-65920 | Deferred | 未確認 | CWE-22 | Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary files |
| CVE-2026-65921 | Analyzed | 未確認 | CWE-22 | A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location. |
| CVE-2026-65922 | Analyzed | 未確認 | CWE-862 | An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under spe |
| CVE-2026-65923 | Analyzed | 未確認 | CWE-918 | A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests |
| CVE-2026-65924 | Analyzed | 未確認 | CWE-918 | JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authenticated user - or, if anonymous access is en |
| CVE-2026-65925 | Analyzed | 未確認 | CWE-918 | A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response. |
| CVE-2026-65943 | Analyzed | 未確認 | CWE-284 | Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0 |
| CVE-2026-65944 | Analyzed | 未確認 | CWE-352 | Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0 |
| CVE-2026-65946 | Analyzed | 未確認 | CWE-79 | Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0 |
| CVE-2026-65947 | Analyzed | 未確認 | CWE-352 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 |
| CVE-2026-65975 | Analyzed | 未確認 | CWE-863 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.1 and 2.0.0b1 up to but not inc |
| CVE-2026-65981 | Deferred | 未確認 | CWE-639 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's cre |
| CVE-2026-66004 | Deferred | 未確認 | CWE-22 | BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversa |
| CVE-2026-66005 | Deferred | 未確認 | CWE-183, CWE-942 | Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host res |
| CVE-2026-66006 | Analyzed | 未確認 | CWE-306 | lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setup_comm_prefs endpoint that allows unauthenticated attackers to overwrite |
| CVE-2026-66007 | Analyzed | 未確認 | CWE-22 | Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validat |
| CVE-2026-66008 | Deferred | 未確認 | CWE-209 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and Relation target class names through GraphQL validation and input-coercion error |
| CVE-2026-66009 | Deferred | 未確認 | CWE-209 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages that name required custom input fields even when public int |
| CVE-2026-66010 | Analyzed | 未確認 | CWE-79 | DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes to bypass application |
| CVE-2026-66011 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by |
| CVE-2026-66012 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (model.CheckAuth) with no admin-ro |
| CVE-2026-66013 | Deferred | 未確認 | CWE-639 | OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by |
| CVE-2026-66014 | Analyzed | 未確認 | CWE-287 | JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond t |
| CVE-2026-66015 | Analyzed | 未確認 | CWE-269 | An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platf |
| CVE-2026-66018 | Analyzed | 未確認 | CWE-200 | Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a readable repository parameter while retrievin |
| CVE-2026-66027 | Deferred | 未確認 | CWE-862 | Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging t |
| CVE-2026-66028 | Deferred | 未確認 | CWE-303 | Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts |
| CVE-2026-66029 | Deferred | 未確認 | CWE-79 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript |
| CVE-2026-66030 | Deferred | 未確認 | CWE-79 | Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript |
| CVE-2026-66031 | Deferred | 未確認 | CWE-79 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript |
| CVE-2026-66032 | Analyzed | 未確認 | CWE-415 | libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the he |
| CVE-2026-66033 | Analyzed | 未確認 | CWE-125, CWE-191 | libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a ma |
| CVE-2026-66034 | Analyzed | 未確認 | CWE-125, CWE-908 | libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds |
| CVE-2026-66035 | Analyzed | 未確認 | CWE-122 | libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any |
| CVE-2026-66036 | Analyzed | 未確認 | CWE-122 | FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a |
| CVE-2026-66037 | Analyzed | 未確認 | CWE-770 | FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause mult |
| CVE-2026-66038 | Analyzed | 未確認 | CWE-908 | FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap mem |
| CVE-2026-66039 | Analyzed | 未確認 | CWE-122, CWE-190 | FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying |
| CVE-2026-66040 | Analyzed | 未確認 | CWE-122 | FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap me |
| CVE-2026-66041 | Analyzed | 未確認 | CWE-787 | FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supply |
| CVE-2026-66050 | Deferred | 未確認 | CWE-22 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrar |
| CVE-2026-66051 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-66053 | Analyzed | 未確認 | CWE-297 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to up |
| CVE-2026-66063 | Deferred | 未確認 | CWE-22 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but d |
| CVE-2026-66064 | Deferred | 未確認 | CWE-41, CWE-863 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but d |
| CVE-2026-66066 | Awaiting Analysis | 未確認 | CWE-1188 | Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked |
| CVE-2026-66138 | Deferred | 未確認 | CWE-78 | In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously |
| CVE-2026-66139 | Deferred | 未確認 | CWE-306 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known. |
| CVE-2026-66140 | Analyzed | 未確認 | CWE-24 | Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled. |
| CVE-2026-66141 | Analyzed | 未確認 | CWE-829 | Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled. |
| CVE-2026-66142 | Analyzed | 未確認 | CWE-400 | Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when |
| CVE-2026-66143 | Analyzed | 未確認 | CWE-400 | It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3.2.2 via certain crafted policies, which may lead to a denial of |
| CVE-2026-66144 | Analyzed | 未確認 | CWE-400 | Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a denial of service attack if a huge policy |
| CVE-2026-66299 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through |
| CVE-2026-66337 | Analyzed | 未確認 | CWE-125 | A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP response |
| CVE-2026-66338 | Analyzed | 未確認 | CWE-444 | A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including lead |
| CVE-2026-66339 | Analyzed | 未確認 | CWE-201 | A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests s |
| CVE-2026-66349 | Deferred | 未確認 | CWE-125 | The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over |
| CVE-2026-66360 | Deferred | 未確認 | CWE-125 | The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the processing of the encoded presenta |
| CVE-2026-66364 | Deferred | 未確認 | CWE-125 | The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific |
| CVE-2026-66369 | Deferred | 未確認 | CWE-125 | The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE m |
| CVE-2026-66373 | Awaiting Analysis | 未確認 | CWE-415 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) |
| CVE-2026-66374 | Deferred | 未確認 | CWE-1284 | Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path. |
| CVE-2026-66390 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, f |
| CVE-2026-66391 | Analyzed | 未確認 | CWE-330, CWE-693 | Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through |
| CVE-2026-66394 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypassing the |
| CVE-2026-66395 | Deferred | 未確認 | CWE-79 | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting |
| CVE-2026-66396 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering Gallery and Kanban cover images, allowing stored cross-site scripting via unescape |
| CVE-2026-66397 | Deferred | 未確認 | CWE-22 | phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field during category updates, allowing authenticated attackers to delete arbitrary files by |
| CVE-2026-66398 | Deferred | 未確認 | CWE-494 | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD p |
| CVE-2026-66399 | Deferred | 未確認 | CWE-269 | phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to join pr |
| CVE-2026-66400 | Deferred | 未確認 | CWE-613 | Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStorage.php where the findTriplet() method fails to properly validate Reme |
| CVE-2026-66412 | Deferred | 未確認 | CWE-639 | Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying a |
| CVE-2026-66414 | Deferred | 未確認 | CWE-601 | Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to redirect authenticated users to arbitrary external sites by |
| CVE-2026-66415 | Deferred | 未確認 | CWE-918 | Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated attackers to read internal resources by passing unsanitized u |
| CVE-2026-66416 | Deferred | 未確認 | CWE-352 | Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by exclu |
| CVE-2026-66418 | Analyzed | 未確認 | CWE-79 | OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitti |
| CVE-2026-66420 | Awaiting Analysis | 未確認 | CWE-346 | MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sess |
| CVE-2026-66421 | Analyzed | 未確認 | CWE-79 | OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser |
| CVE-2026-66427 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66428 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66433 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. |
| CVE-2026-66434 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. |
| CVE-2026-66437 | Deferred | 未確認 | CWE-918 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. |
| CVE-2026-66438 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. |
| CVE-2026-66442 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. |
| CVE-2026-66445 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. |
| CVE-2026-66448 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. |
| CVE-2026-66473 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions. |
| CVE-2026-66474 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions. |
| CVE-2026-66475 | Deferred | 未確認 | CWE-79 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions. |
| CVE-2026-66476 | Deferred | 未確認 | CWE-22 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. |
| CVE-2026-66477 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. |
| CVE-2026-66488 | Analyzed | 未確認 | CWE-285 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 |
| CVE-2026-66489 | Analyzed | 未確認 | CWE-200 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 |
| CVE-2026-66490 | Analyzed | 未確認 | CWE-79 | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 |
| CVE-2026-6656 | Deferred | 未確認 | CWE-208 | Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to b |
| CVE-2026-66713 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat (only when |
| CVE-2026-66720 | Deferred | 未確認 | CWE-125 | The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted |
| CVE-2026-66723 | Deferred | 未確認 | CWE-862 | MWDB Core versions >=2.2.0 and <2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming re |
| CVE-2026-66724 | Deferred | 未確認 | CWE-862 | MWDB Core versions >=2.0.0 and <2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POS |
| CVE-2026-66729 | Deferred | 未確認 | CWE-125 | facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process |
| CVE-2026-66730 | Deferred | 未確認 | CWE-835 | facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker pro |
| CVE-2026-66731 | Deferred | 未確認 | CWE-125 | facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that allows unauthenticated remote attackers to crash the s |
| CVE-2026-66737 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-66745 | Deferred | 未確認 | CWE-94 | Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrativ |
| CVE-2026-66746 | Deferred | 未確認 | CWE-113 | Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return (0x0D) |
| CVE-2026-66748 | Deferred | 未確認 | CWE-94 | Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom_fields manage permission to execute arbitrary |
| CVE-2026-66749 | Deferred | 未確認 | CWE-476 | Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room p |
| CVE-2026-66750 | Deferred | 未確認 | CWE-862 | Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected r |
| CVE-2026-66751 | Deferred | 未確認 | CWE-862 | Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to |
| CVE-2026-66752 | Deferred | 未確認 | CWE-444 | tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with a |
| CVE-2026-66753 | Deferred | 未確認 | CWE-113 | tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values o |
| CVE-2026-66754 | Deferred | 未確認 | CWE-617 | Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove_prefix function that allows remote unauthenticated attackers to crash the server by |
| CVE-2026-66755 | Analyzed | 未確認 | CWE-22 | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a direc |
| CVE-2026-66756 | Analyzed | 未確認 | CWE-424 | Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to ve |
| CVE-2026-66757 | Analyzed | 未確認 | CWE-190 | A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zs |
| CVE-2026-66758 | Modified | 未確認 | CWE-190 | A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height |
| CVE-2026-66759 | Analyzed | 未確認 | CWE-125 | A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if th |
| CVE-2026-66803 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network. |
| CVE-2026-6682 | Analyzed | 未確認 | CWE-190 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and unsafe |
| CVE-2026-66824 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript |
| CVE-2026-66825 | Deferred | 未確認 | CWE-79 | Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, such as url, uri, href, link, website, o |
| CVE-2026-6683 | Analyzed | 未確認 | CWE-369 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations. This maps to CWE-369 (D |
| CVE-2026-6684 | Analyzed | 未確認 | CWE-835 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field GPTH_PtNum, enabling extremely long or |
| CVE-2026-6685 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority following a notification that the vulnerability determination was made in error. After re | |
| CVE-2026-6686 | Analyzed | 未確認 | CWE-908 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters. This maps to CWE-908 (Use |
| CVE-2026-6687 | Analyzed | 未確認 | CWE-121 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (S |
| CVE-2026-6688 | Analyzed | 未確認 | CWE-120 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; ma |
| CVE-2026-66913 | Deferred | 未確認 | CWE-400 | Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-com |
| CVE-2026-66918 | Deferred | 未確認 | CWE-79 | Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserting it into the document. When rendering a graph node, |
| CVE-2026-66919 | Deferred | 未確認 | CWE-79 | Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions originating from graph data were interpolated directly into |
| CVE-2026-66920 | Deferred | 未確認 | CWE-400, CWE-674 | Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, whil |
| CVE-2026-66921 | Deferred | 未確認 | CWE-79 | Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolating it into both the data-node-name attribute and the body |
| CVE-2026-66922 | Deferred | 未確認 | CWE-1321 | Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers mat |
| CVE-2026-67173 | Deferred | 未確認 | CWE-918 | Pivotick did not validate the URL scheme of node imagePath values derived from graph data before assigning them to SVG image resources. An attacker able to supply crafted graph dat |
| CVE-2026-67174 | Deferred | 未確認 | CWE-79 | Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities. The tryResolveHTMLElement function treated any |
| CVE-2026-67178 | Deferred | 未確認 | CWE-601 | MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-to-HTTPS redirect: Redirect permanent / https://misp.example |
| CVE-2026-67181 | Deferred | 未確認 | CWE-444 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize HTTP message boundaries by exploiting improper header for |
| CVE-2026-67182 | Deferred | 未確認 | CWE-444 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) in |
| CVE-2026-67183 | Deferred | 未確認 | CWE-401 | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests. Each req |
| CVE-2026-67184 | Deferred | 未確認 | CWE-476 | TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request l |
| CVE-2026-67185 | Deferred | 未確認 | CWE-22 | TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are c |
| CVE-2026-67188 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-67191 | Deferred | 未確認 | CWE-122 | Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer |
| CVE-2026-67192 | Deferred | 未確認 | CWE-121 | Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed |
| CVE-2026-67193 | Deferred | 未確認 | CWE-203 | Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the server's current GetTickCount() value by sending |
| CVE-2026-67194 | Deferred | 未確認 | CWE-674 | Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH |
| CVE-2026-67201 | Deferred | 未確認 | CWE-436 | V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting |
| CVE-2026-67206 | Deferred | 未確認 | CWE-434 | Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to create arbitrary PHP files by exploiting mis |
| CVE-2026-67207 | Deferred | 未確認 | CWE-697 | Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup fu |
| CVE-2026-67208 | Deferred | 未確認 | CWE-1188, CWE-306 | Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 da |
| CVE-2026-67213 | Analyzed | 未確認 | CWE-835 | nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generat |
| CVE-2026-67214 | Analyzed | 未確認 | CWE-835 | nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions ar |
| CVE-2026-67215 | Analyzed | 未確認 | CWE-674 | cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtil |
| CVE-2026-67216 | Analyzed | 未確認 | CWE-407 | cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in e |
| CVE-2026-67217 | Analyzed | 未確認 | CWE-696 | cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move op |
| CVE-2026-67244 | Analyzed | 未確認 | CWE-134 | A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processe |
| CVE-2026-67245 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before |
| CVE-2026-67246 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated befo |
| CVE-2026-67247 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before bei |
| CVE-2026-67248 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being |
| CVE-2026-67345 | Deferred | 未確認 | CWE-183 | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches() that allows remote attackers |
| CVE-2026-67346 | Deferred | 未確認 | CWE-918 | Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolu |
| CVE-2026-67347 | Deferred | 未確認 | CWE-863 | Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update methods that al |
| CVE-2026-67348 | Deferred | 未確認 | CWE-639 | Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's execution data. At |
| CVE-2026-67349 | Deferred | 未確認 | CWE-306 | OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environment variable containing cloud provider credentials. Addition |
| CVE-2026-67350 | Deferred | 未確認 | CWE-601 | Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a mali |
| CVE-2026-67351 | Deferred | 未確認 | CWE-304 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use th |
| CVE-2026-6740 | Deferred | 未確認 | CWE-79 | The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon' parameter in all ver |
| CVE-2026-6742 | Deferred | 未確認 | CWE-79 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'additional' parameter in all versions up to, and including, 2026.1 due to insufficien |
| CVE-2026-67424 | Deferred | 未確認 | CWE-918 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules/atomic/http/g |
| CVE-2026-67425 | Deferred | 未確認 | CWE-201, CWE-522 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the enviro |
| CVE-2026-67426 | Deferred | 未確認 | CWE-306, CWE-522, CWE-918 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the standalone flyto-verification service in src/core/verification_service.py exposes una |
| CVE-2026-67427 | Deferred | 未確認 | CWE-522, CWE-668, CWE-693 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, the workflow engine variable resolver expands ${env.VAR} for any host environment variabl |
| CVE-2026-67428 | Deferred | 未確認 | CWE-918 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/third_party/developer/http/requests.py, |
| CVE-2026-67429 | Deferred | 未確認 | CWE-22, CWE-73 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled output_dir instead |
| CVE-2026-67430 | Deferred | 未確認 | CWE-401, CWE-770 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not expi |
| CVE-2026-67431 | Deferred | 未確認 | CWE-284 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind |
| CVE-2026-67432 | Deferred | 未確認 | CWE-770 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and par |
| CVE-2026-67433 | Awaiting Analysis | 未確認 | CWE-367, CWE-59 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration |
| CVE-2026-67435 | Awaiting Analysis | 未確認 | CWE-200, CWE-918 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects |
| CVE-2026-67436 | Awaiting Analysis | 未確認 | CWE-20, CWE-200, CWE-918 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs |
| CVE-2026-67437 | Deferred | 未確認 | CWE-400, CWE-401, CWE-770 | OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/restapi_auth_oauth2.go OAuth2 login handl |
| CVE-2026-67438 | Deferred | 未確認 | CWE-78 | OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/arguments.go checkShellArgumentSafety function |
| CVE-2026-67439 | Deferred | 未確認 | CWE-863 | OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGet |
| CVE-2026-67527 | Deferred | 未確認 | CWE-862 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api/v3/work_packages/{id} accepted _links.fileLinks and allowed authenticated users with |
| CVE-2026-67528 | Deferred | 未確認 | CWE-863 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/custom_options/:id resolved CustomOption records by global numeric id and allowed Us |
| CVE-2026-67529 | Deferred | 未確認 | CWE-200, CWE-862 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/time_entries and GET /api/v3/cost_entries rendered _links.workPackage.title and _lin |
| CVE-2026-67530 | Deferred | 未確認 | CWE-918 | WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validation in src/lib/automati |
| CVE-2026-67550 | Awaiting Analysis | 未確認 | CWE-125 | re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-1 |
| CVE-2026-67594 | Deferred | 未確認 | CWE-306 | Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached C |
| CVE-2026-67595 | Deferred | 未確認 | CWE-506 | VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote |
| CVE-2026-67596 | Deferred | 未確認 | CWE-261 | CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by re |
| CVE-2026-67607 | Deferred | 未確認 | CWE-367 | LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c that allows remote unaut |
| CVE-2026-67822 | Deferred | 未確認 | CWE-121 | Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled ' |
| CVE-2026-6790 | Analyzed | 未確認 | CWE-20 | In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present). |
| CVE-2026-6792 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from |
| CVE-2026-6793 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll allows Stored XSS. This i |
| CVE-2026-6801 | Deferred | 未確認 | CWE-200 | The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it pos |
| CVE-2026-6802 | Deferred | 未確認 | CWE-639 | The Easy Upload Files During Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.0.1. This is due to missing authorization ch |
| CVE-2026-6803 | Deferred | 未確認 | CWE-862 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.12. This is due to missing capabi |
| CVE-2026-6804 | Deferred | 未確認 | CWE-862 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. This is due to the plugin not |
| CVE-2026-6818 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'special_requests' parameter in all versions up to, and includin |
| CVE-2026-6820 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 1.8.8 du |
| CVE-2026-6847 | Awaiting Analysis | 未確認 | CWE-306 | Remote Code Execution vulnerability exists in ThemisNETPanel due to missing authentication for a critical file upload function. The application exposes an endpoint that allows unau |
| CVE-2026-68499 | Awaiting Analysis | 未確認 | CWE-835 | re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the |
| CVE-2026-6850 | Analyzed | 未確認 | CWE-1333 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of message attachment field values, which allows an authenticate |
| CVE-2026-68500 | Deferred | 未確認 | CWE-639 | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /{_locale}/update-payment payment we |
| CVE-2026-68501 | Deferred | 未確認 | CWE-639 | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's GET /{_locale}/thank-you PageRedirectCont |
| CVE-2026-68502 | Deferred | 未確認 | CWE-306 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handle |
| CVE-2026-68503 | Deferred | 未確認 | CWE-1392 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and |
| CVE-2026-6851 | Analyzed | 未確認 | CWE-59 | An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows a |
| CVE-2026-6854 | Deferred | 未確認 | CWE-89 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mc_auth' parameter in all versions up to, and including, 3. |
| CVE-2026-68562 | Awaiting Analysis | 未確認 | CWE-610 | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a sp |
| CVE-2026-68563 | Awaiting Analysis | 未確認 | CWE-732 | A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreS |
| CVE-2026-68574 | Rejected | 未確認 | Rejected reason: Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked. | |
| CVE-2026-68575 | Rejected | 未確認 | Rejected reason: Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked. | |
| CVE-2026-68576 | Rejected | 未確認 | Rejected reason: Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked. | |
| CVE-2026-68577 | Rejected | 未確認 | Rejected reason: Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked. | |
| CVE-2026-6872 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-6875 | Awaiting Analysis | 未確認 | CWE-94 | ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certai |
| CVE-2026-68770 | Deferred | 未確認 | CWE-94 | sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_cla |
| CVE-2026-68771 | Deferred | 未確認 | CWE-502 | ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by up |
| CVE-2026-6879 | Awaiting Analysis | 未確認 | CWE-407 | `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documen |
| CVE-2026-6881 | Deferred | 未確認 | CWE-89 | A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via |
| CVE-2026-6889 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6890 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6896 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have al |
| CVE-2026-6900 | Deferred | 未確認 | CWE-295 | Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. |
| CVE-2026-6901 | Deferred | 未確認 | CWE-426 | Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. |
| CVE-2026-6910 | Deferred | 未確認 | CWE-79 | The Bookero.pl – system rezerwacji online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `bookero_products` shortcode's `hide_products` (and `filter_prod |
| CVE-2026-6924 | Awaiting Analysis | 未確認 | CWE-336 | A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. |
| CVE-2026-6939 | Deferred | 未確認 | CWE-79 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, |
| CVE-2026-6952 | Awaiting Analysis | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an |
| CVE-2026-7007 | Analyzed | 未確認 | CWE-369 | The Zephyr ext2 file system validates the on-disk superblock in ext2_verify_disk_superblock() (subsys/fs/ext2/ext2_impl.c) before completing a mount. The validator checked the magi |
| CVE-2026-7017 | Deferred | 未確認 | CWE-522 | HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Locat |
| CVE-2026-7120 | Analyzed | 未確認 | CWE-180 | @fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and includ |
| CVE-2026-7162 | Deferred | 未確認 | CWE-190 | Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software. |
| CVE-2026-7185 | Deferred | 未確認 | CWE-22 | A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow |
| CVE-2026-7187 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS |
| CVE-2026-7189 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issu |
| CVE-2026-7232 | Deferred | 未確認 | CWE-79 | The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '[parameter name]' parameter in all versions up to, and including, 3.9.14 due to insufficien |
| CVE-2026-7260 | Analyzed | 未確認 | CWE-121 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3. |
| CVE-2026-7311 | Deferred | 未確認 | CWE-22 | The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_converted_imag |
| CVE-2026-7328 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local atta |
| CVE-2026-7362 | Analyzed | 未確認 | CWE-284 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could al |
| CVE-2026-7364 | Analyzed | 未確認 | CWE-601 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Ve |
| CVE-2026-7380 | Deferred | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows XSS Targe |
| CVE-2026-7436 | Deferred | 未確認 | CWE-79 | The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcbm_best_seller` shortcode in all vers |
| CVE-2026-7483 | Deferred | 未確認 | CWE-269 | Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user. |
| CVE-2026-7484 | Deferred | 未確認 | CWE-472 | External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue af |
| CVE-2026-7488 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through |
| CVE-2026-7492 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have a |
| CVE-2026-7494 | Analyzed | 未確認 | CWE-918 | Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cau |
| CVE-2026-7517 | Deferred | 未確認 | CWE-79 | The Custom Payment Gateways for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alg_wc_cpg_input_fields' parameter in all versions up to, and |
| CVE-2026-7521 | Analyzed | 未確認 | CWE-22 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write |
| CVE-2026-7534 | Deferred | 未確認 | CWE-79 | The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint `/wp-json/wc-srp/v1/earning` in versions up to, a |
| CVE-2026-7543 | Deferred | 未確認 | CWE-79 | The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields' parameter in versions up to, and including, 2.7.1 due to insufficient input saniti |
| CVE-2026-7544 | Deferred | 未確認 | CWE-200 | The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the muxvideo_enqueue_settings_script. Th |
| CVE-2026-7558 | Deferred | 未確認 | CWE-862 | The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access in all versions up to and including 4.0.2. This is due to t |
| CVE-2026-7559 | Deferred | 未確認 | CWE-862 | The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.3.3. This is due |
| CVE-2026-7620 | Deferred | 未確認 | CWE-862 | The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1. This is due to the plugin not properly verifyi |
| CVE-2026-7639 | Analyzed | 未確認 | CWE-459 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory acce |
| CVE-2026-7640 | Deferred | 未確認 | CWE-79 | The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `customer-area-protected-content` shortcode in all versions u |
| CVE-2026-7655 | Deferred | 未確認 | CWE-640 | The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3. This is due to the plugin not properly validat |
| CVE-2026-7667 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Di |
| CVE-2026-7754 | Modified | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF pro |
| CVE-2026-7755 | Modified | 未確認 | CWE-20 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files. |
| CVE-2026-7769 | Analyzed | 未確認 | CWE-89 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 thr |
| CVE-2026-7771 | Analyzed | 未確認 | CWE-835 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of servi |
| CVE-2026-7775 | Analyzed | 未確認 | CWE-79 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through |
| CVE-2026-7828 | Modified | 未確認 | CWE-190 | UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the win_log() function allocates list nodes via |
| CVE-2026-7829 | Modified | 未確認 | CWE-787 | UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225-272, after strncpy_s copies a |
| CVE-2026-7830 | Modified | 未確認 | CWE-326, CWE-338 | UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is perform |
| CVE-2026-7831 | Modified | 未確認 | CWE-193, CWE-787 | UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied name |
| CVE-2026-7838 | Modified | 未確認 | CWE-190, CWE-787 | UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In vncviewer/ClientConnection.cpp, |
| CVE-2026-7839 | Modified | 未確認 | CWE-798 | UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on f |
| CVE-2026-7840 | Modified | 未確認 | CWE-787 | UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_replyhdr() in repeater/webgui/webu |
| CVE-2026-7849 | Deferred | 未確認 | CWE-77 | Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as r |
| CVE-2026-7868 | Analyzed | 未確認 | CWE-863 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges. |
| CVE-2026-7872 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user. |
| CVE-2026-8055 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-48866. Reason: This candidate is a reservation duplicate of CVE-2026-48866. Notes: All CVE user | |
| CVE-2026-8056 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filtering |
| CVE-2026-8058 | Analyzed | 未確認 | CWE-200 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log |
| CVE-2026-8075 | Analyzed | 未確認 | CWE-754 | Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another chan |
| CVE-2026-8079 | Analyzed | 未確認 | CWE-863 | In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process |
| CVE-2026-8082 | Deferred | 未確認 | CWE-89 | The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauth |
| CVE-2026-8085 | Analyzed | 未確認 | CWE-787 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of us |
| CVE-2026-8147 | Analyzed | 未確認 | CWE-284 | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to by |
| CVE-2026-8152 | Deferred | 未確認 | CWE-601, CWE-79 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) attack. When Unblu Spark is deployed with com.unblu.identifier |
| CVE-2026-8155 | Deferred | 未確認 | CWE-639 | The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, mod |
| CVE-2026-8164 | Deferred | 未確認 | CWE-427 | Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affect |
| CVE-2026-8167 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affect |
| CVE-2026-8169 | Awaiting Analysis | 未確認 | CWE-338 | ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random sou |
| CVE-2026-8170 | Awaiting Analysis | 未確認 | CWE-59 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privile |
| CVE-2026-8247 | Analyzed | 未確認 | CWE-120, CWE-787 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerabi |
| CVE-2026-8281 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-8284 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 bef |
| CVE-2026-8285 | Deferred | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 |
| CVE-2026-8286 | Modified | 未確認 | CWE-295 | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it |
| CVE-2026-8287 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocat |
| CVE-2026-8297 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services In |
| CVE-2026-8306 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows St |
| CVE-2026-8307 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Medi |
| CVE-2026-8308 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Polen Media Software and Information Services Website Template allows Reflecte |
| CVE-2026-8309 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Re |
| CVE-2026-8310 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. This issue affects Medi |
| CVE-2026-8312 | Analyzed | 未確認 | CWE-787 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of us |
| CVE-2026-8313 | Analyzed | 未確認 | CWE-787 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from improper validation of u |
| CVE-2026-8314 | Analyzed | 未確認 | CWE-787 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from improper validation of us |
| CVE-2026-8315 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This issue affects Mediküm |
| CVE-2026-8338 | Awaiting Analysis | 未確認 | CWE-288 | A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send |
| CVE-2026-8339 | Awaiting Analysis | 未確認 | CWE-89 | A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a sp |
| CVE-2026-8351 | Deferred | 未確認 | CWE-79 | The RTMKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget's 'Background Text' parameter in versions up to, and including, 2.0.7 T |
| CVE-2026-8377 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations. This issue affects |
| CVE-2026-8384 | Analyzed | 未確認 | CWE-647 | In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expe |
| CVE-2026-8387 | Awaiting Analysis | 未確認 | CWE-23 | A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` method |
| CVE-2026-8396 | Deferred | 未確認 | CWE-611 | Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External Linking. This issue affects NetGIS: from 5.0.66 |
| CVE-2026-8441 | Deferred | 未確認 | CWE-89 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp_load_more_revs AJAX action in versions up to, and including |
| CVE-2026-8458 | Modified | 未確認 | CWE-488 | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features |
| CVE-2026-8472 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have all |
| CVE-2026-8476 | Analyzed | 未確認 | CWE-502 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pick |
| CVE-2026-8480 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certificat |
| CVE-2026-8481 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts us |
| CVE-2026-8482 | Deferred | 未確認 | CWE-532 | A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secre |
| CVE-2026-8489 | Deferred | 未確認 | CWE-79 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-8497 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-n |
| CVE-2026-8505 | Modified | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system i |
| CVE-2026-8590 | Awaiting Analysis | 未確認 | Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubern | |
| CVE-2026-8593 | Deferred | 未確認 | CWE-862 | Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows users without permissions to view and |
| CVE-2026-8595 | Analyzed | 未確認 | CWE-79 | A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the |
| CVE-2026-8609 | Analyzed | 未確認 | CWE-400 | An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Gra |
| CVE-2026-8616 | Deferred | 未確認 | CWE-862 | The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fense_bp |
| CVE-2026-8635 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and a |
| CVE-2026-8649 | Analyzed | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025 |
| CVE-2026-8650 | Analyzed | 未確認 | CWE-23 | Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3. |
| CVE-2026-8651 | Analyzed | 未確認 | CWE-290 | Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025. |
| CVE-2026-8678 | Deferred | 未確認 | CWE-862 | The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.25.1. This is due to the plugin not properly verifying that a user i |
| CVE-2026-8699 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the web-based management interface of Archer C5 v6.8 routers, due to insufficient server-side validation an |
| CVE-2026-8789 | Deferred | 未確認 | CWE-863 | The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the `ea_delete_mul |
| CVE-2026-8791 | Deferred | 未確認 | CWE-79 | The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `bookingWebsiteUrl` setting in all versions up to, and including, 1.0.17 due to |
| CVE-2026-8800 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3. |
| CVE-2026-8801 | Analyzed | 未確認 | CWE-46 | Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4. |
| CVE-2026-8804 | Awaiting Analysis | 未確認 | CWE-312, CWE-313 | Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing |
| CVE-2026-8825 | Deferred | 未確認 | CWE-200 | The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authent |
| CVE-2026-8848 | Deferred | 未確認 | CWE-862 | The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, |
| CVE-2026-8857 | Analyzed | 未確認 | CWE-94 | A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeli |
| CVE-2026-8859 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component |
| CVE-2026-8861 | Analyzed | 未確認 | CWE-209 | IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be use |
| CVE-2026-8892 | Deferred | 未確認 | CWE-79 | The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Business Address Meta Fields in all versions |
| CVE-2026-8919 | Deferred | 未確認 | CWE-942 | Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user to visit a crafted web |
| CVE-2026-8920 | Deferred | 未確認 | CWE-73, CWE-923 | Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operation |
| CVE-2026-8921 | Deferred | 未確認 | CWE-73 | External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer |
| CVE-2026-8924 | Modified | 未確認 | CWE-201 | A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check. This enables an attacker-controlled origin to |
| CVE-2026-8925 | Modified | 未確認 | CWE-415 | The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer t |
| CVE-2026-8926 | Modified | 未確認 | CWE-522 | When asking curl to use a `.netrc` file to find credentials and at the same time specifying a URL with a username (without a password), like `https://[email protected]/`, curl could |
| CVE-2026-8927 | Modified | 未確認 | CWE-294 | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. S |
| CVE-2026-8932 | Modified | 未確認 | CWE-305 | libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used con |
| CVE-2026-8933 | Awaiting Analysis | 未確認 | CWE-250 | A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environmen |
| CVE-2026-8982 | Analyzed | 未確認 | CWE-798 | Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-sp |
| CVE-2026-8983 | Analyzed | 未確認 | CWE-798 | Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can |
| CVE-2026-8984 | Analyzed | 未確認 | CWE-94 | Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request to the /test endpoint |
| CVE-2026-8985 | Analyzed | 未確認 | CWE-78 | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply cra |
| CVE-2026-8986 | Analyzed | 未確認 | CWE-78 | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can s |
| CVE-2026-8987 | Analyzed | 未確認 | CWE-122 | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker c |
| CVE-2026-8988 | Analyzed | 未確認 | CWE-1191 | Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attac |
| CVE-2026-8989 | Analyzed | 未確認 | CWE-1191, CWE-1244 | Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical acc |
| CVE-2026-8996 | Deferred | 未確認 | CWE-862 | The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent |
| CVE-2026-9007 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site Scripting (XSS). S |
| CVE-2026-9017 | Deferred | 未確認 | CWE-862 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. This is due to the plugi |
| CVE-2026-9021 | Deferred | 未確認 | CWE-862 | The Easy Invoice plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.19. This is due to the plugin registering the easy_invoice_accept |
| CVE-2026-9027 | Deferred | 未確認 | CWE-347 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all versions up to, and inclu |
| CVE-2026-9028 | Deferred | 未確認 | CWE-862 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4. This is due to the plugin not prop |
| CVE-2026-9044 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary comma |
| CVE-2026-9046 | Deferred | 未確認 | CWE-277 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when i |
| CVE-2026-9066 | Deferred | 未確認 | CWE-79 | The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript f |
| CVE-2026-9074 | Analyzed | 未確認 | CWE-89 | IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality. |
| CVE-2026-9079 | Modified | 未確認 | CWE-522 | libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers t |
| CVE-2026-9080 | Modified | 未確認 | CWE-416 | Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangli |
| CVE-2026-9085 | Deferred | 未確認 | CWE-284, CWE-732 | Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allo |
| CVE-2026-9103 | Analyzed | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoin |
| CVE-2026-9107 | Deferred | 未確認 | CWE-79 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'meta[kaliforms_field_components]' parameter in all |
| CVE-2026-9108 | Analyzed | 未確認 | CWE-22 | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or valid |
| CVE-2026-9127 | Analyzed | 未確認 | CWE-863 | A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to mo |
| CVE-2026-9128 | Analyzed | 未確認 | CWE-428 | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the |
| CVE-2026-9135 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies compone |
| CVE-2026-9140 | Awaiting Analysis | 未確認 | CWE-770 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the device to become overl |
| CVE-2026-9145 | Deferred | 未確認 | CWE-22 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via the create_entry_el() function in versions up to, and includ |
| CVE-2026-9147 | Deferred | 未確認 | CWE-94 | uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for examp |
| CVE-2026-9148 | Deferred | 未確認 | CWE-79 | The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is d |
| CVE-2026-9165 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authen |
| CVE-2026-9171 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker co |
| CVE-2026-9177 | Awaiting Analysis | 未確認 | CWE-1336 | A Server-Side Template Injection (SSTI) vulnerability was identified in the mail template functionality of the Axway SecureTransport product in version 5.5-20260326. This flaw a |
| CVE-2026-9180 | Deferred | 未確認 | CWE-639 | The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.4.4. This is due to |
| CVE-2026-9181 | Modified | 未確認 | CWE-22 | Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An unauthenticated attacker could exploit this issue by sending cr |
| CVE-2026-9182 | Modified | 未確認 | CWE-434 | Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Su |
| CVE-2026-9188 | Deferred | 未確認 | CWE-639 | The Appointment Bookings for Zoom GoogleMeet and more – Wappointment plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.7. |
| CVE-2026-9198 | Analyzed | 掲載 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (execut |
| CVE-2026-9202 | Analyzed | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployme |
| CVE-2026-9230 | Deferred | 未確認 | CWE-862 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due t |
| CVE-2026-9235 | Deferred | 未確認 | CWE-862 | The DHL eCommerce (Benelux) for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check and missing nonce ver |
| CVE-2026-9237 | Deferred | 未確認 | CWE-862 | The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due |
| CVE-2026-9240 | Deferred | 未確認 | CWE-862 | The Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the upd |
| CVE-2026-9253 | Deferred | 未確認 | CWE-79 | The WP Cost Estimation & Payment Forms Builder (E&P Forms) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customerInfos' parameter in all versions up to |
| CVE-2026-9272 | Analyzed | 未確認 | CWE-89 | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection Syst |
| CVE-2026-9282 | Deferred | 未確認 | CWE-22 | The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for u |
| CVE-2026-9292 | Awaiting Analysis | 未確認 | CWE-79 | A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input withi |
| CVE-2026-9322 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP requ |
| CVE-2026-9323 | Deferred | 未確認 | CWE-338 | The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Pyth |
| CVE-2026-9341 | Deferred | 未確認 | CWE-639 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, |
| CVE-2026-9492 | Deferred | 未確認 | CWE-782 | The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local a |
| CVE-2026-9494 | Awaiting Analysis | 未確認 | CWE-214 | An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/l |
| CVE-2026-9499 | Deferred | 未確認 | CWE-125 | An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is not NUL-terminated (for exa |
| CVE-2026-9537 | Deferred | 未確認 | CWE-208 | Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HM |
| CVE-2026-9545 | Modified | 未確認 | CWE-200 | In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's i |
| CVE-2026-9546 | Modified | 未確認 | CWE-200 | A vulnerability in libcurl caused the HTTP `Referer:` header to persist even when explicitly cleared. While the documentation states that passing NULL to `CURLOPT_REFERER` suppress |
| CVE-2026-9547 | Modified | 未確認 | CWE-297 | When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an untrusted server. This |
| CVE-2026-9561 | Analyzed | 未確認 | CWE-345, CWE-348, CWE-807 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log entries. The org.eclips |
| CVE-2026-9563 | Deferred | 未確認 | CWE-400, CWE-770 | In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a si |
| CVE-2026-9571 | Analyzed | 未確認 | CWE-305 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth refresh tokens upon user account deactivation, which allows a deactivated user |
| CVE-2026-9577 | Deferred | 未確認 | CWE-79 | The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the admin settings page (`admin.php?page=pos |
| CVE-2026-9585 | Deferred | 未確認 | CWE-79 | An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sanitize the p |
| CVE-2026-9586 | Analyzed | 掲載 | CWE-89 | An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and dire |
| CVE-2026-9587 | Deferred | 未確認 | CWE-73 | An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the soun |
| CVE-2026-9588 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification template functionality. The submit_modify_v |
| CVE-2026-9592 | Deferred | 未確認 | CWE-598 | SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclose |
| CVE-2026-9597 | Analyzed | 未確認 | CWE-305 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which all |
| CVE-2026-9602 | Analyzed | 未確認 | CWE-400 | Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash th |
| CVE-2026-9611 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-9626 | Deferred | 未確認 | CWE-79 | The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the post_comment API endpoint in versions up to, and including, 4 |
| CVE-2026-9635 | Deferred | 未確認 | CWE-79 | The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions up to, and including, |
| CVE-2026-9636 | Awaiting Analysis | 未確認 | CWE-299 | A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue ste |
| CVE-2026-9653 | Awaiting Analysis | 未確認 | CWE-354 | A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on |
| CVE-2026-9656 | Deferred | 未確認 | CWE-200 | The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via t |
| CVE-2026-9680 | Deferred | 未確認 | CWE-1188 | Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on al |
| CVE-2026-9695 | Awaiting Analysis | 未確認 | CWE-287 | An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server. |
| CVE-2026-9700 | Deferred | 未確認 | CWE-89 | The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the |
| CVE-2026-9701 | Deferred | 未確認 | CWE-289 | The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the passwo |
| CVE-2026-9708 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which |
| CVE-2026-9713 | Deferred | 未確認 | CWE-89 | The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the |
| CVE-2026-9720 | Deferred | 未確認 | CWE-352 | The Facturación Electrónica Costa Rica plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incor |
| CVE-2026-9725 | Deferred | 未確認 | CWE-22 | The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 2.5.2 This is due to ins |
| CVE-2026-9726 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce (Basket) allows Object Injection. This issue affec |
| CVE-2026-9729 | Deferred | 未確認 | CWE-79 | The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notification_body' parameters |
| CVE-2026-9731 | Deferred | 未確認 | CWE-352 | The Wp Js Detect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.9. This is due to missing or incorrect nonce validation |
| CVE-2026-9734 | Deferred | 未確認 | CWE-352 | The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect non |
| CVE-2026-9737 | Analyzed | 未確認 | CWE-617 | During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformati |
| CVE-2026-9738 | Deferred | 未確認 | CWE-79 | The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content_position_css' parameter in all versions up to, and includi |
| CVE-2026-9756 | Deferred | 未確認 | CWE-79 | The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute in all versions up to, and includ |
| CVE-2026-9762 | Analyzed | 未確認 | CWE-94 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. |
| CVE-2026-9765 | Deferred | 未確認 | CWE-284 | Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken” when a user can access resources they are not autho |
| CVE-2026-9770 | Analyzed | 未確認 | CWE-321 | Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmwa |
| CVE-2026-9810 | Deferred | 未確認 | CWE-269 | The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an administrator session, allowing unauthenticat |
| CVE-2026-9820 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obt |
| CVE-2026-9824 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to check the manage_shared_channels permission in the /share-channel autocomplete handler, which al |
| CVE-2026-9830 | Deferred | 未確認 | CWE-287 | The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reac |
| CVE-2026-9833 | Deferred | 未確認 | CWE-79 | The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the resp |
| CVE-2026-9834 | Deferred | 未確認 | CWE-77 | The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7.11 via |
| CVE-2026-9838 | Deferred | 未確認 | CWE-79 | The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insuffici |
| CVE-2026-9842 | Deferred | 未確認 | CWE-269 | The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin assigning t |
| CVE-2026-9857 | Deferred | 未確認 | CWE-862 | The Invoice123 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.0. This is due to the plugin not properly verifying that a user |